Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/UUYQ5-NwbsCTmb2KB6K-q-ksIOQ.roa
File: UUYQ5-NwbsCTmb2KB6K-q-ksIOQ.roa (raw, json)
Hash identifier: 1rw3woSzpbHDyIQ12JdO4X+C2MXUkrS1II+PPWa/mZ0=
Subject key identifier: 51:46:10:E7:E3:70:6E:C0:93:99:BD:8A:07:A2:BE:AB:E9:2C:20:E4
Certificate issuer: /CN=8115992494f84b601f919431d123614149babaee
Certificate serial: 018CC26D4B8D763B33A3A799EF4F4131B008
Authority key identifier: 81:15:99:24:94:F8:4B:60:1F:91:94:31:D1:23:61:41:49:BA:BA:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRWZJJT4S2AfkZQx0SNhQUm6uu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/UUYQ5-NwbsCTmb2KB6K-q-ksIOQ.roa
Signing time: Mon 01 Jan 2024 00:29:51 +0000
ROA not before: Mon 01 Jan 2024 00:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57783
IP address blocks: 91.231.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4b:8d:76:3b:33:a3:a7:99:ef:4f:41:31:b0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8115992494f84b601f919431d123614149babaee
Validity
Not Before: Jan 1 00:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=514610e7e3706ec09399bd8a07a2beabe92c20e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5a:8d:d6:ef:a3:19:67:79:6e:55:36:56:07:
b5:ad:e4:58:2b:32:1b:2f:5d:1a:cd:20:51:5a:95:
3e:5b:2a:51:a8:e9:95:20:6b:bb:b3:cd:c1:43:b7:
9a:4d:16:3d:fd:df:b7:64:44:cd:10:c7:77:4f:c0:
be:c4:59:1d:c5:5a:02:c3:ec:5e:33:d7:1d:e9:ab:
d6:8f:d5:71:a5:57:64:b0:08:9f:12:35:3f:ca:e0:
27:ad:9e:c2:0c:15:c5:94:37:97:c9:f3:aa:f5:f2:
9e:13:2e:d0:9b:07:aa:ca:98:1c:aa:c9:a6:97:8d:
bb:cf:57:9a:80:81:a8:48:08:9d:37:ae:6b:29:76:
47:f9:c5:f1:ea:03:3d:4e:06:2a:d4:10:cb:48:4c:
9b:e5:c2:96:bd:6a:3b:b3:bb:4f:29:1d:6c:81:ce:
30:93:b4:ca:a9:5e:a2:85:c8:9c:ea:19:ad:ab:a6:
2e:12:b3:f5:92:36:eb:74:86:e7:50:96:40:68:f8:
1e:82:f5:11:d1:68:50:25:cb:7e:cf:ab:ad:66:0f:
3d:43:cf:2c:eb:f4:91:c1:f7:4c:af:6c:42:95:b4:
a5:d0:24:41:50:13:2c:a4:62:7f:da:25:87:16:cb:
02:61:5e:6e:45:4d:bb:20:b1:64:e7:7d:2e:2f:26:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:46:10:E7:E3:70:6E:C0:93:99:BD:8A:07:A2:BE:AB:E9:2C:20:E4
X509v3 Authority Key Identifier:
keyid:81:15:99:24:94:F8:4B:60:1F:91:94:31:D1:23:61:41:49:BA:BA:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRWZJJT4S2AfkZQx0SNhQUm6uu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/UUYQ5-NwbsCTmb2KB6K-q-ksIOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/gRWZJJT4S2AfkZQx0SNhQUm6uu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:df:33:57:b0:94:be:e9:de:0d:f4:6c:3d:cc:1c:c2:f6:f4:
66:a5:25:bb:4a:6b:63:ee:28:d4:56:5d:17:46:d2:ee:bb:73:
91:5f:16:f4:80:95:74:42:91:e3:38:c6:33:9f:18:24:51:18:
d4:d8:1a:dc:8a:6d:75:61:59:51:d3:5c:5f:61:54:84:8e:a7:
59:1c:af:8f:8a:80:ab:e2:9d:bb:ef:77:53:cd:77:6f:29:ec:
62:fe:7a:71:2a:1e:26:4f:22:61:3b:cc:10:eb:5f:72:81:d6:
63:d6:e5:66:57:cd:a4:ef:c5:67:20:6c:b2:f7:c0:22:f5:49:
f7:82:61:c7:6e:64:6c:68:10:eb:88:53:43:57:f4:45:86:80:
73:c5:7f:e5:67:6e:b1:cb:95:a4:8a:6a:9f:31:de:bb:11:35:
8b:88:80:16:78:99:88:4f:dc:7d:99:f1:73:02:9d:15:dc:ac:
3d:ff:3b:11:6e:27:0a:dd:8e:fa:f8:72:12:42:7c:c2:61:18:
7d:81:1c:9d:1f:ef:d7:eb:01:61:b6:46:ff:66:45:6b:7f:82:
30:a3:b5:df:b7:f0:56:8a:1a:7b:ff:cc:20:7a:9f:66:1d:19:
52:46:42:74:df:3b:3a:03:6b:5b:d3:09:8a:0d:b4:df:7c:79:
85:b1:22:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:47 2025 by rpki-client