Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/uQU12zYitg_amaVlwJpXM9XCEAY.roa
File: uQU12zYitg_amaVlwJpXM9XCEAY.roa (raw, json)
Hash identifier: IYdpyZTPtIiqFILl8uMqJOM+CkHBFW5wOhN+3p4JTWU=
Subject key identifier: B9:05:35:DB:36:22:B6:0F:DA:99:A5:65:C0:9A:57:33:D5:C2:10:06
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019423D7F98F8C26F55FE0F06A527100D651
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/uQU12zYitg_amaVlwJpXM9XCEAY.roa
Signing time: Wed 01 Jan 2025 21:49:04 +0000
ROA not before: Wed 01 Jan 2025 21:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210542
IP address blocks: 146.247.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f9:8f:8c:26:f5:5f:e0:f0:6a:52:71:00:d6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b90535db3622b60fda99a565c09a5733d5c21006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:55:30:00:53:e8:a9:88:9f:1d:5c:dd:8f:9e:
d4:aa:b4:32:48:f7:85:ae:ab:07:cb:ca:23:61:77:
1c:f1:2f:70:f9:32:19:e2:23:9a:eb:b9:be:a8:02:
d7:d9:7a:a4:1d:57:ed:52:70:86:cd:87:b7:96:7c:
32:9f:b3:17:87:ba:5b:6b:af:6c:0e:fd:48:74:09:
4b:ff:49:ef:56:12:eb:d7:3f:98:14:2c:23:67:c7:
17:7b:c8:ff:81:bc:05:bf:48:c8:6b:f5:fd:8e:ea:
c2:d7:dc:7e:b1:37:18:b1:2b:32:10:88:d2:cd:1b:
89:13:27:a8:33:71:70:a4:01:f6:0a:bc:fc:0f:35:
33:5c:8a:e0:39:8a:f3:83:78:9e:c6:c9:cc:2a:31:
fc:67:a3:19:5a:b1:32:4d:02:51:3b:ea:12:6f:6e:
4f:c7:28:ae:23:25:c9:0f:da:7f:74:9e:d8:40:e7:
b4:0d:14:f0:43:a7:68:9c:cc:b5:c4:02:28:2f:61:
32:7e:13:f1:8c:d0:b0:9c:f5:26:e6:04:cb:82:28:
84:1c:e4:2d:60:c9:3b:28:92:ec:3f:db:79:ba:2e:
ee:9f:0b:8a:33:3b:a5:89:78:60:0d:7c:14:fc:3a:
58:2f:76:a2:07:7c:fe:9c:7c:93:48:73:40:0e:3c:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:05:35:DB:36:22:B6:0F:DA:99:A5:65:C0:9A:57:33:D5:C2:10:06
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/uQU12zYitg_amaVlwJpXM9XCEAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.109.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c6:98:1f:1e:b1:75:28:8a:ce:54:75:0a:ad:a7:2b:3d:18:
52:49:06:82:88:98:02:21:df:86:91:6c:f4:ed:64:06:de:6d:
3c:8f:83:b7:bb:30:4d:4c:cf:03:99:05:e9:b5:b6:77:39:e4:
bd:e0:f7:0a:46:e5:e6:13:42:82:97:12:4a:28:f1:6c:93:de:
64:c2:75:50:bb:b8:4f:9b:33:91:a9:44:66:32:c3:8b:88:ac:
96:6d:45:0a:41:e3:be:58:63:55:61:97:37:07:a7:99:84:90:
60:f4:1b:10:a1:fe:b6:63:19:19:17:1f:a6:d3:ff:d2:9b:4d:
02:6c:5a:51:37:e8:01:44:1b:fe:10:71:12:f5:dc:4c:37:fc:
c0:9e:64:bf:46:d2:cf:42:a9:db:50:49:30:dc:92:50:31:3a:
b8:c5:b0:d2:36:6d:d8:06:5d:98:2a:26:c4:e3:6e:16:41:5e:
24:90:48:14:e6:84:e4:75:47:b9:6a:a2:d5:f5:77:03:8d:95:
ad:0d:00:4d:12:1b:9a:27:54:2a:b5:fa:9b:d5:ab:99:18:be:
f8:da:45:d9:06:ab:31:c9:d9:0d:7f:b1:0a:59:3c:10:19:09:
d8:b5:cd:59:9c:97:69:ed:0a:eb:16:f7:d0:5f:5c:e2:41:e6:
b6:8e:5f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:49:38 2025 by rpki-client