Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/UKqORdLzZXdOrDEcMxzidP1Tf04.roa
File: UKqORdLzZXdOrDEcMxzidP1Tf04.roa (raw, json)
Hash identifier: 993OGeNZfndwd7HXQtjHB4WsdW/h/7CpCQberKrZGUc=
Subject key identifier: 50:AA:8E:45:D2:F3:65:77:4E:AC:31:1C:33:1C:E2:74:FD:53:7F:4E
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 01941F8C1ACB781F4F0C764AD6D88A5BEDB0
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/UKqORdLzZXdOrDEcMxzidP1Tf04.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58175
IP address blocks: 193.200.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1a:cb:78:1f:4f:0c:76:4a:d6:d8:8a:5b:ed:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50aa8e45d2f365774eac311c331ce274fd537f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:26:a0:ac:50:36:17:25:c7:7c:f4:65:0c:
8c:9b:b7:dd:62:c3:df:d2:5b:ad:12:62:5b:1b:91:
3c:ba:00:85:71:7b:23:b0:a9:a2:c3:71:d2:b7:e7:
8b:b0:c2:59:8f:fc:90:bf:1e:06:5d:f9:34:1f:f7:
95:fb:88:1a:cd:1c:fc:d0:e4:bc:84:a4:74:48:46:
04:f4:76:4b:8f:02:a6:a4:b1:cf:18:ed:6d:b2:11:
1e:41:8e:08:74:54:25:48:60:81:4e:e4:cf:ee:4c:
30:11:d0:12:a9:5c:34:96:b0:36:b9:70:ac:a8:24:
5e:d7:3f:6f:8f:23:76:f6:3f:6a:cf:87:57:fe:e7:
6e:75:0c:15:64:5b:76:0b:8e:b2:a0:4e:ee:eb:53:
ca:85:b0:18:b6:f5:19:36:38:1e:0d:da:c7:98:bf:
d2:07:53:ca:70:b9:46:d2:f6:a5:9d:ba:1a:95:75:
45:53:69:41:21:ec:7b:f3:c2:52:f4:c5:b2:45:f7:
8c:f4:60:1c:2a:bc:a5:98:66:e2:74:41:78:56:5e:
e7:d3:2d:59:3a:81:50:77:d4:9c:24:19:b2:b5:88:
d0:cc:29:59:3a:90:35:7f:6f:d9:77:a5:b3:75:db:
2a:2c:6f:8f:0e:1a:77:51:5a:78:d1:b3:93:7a:dd:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AA:8E:45:D2:F3:65:77:4E:AC:31:1C:33:1C:E2:74:FD:53:7F:4E
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/UKqORdLzZXdOrDEcMxzidP1Tf04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:eb:bb:04:33:cc:57:1e:60:f3:a8:dd:73:58:19:3e:b9:30:
d6:29:63:e7:bf:57:55:f7:6d:0d:19:da:70:73:e2:3a:62:e1:
13:36:9f:60:3f:d7:b7:28:53:ca:cd:fb:05:cf:14:36:d2:65:
16:78:c4:0c:fa:d4:05:71:bb:4d:db:d8:09:9c:fc:30:c1:ab:
de:4a:48:c7:24:ab:66:e0:18:51:28:57:ed:51:1b:74:b2:d6:
7d:86:19:34:3e:34:87:c3:7d:20:c3:e4:ad:97:73:16:63:8a:
cb:23:48:77:51:0a:bf:81:38:c5:14:f9:4a:b5:a2:d8:06:0f:
c6:d0:67:fa:b1:5f:da:06:a1:63:f2:05:3a:93:32:22:fd:44:
49:0d:07:8f:34:34:63:cc:18:3e:11:0a:5a:f1:64:ec:8f:ee:
9d:7c:62:8c:1d:0a:d4:a7:8a:43:7b:54:96:1a:98:1a:ad:c2:
78:4a:7f:44:e2:ec:3b:e0:73:b9:19:0c:1d:34:33:29:29:cc:
51:f7:ad:cf:44:4d:9e:c8:aa:e6:6f:4c:6a:c6:32:06:49:6b:
b9:e8:d7:61:0e:64:a4:0e:b6:34:a8:a5:d2:12:f1:73:e4:92:
88:9a:84:2c:00:b7:20:8d:31:53:89:5b:1d:72:b5:5f:42:9e:
56:fc:41:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:28 2025 by rpki-client on console.sobornost.net