Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/U-t6muEZr7pNFroiZDAmj1SwdlM.roa
File: U-t6muEZr7pNFroiZDAmj1SwdlM.roa (raw, json)
Hash identifier: Q/H0JPhez1qYtzjdS0HazxdGlKUwOr6kovdCBLCRjsA=
Subject key identifier: 53:EB:7A:9A:E1:19:AF:BA:4D:16:BA:22:64:30:26:8F:54:B0:76:53
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 0194258ECBD603EFEFFB2060B3DCCF8E3A99
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/U-t6muEZr7pNFroiZDAmj1SwdlM.roa
Signing time: Thu 02 Jan 2025 05:48:22 +0000
ROA not before: Thu 02 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 178.18.194.0/24 maxlen: 24
185.93.250.0/24 maxlen: 24
185.93.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:cb:d6:03:ef:ef:fb:20:60:b3:dc:cf:8e:3a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Jan 2 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53eb7a9ae119afba4d16ba226430268f54b07653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:90:4b:06:62:69:07:fa:51:c1:37:71:ef:
36:0b:ce:fa:9d:6c:39:9a:b9:f7:04:77:ec:39:a1:
21:10:6b:11:d8:9d:5b:c8:fa:39:57:75:2a:43:c0:
35:f3:6c:65:b9:69:2a:48:64:70:ba:26:58:8a:89:
89:79:a2:9e:0c:c5:bd:12:f5:16:29:bd:4d:de:91:
17:e6:40:ec:aa:ef:b7:3b:ab:a6:06:95:be:63:ce:
a6:ad:6f:a2:6a:4d:00:9f:5b:60:34:33:76:a3:e1:
57:81:16:5b:11:2c:8c:89:8b:8e:41:37:db:a2:29:
ef:28:b7:38:33:46:4a:0f:8d:79:d4:df:bf:1d:d9:
ab:a2:28:88:da:98:6b:9e:6e:8f:9c:a5:97:2a:39:
50:6b:af:5c:5f:62:68:b4:8f:7c:a0:de:cb:b5:17:
e8:a0:be:6f:a3:34:b9:d4:a7:3e:8f:4f:b7:54:0c:
38:ab:c0:a5:ef:6b:02:0c:45:b4:30:fd:87:71:93:
67:66:1b:19:98:ab:b9:a4:3f:c2:af:17:30:ae:ce:
ce:01:bc:3d:83:f2:d1:be:9a:f6:82:72:84:c0:b7:
64:fe:a9:52:28:eb:66:0d:ca:08:32:18:90:e7:11:
51:c7:9d:38:b8:6c:1b:11:66:4c:4f:22:fe:45:6b:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EB:7A:9A:E1:19:AF:BA:4D:16:BA:22:64:30:26:8F:54:B0:76:53
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/U-t6muEZr7pNFroiZDAmj1SwdlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.194.0/24
185.93.250.0/23
Signature Algorithm: sha256WithRSAEncryption
30:8f:d6:d7:c3:0d:cb:46:dc:d4:08:b1:41:99:fe:28:eb:3c:
6c:fa:11:b9:56:3e:b7:68:ce:ed:e9:e3:fe:f6:32:c8:d7:fb:
c3:df:c5:d6:dc:06:12:98:25:1a:a1:b2:b7:e1:9e:1d:7b:4c:
69:28:89:85:74:f3:69:6f:4d:6e:f0:e8:99:57:08:73:e4:a6:
2d:1d:dc:6b:0b:f1:11:7a:51:5f:da:7b:b5:1d:41:19:52:9e:
d1:d1:7a:7f:34:7c:61:05:61:d7:98:e7:7b:66:d5:30:13:12:
a7:cf:51:02:06:7d:fb:cc:15:e8:ae:d3:af:c1:2c:5b:5a:56:
61:b1:31:d1:d2:24:17:3f:60:c5:90:ef:d1:9c:13:8b:82:e4:
75:bb:ec:8c:64:00:b0:6e:e3:47:31:ff:18:4d:2f:fb:1f:bb:
e9:97:47:1e:8a:31:55:37:b3:0e:00:75:ce:6f:be:ed:62:20:
c3:6e:56:a9:f0:6b:11:1b:4a:bc:04:34:7b:9a:4c:7f:ff:fb:
de:47:ed:1a:1f:cd:76:87:72:5e:59:41:7f:80:84:0d:38:b3:
2f:95:e0:6b:3e:db:c6:66:71:50:7d:48:fe:b4:51:f5:83:37:
e8:51:3f:5f:72:6a:79:8a:da:2c:ef:42:75:34:ba:7f:d1:1a:
00:cc:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:20:58 2025 by rpki-client