Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/UNVV8q9mxHzj40ukB0dOp3qehFE.roa
File: UNVV8q9mxHzj40ukB0dOp3qehFE.roa (raw, json)
Hash identifier: BXbVtWFAEKhtBygy5e3mBPkEaoCOBDieBmzKaOr8eAc=
Subject key identifier: 50:D5:55:F2:AF:66:C4:7C:E3:E3:4B:A4:07:47:4E:A7:7A:9E:84:51
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 01942144311CE57420A9AD03C89B47F13697
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/UNVV8q9mxHzj40ukB0dOp3qehFE.roa
Signing time: Wed 01 Jan 2025 09:48:24 +0000
ROA not before: Wed 01 Jan 2025 09:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49422
IP address blocks: 192.49.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:31:1c:e5:74:20:a9:ad:03:c8:9b:47:f1:36:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50d555f2af66c47ce3e34ba407474ea77a9e8451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:50:ab:28:5a:ed:88:2f:ab:b1:f9:00:fc:
e3:63:7e:89:57:3f:1e:cc:c0:8b:6f:35:c5:d8:cb:
f7:97:bc:93:73:27:97:17:70:ec:d0:03:09:d5:47:
46:ae:9a:1f:12:4d:35:05:ea:4a:ec:1c:31:7a:d3:
eb:53:5c:36:40:d4:63:30:df:f7:3d:4f:a9:68:7f:
21:54:d1:74:5f:bb:20:c7:cb:22:c5:ad:0b:df:ab:
6b:e0:72:f9:f3:41:ab:b7:77:ab:59:c5:c6:66:9f:
5a:71:04:3b:de:de:66:7a:10:84:89:04:8b:26:02:
81:e6:a4:b8:0e:a8:f3:db:7d:d3:48:f4:bc:c2:1a:
13:bc:97:97:d5:db:3d:bb:88:06:6a:6a:65:4c:5f:
42:24:30:cc:fc:be:6c:5f:19:a4:18:08:d4:e2:cf:
0d:61:c4:15:0f:18:ab:9a:b3:ae:f6:fe:ae:52:17:
f1:c1:0a:ef:a7:14:ff:f9:10:16:42:1c:6a:23:9b:
55:89:bb:58:77:a7:fb:a1:af:bd:19:c3:db:8c:6d:
7e:2e:a9:cd:cf:0a:ba:48:1b:49:51:5b:85:be:f8:
b5:5f:77:c4:30:01:2b:a2:c9:fd:30:54:49:41:79:
c1:ad:46:7a:c2:4c:57:dc:ac:47:88:b1:8f:7d:5f:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D5:55:F2:AF:66:C4:7C:E3:E3:4B:A4:07:47:4E:A7:7A:9E:84:51
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/UNVV8q9mxHzj40ukB0dOp3qehFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.49.90.0/24
Signature Algorithm: sha256WithRSAEncryption
94:72:b5:00:54:51:09:86:4c:3d:46:54:7a:c8:44:7f:c7:23:
f4:92:09:d3:a8:66:a9:f6:35:ba:4c:d9:c2:97:8f:a2:9f:c7:
3e:0a:8a:e4:52:a6:da:6e:be:32:ef:25:e9:be:79:d9:c5:b4:
c6:e0:92:9c:48:10:a8:2c:f8:b6:38:ef:29:ff:ae:59:25:71:
3f:e9:87:b1:78:58:7a:9a:48:68:a5:01:6c:d7:29:08:d7:a3:
aa:a9:4e:fd:87:5d:07:6c:01:36:c4:72:ba:51:6f:a4:83:19:
e5:05:9c:f7:63:9b:01:b4:7f:95:6a:98:e3:05:99:2d:cc:a3:
5f:20:5f:43:ce:52:62:9f:a1:3e:ad:a2:98:a9:40:49:1c:df:
17:33:ef:49:29:44:7b:60:6c:bb:2f:90:b2:28:7f:8f:8e:1e:
ea:99:db:a7:d6:63:5d:62:9f:fc:ce:83:f1:ed:f5:da:e5:cd:
1f:a8:e6:61:13:3c:2a:9d:97:7e:85:01:27:20:e0:9e:d6:2e:
6b:ad:41:e3:9c:82:55:87:e3:33:78:ef:73:42:3d:56:70:96:
69:87:e1:8c:da:51:47:d3:8f:01:ab:f0:70:6f:de:16:72:16:
ad:82:cb:ef:c8:f3:3e:72:08:fe:55:54:bf:4e:31:5c:44:d9:
5d:f0:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net