Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa
File: UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa (raw, json)
Hash identifier: yNneGYRFbH3ZhAuncPonvd3a6cecW1xrZDzoeBjGnHI=
Subject key identifier: 51:6E:04:C8:35:3D:6D:C7:D1:FD:AE:51:AE:E0:3E:28:68:95:DD:4C
Certificate issuer: /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial: 0194228E369EE12F476070ED46E073E60766
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa
Signing time: Wed 01 Jan 2025 15:48:52 +0000
ROA not before: Wed 01 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43181
IP address blocks: 185.169.148.0/22 maxlen: 24
185.169.148.0/24 maxlen: 24
185.169.149.0/24 maxlen: 24
185.169.150.0/24 maxlen: 24
185.169.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:36:9e:e1:2f:47:60:70:ed:46:e0:73:e6:07:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=516e04c8353d6dc7d1fdae51aee03e286895dd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:94:97:4d:e3:c9:f6:00:8d:cd:32:fb:6f:38:
b6:ff:02:00:91:90:b6:51:af:b9:31:2a:96:e9:59:
52:80:d4:22:58:ba:00:0e:26:1b:ad:a2:ee:3b:cc:
3d:b8:a7:86:99:fc:1d:dc:53:63:59:90:52:63:30:
34:43:91:e6:06:e1:11:47:00:b0:45:d1:d1:2c:ab:
89:e2:a8:6a:8e:45:46:3f:e0:52:b3:c6:8d:24:45:
e2:cf:e4:8c:79:45:4e:49:5c:68:58:2b:c5:3d:b1:
2f:be:05:b7:0a:16:6f:c7:eb:74:34:66:0b:0a:12:
fc:2a:a2:29:a6:0e:1b:d4:fa:f1:21:33:00:43:1f:
5f:9d:e7:75:f7:0d:a1:46:79:0b:76:01:3b:57:70:
ae:18:39:6d:8d:66:76:83:4d:39:1d:8c:6c:32:f6:
52:b8:8e:d5:41:48:4e:71:3a:0a:73:cc:32:4e:2e:
c4:d2:8d:95:b7:9a:db:91:76:9a:52:c0:bb:8a:7a:
17:ba:57:46:3c:ed:52:ed:41:10:fb:1d:80:98:40:
ba:f2:d2:91:4b:2e:6a:06:81:07:f0:b2:47:89:7a:
79:7e:ec:da:90:c6:26:6a:9d:85:0b:c6:b5:70:aa:
bb:8f:76:99:e2:7d:0d:6d:c7:34:aa:f7:de:a7:54:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6E:04:C8:35:3D:6D:C7:D1:FD:AE:51:AE:E0:3E:28:68:95:DD:4C
X509v3 Authority Key Identifier:
keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:af:b5:af:31:e6:81:fe:03:ac:7d:03:ec:a8:48:bf:6b:63:
32:2c:5c:d6:6c:5a:7c:fe:71:e8:76:47:9e:98:76:b6:68:49:
f8:f0:27:9b:7a:cc:3b:71:dd:ec:c2:9b:0c:c3:d6:47:90:af:
6d:d3:fc:37:00:c0:7c:ef:a9:1d:c7:c0:ce:8c:74:8e:de:ad:
36:a2:7c:3c:fe:22:34:3d:f5:f7:bd:07:13:d8:92:4f:b6:e8:
aa:b0:7e:e6:c2:63:58:29:04:44:2d:2c:c1:6b:ad:44:af:f3:
b6:a4:53:50:49:f6:e8:ea:fe:95:4f:cf:1b:42:e1:e5:82:d1:
10:cc:1b:30:6a:d5:10:ad:71:22:05:7b:da:40:9e:63:82:91:
78:32:c5:07:10:3b:85:7b:89:55:0b:7b:a3:9f:e4:9e:57:51:
9c:1f:fc:fe:18:e3:f7:73:3b:4c:83:20:0c:9c:0b:b8:6a:ed:
8f:06:a1:c7:52:3c:14:eb:25:05:48:11:53:22:72:b1:fe:ce:
6f:c1:93:13:d8:48:2e:45:c9:be:3d:1a:f5:e6:49:9a:76:4b:
a9:17:37:98:05:fd:7b:21:da:b7:c2:af:bc:2c:6e:6b:92:47:
32:1f:11:4c:03:17:50:67:b9:af:9e:ec:87:58:73:af:fb:70:
8e:09:a1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:13 2025 by rpki-client