Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/uYFh_VUWIelVXy_oDiQCWPM5ZAg.roa
File: uYFh_VUWIelVXy_oDiQCWPM5ZAg.roa (raw, json)
Hash identifier: HgH2Bf6YxOfhcnv4hc8+KBaYB6o6R1j3iFpA4UR/vJs=
Subject key identifier: B9:81:61:FD:55:16:21:E9:55:5F:2F:E8:0E:24:02:58:F3:39:64:08
Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial: 01941FFA99AE8991187E6FDB905452610CA5
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/uYFh_VUWIelVXy_oDiQCWPM5ZAg.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58273
IP address blocks: 185.217.156.0/22 maxlen: 24
2a0b:cac0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:99:ae:89:91:18:7e:6f:db:90:54:52:61:0c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b98161fd551621e9555f2fe80e240258f3396408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:f7:ab:e1:1b:ba:c6:e1:f9:7c:e3:6a:ea:
7d:55:fa:62:c7:b3:39:e4:16:dd:76:6f:95:09:5a:
6a:c6:e0:d0:5b:c2:8e:55:fa:81:82:aa:26:77:da:
25:29:b5:f3:84:26:ca:39:9c:35:58:a3:b1:b1:7d:
13:ff:b3:7c:9e:c5:26:da:0d:7e:a7:78:00:6e:c3:
6c:4a:4c:15:f4:0b:d2:74:dc:c4:4d:38:52:c3:34:
5b:3c:0c:69:3d:a1:d8:ee:fb:7d:a3:be:f8:df:a9:
3b:c5:3d:b5:d7:23:ca:cb:6f:5f:db:0c:95:ae:1e:
26:fa:1f:d1:96:81:aa:77:8b:0d:5c:b7:a3:06:48:
87:43:7a:9f:64:fb:2c:66:23:47:b2:41:af:f8:1e:
05:a2:12:32:ab:9b:ea:50:2b:4f:c8:d1:98:64:99:
5a:c3:21:67:e8:92:82:57:7d:e5:45:f1:48:19:ae:
7e:38:ef:bf:2e:d0:8e:fc:5d:a9:60:7e:7b:c8:ad:
a4:9a:b5:33:e7:cc:3c:e2:ae:ae:34:3d:19:2d:9f:
47:24:c0:fb:57:40:26:dc:5d:b5:75:bb:e0:fe:d8:
0f:9c:df:7b:08:e9:49:b8:a7:fc:11:6c:b1:95:29:
b1:c6:cf:e9:fc:b0:62:bf:69:bc:48:eb:ad:b6:b1:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:81:61:FD:55:16:21:E9:55:5F:2F:E8:0E:24:02:58:F3:39:64:08
X509v3 Authority Key Identifier:
keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/uYFh_VUWIelVXy_oDiQCWPM5ZAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.156.0/22
IPv6:
2a0b:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
65:8d:b2:84:e5:3f:a2:b6:c8:08:fd:1c:31:f9:12:50:25:c9:
5d:07:a1:60:3e:e5:df:42:73:5c:40:14:ff:ae:09:78:47:4f:
a3:e1:05:92:2c:80:85:54:4d:ac:0f:40:1b:2a:e0:f9:6d:4a:
39:ac:b0:0c:a2:4b:b1:11:79:58:42:0b:89:dc:08:61:08:d0:
c5:15:14:45:3d:8c:b5:94:5e:77:73:cf:85:18:d0:36:f7:61:
35:52:17:47:0e:43:a0:6b:45:02:3a:77:fc:a4:26:07:17:0b:
10:82:c8:ca:af:02:d9:94:da:dc:d1:ee:70:ac:f7:a4:ff:ab:
00:1f:be:1d:3f:f9:8c:76:b5:a8:34:d1:d7:30:fe:5d:63:c2:
1e:9d:67:9b:49:f4:d1:dd:75:7d:1b:72:00:8c:14:70:ee:18:
4f:8b:be:5b:32:86:57:09:c0:61:57:58:0b:a6:84:d2:c5:82:
28:52:55:7c:1d:9d:42:32:ba:09:40:fc:09:8b:ae:0e:30:dd:
5a:fa:cc:a0:7b:3a:e9:ab:1a:fe:7f:05:60:5f:e8:37:c2:00:
53:14:b4:95:11:4e:74:f4:10:85:6e:9e:e2:82:81:58:b2:c4:
8f:75:1f:47:f3:bb:72:19:91:1e:03:b8:9c:06:8f:07:74:94:
b4:ff:4e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:54:22 2025 by rpki-client