Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/14731b-508d-4d34-9e60-cecec4f05e87/1/uNyeAIksEXCW3mevbvrTmMM76Ps.roa
File: uNyeAIksEXCW3mevbvrTmMM76Ps.roa (raw, json)
Hash identifier: Rd8hh1Gn0SRH+Y+d20WXZfFszLGyNXcFk7ApKBtUSQ0=
Subject key identifier: B8:DC:9E:00:89:2C:11:70:96:DE:67:AF:6E:FA:D3:98:C3:3B:E8:FB
Certificate issuer: /CN=473e040742bbaee62af29508a529a85a6f7851a9
Certificate serial: 01857315BFD3E25CD20C937A6F87529D7C04
Authority key identifier: 47:3E:04:07:42:BB:AE:E6:2A:F2:95:08:A5:29:A8:5A:6F:78:51:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz4EB0K7ruYq8pUIpSmoWm94Uak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/14731b-508d-4d34-9e60-cecec4f05e87/1/uNyeAIksEXCW3mevbvrTmMM76Ps.roa
Signing time: Mon 02 Jan 2023 15:24:43 +0000
ROA not before: Mon 02 Jan 2023 15:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25091
IP address blocks: 85.8.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:bf:d3:e2:5c:d2:0c:93:7a:6f:87:52:9d:7c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473e040742bbaee62af29508a529a85a6f7851a9
Validity
Not Before: Jan 2 15:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8dc9e00892c117096de67af6efad398c33be8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:b7:a2:45:04:a0:69:6f:6a:0e:07:ca:5f:
2c:21:f6:3a:a8:4f:cf:0a:30:05:d1:dd:a7:22:f3:
bd:33:32:d5:1b:ee:cf:20:68:33:ef:f8:cd:c6:90:
d3:74:56:d3:37:02:1f:e5:d0:23:0e:38:ad:b6:88:
5d:96:a3:0e:da:3c:22:89:48:99:03:83:85:85:3b:
87:af:23:29:51:89:7e:a3:7f:b9:b4:f5:25:ee:00:
e0:67:91:f3:7c:d3:a1:07:bf:a3:62:3e:7d:1d:25:
58:5a:0a:64:9e:93:4e:64:75:90:e4:ae:07:66:55:
a1:9e:b4:7c:b6:bd:cd:d7:ff:40:07:37:a2:95:20:
8a:d7:2b:c7:78:d6:53:0e:5b:bb:7a:d0:ad:e6:91:
55:b3:8a:45:87:b1:a0:65:50:02:65:ae:89:c1:67:
38:3a:c8:cb:bd:7a:b0:3c:fa:18:d8:12:d5:39:56:
81:4f:b7:26:fe:aa:7a:cc:f6:f5:fc:17:20:80:4d:
45:ca:4c:e4:25:f1:c1:3f:3f:b3:01:9b:1d:37:58:
ae:76:8b:2c:51:22:0b:8d:f1:d4:1d:a9:e9:91:de:
a3:7a:c4:61:5d:1b:27:43:56:1d:0b:db:49:61:2f:
ad:f7:8f:6d:71:02:8a:ba:d4:c5:a5:b8:81:09:7c:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DC:9E:00:89:2C:11:70:96:DE:67:AF:6E:FA:D3:98:C3:3B:E8:FB
X509v3 Authority Key Identifier:
keyid:47:3E:04:07:42:BB:AE:E6:2A:F2:95:08:A5:29:A8:5A:6F:78:51:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz4EB0K7ruYq8pUIpSmoWm94Uak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/14731b-508d-4d34-9e60-cecec4f05e87/1/uNyeAIksEXCW3mevbvrTmMM76Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/14731b-508d-4d34-9e60-cecec4f05e87/1/Rz4EB0K7ruYq8pUIpSmoWm94Uak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:1d:df:7f:9c:8e:92:20:d8:dc:43:9b:6a:e8:eb:e8:8a:03:
21:a2:61:dc:bd:49:2f:c8:5e:b5:cc:0b:b0:a9:82:3a:9a:6e:
b4:77:a3:c4:94:b2:28:5c:d2:cd:32:36:a6:26:7f:00:77:53:
aa:6b:e4:7b:40:4d:f5:d5:d7:c9:c1:90:25:e3:5e:fc:8a:8c:
f2:44:10:2a:6d:b6:d9:72:92:84:21:89:c6:32:fc:65:1b:b9:
c6:7b:e9:b3:ab:d4:1b:97:33:59:fc:d0:7d:1b:f7:62:48:92:
31:b6:3b:35:48:13:c7:b1:86:82:d6:9b:ca:9d:de:f7:16:63:
fd:37:61:06:70:e6:d2:53:08:cc:bf:15:98:e0:7d:20:c0:26:
8d:24:c8:b6:9c:77:90:20:2a:0c:2c:09:ad:4a:6d:63:f5:8a:
e5:a8:0d:b4:6d:91:4f:62:de:ed:74:33:2d:c0:4e:67:3c:26:
4d:86:27:86:1f:69:ca:d0:6e:85:78:21:6e:5c:82:8a:bb:36:
fb:c7:a2:b1:65:19:69:42:39:b0:3f:ce:b3:fd:9f:e1:64:57:
6e:91:8b:7d:ae:1c:67:37:84:ac:62:6f:14:8d:29:2e:22:06:
df:ff:2e:7a:ed:0f:c2:5b:4a:b9:24:3a:5d:b1:e5:66:57:91:
99:f9:30:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:59:58 2025 by rpki-client