Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/UQg1PMXj1_xA8cNWapDDicWf9QE.roa
File: UQg1PMXj1_xA8cNWapDDicWf9QE.roa (raw, json)
Hash identifier: SNk8uKYXIWMnimS9vpTvdTlC1q8gr9Fg7CLCU0N94ls=
Subject key identifier: 51:08:35:3C:C5:E3:D7:FC:40:F1:C3:56:6A:90:C3:89:C5:9F:F5:01
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 019425219FB8A8F8693D3BBC0BACD25918F8
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/UQg1PMXj1_xA8cNWapDDicWf9QE.roa
Signing time: Thu 02 Jan 2025 03:49:08 +0000
ROA not before: Thu 02 Jan 2025 03:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59531
IP address blocks: 91.242.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9f:b8:a8:f8:69:3d:3b:bc:0b:ac:d2:59:18:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Jan 2 03:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5108353cc5e3d7fc40f1c3566a90c389c59ff501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:8e:25:ae:46:59:e9:79:8c:68:87:03:22:
eb:42:e8:c4:9a:5b:56:c7:6c:b2:b7:45:d4:8b:e0:
8d:eb:51:7d:aa:f5:c0:50:78:e2:e5:a9:28:42:2c:
32:3d:63:73:32:49:91:1f:b2:10:9e:57:eb:98:9d:
e6:c6:dd:60:b6:16:65:a4:28:02:85:4f:9c:68:3e:
eb:88:b1:9f:6a:05:40:15:c1:1e:ac:ad:bc:40:de:
35:e1:a2:54:06:c9:36:55:5c:9a:28:42:c6:10:83:
43:ab:fa:dc:86:ce:fc:b2:16:15:0e:4b:f0:32:a1:
d7:1a:f5:56:be:3a:58:50:8b:c8:2d:2a:7d:c4:d5:
3b:d2:a2:29:de:0c:6b:30:1e:ff:c6:63:ed:8b:be:
66:0a:33:de:0e:94:45:a5:1e:f5:d6:b5:e5:5a:80:
50:a1:05:79:3c:ef:b4:16:4c:26:99:35:9c:bf:81:
bd:94:c1:35:72:4b:cb:52:91:20:a2:78:2a:73:c6:
d1:8c:ec:fc:1a:e5:a0:e2:47:26:f7:6e:a1:b8:4a:
b7:54:03:85:d6:d4:91:11:f6:ee:37:b7:01:61:f6:
88:5b:a2:8f:4b:de:80:33:c1:48:ef:23:ca:86:8a:
36:02:5d:fb:f6:91:e6:2b:ae:11:77:29:14:c1:8b:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:08:35:3C:C5:E3:D7:FC:40:F1:C3:56:6A:90:C3:89:C5:9F:F5:01
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/UQg1PMXj1_xA8cNWapDDicWf9QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.208.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:9f:1a:d5:45:08:99:a0:0e:b4:84:8b:4b:56:9a:af:e2:30:
78:8e:c6:67:c7:93:6d:68:a6:13:52:f3:51:41:97:c2:cd:a5:
3c:5f:c2:52:52:4d:fd:3d:9f:c5:d9:f0:c5:4f:4e:cb:03:b5:
49:a5:cc:03:c8:80:d8:3b:46:84:70:1c:fa:58:f1:7d:64:48:
f3:b2:16:65:a6:db:ed:94:c0:66:4e:55:13:40:87:4a:f6:61:
d6:a3:3b:b4:41:cc:e1:cb:9f:aa:9d:55:69:3a:2c:b8:45:8a:
11:42:87:99:09:91:c3:25:b9:cb:92:68:0b:f9:ac:b6:0d:bc:
84:b0:96:38:5f:72:21:ba:72:4b:15:81:a4:63:2e:43:4f:eb:
0e:39:c6:e5:55:af:a0:ea:02:54:de:8f:f5:01:c0:04:4e:ee:
e7:52:db:34:97:1d:2b:07:13:59:54:25:02:22:47:07:50:90:
cd:47:63:8d:ca:f3:4f:20:42:89:d0:66:a7:2c:aa:72:b0:ad:
fe:96:b1:c8:b2:18:f1:70:a8:29:a2:00:c8:90:25:e2:81:2c:
ab:b1:17:0a:74:94:6a:66:60:c1:63:32:64:ce:66:12:84:9d:
42:2f:1a:19:c4:fb:e9:ac:a6:20:87:52:de:ae:29:fc:e3:0c:
47:57:62:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:43 2025 by rpki-client