Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/U47KHWtk8fl1zeBfptx2dxwuW-0.roa
File: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (raw, json)
Hash identifier: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=
Subject key identifier: 53:8E:CA:1D:6B:64:F1:F9:75:CD:E0:5F:A6:DC:76:77:1C:2E:5B:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 01941FFAA50C3CC38CAC0313195ADA373B58
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/U47KHWtk8fl1zeBfptx2dxwuW-0.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3949
IP address blocks: 171.22.145.0/24 maxlen: 24
185.243.129.0/24 maxlen: 24
2a01:f180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a5:0c:3c:c3:8c:ac:03:13:19:5a:da:37:3b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=538eca1d6b64f1f975cde05fa6dc76771c2e5bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:2f:f4:8a:6f:e8:0a:eb:97:4a:ec:ab:ee:
10:57:e3:13:fc:79:11:5b:3c:77:1e:8d:5c:89:89:
59:40:35:ac:d1:8c:6e:c9:14:8f:87:f4:a3:90:20:
55:3a:fe:f5:f0:07:eb:64:75:86:ec:47:c6:0a:7e:
b9:24:c7:27:f6:bd:e8:17:c6:2c:a3:9c:c1:51:b1:
2d:6a:8b:15:79:0c:c5:e3:90:f5:04:6c:5a:27:42:
d4:73:32:4c:da:4d:fb:09:74:56:8d:42:ff:94:68:
6e:9c:64:f1:5d:66:3b:da:e8:51:e0:85:4d:0b:f3:
39:e8:66:27:bc:1f:13:69:0e:fe:76:80:bd:c5:20:
5e:55:a0:4d:ed:a1:bb:4c:a5:c0:1b:4f:c1:8c:27:
4f:e5:4c:41:51:68:38:99:36:5e:78:87:66:1c:7b:
9c:00:3d:60:d0:1e:17:e2:f7:f8:15:72:a0:68:65:
e5:85:27:eb:6d:98:cc:f0:ad:46:2d:af:ca:fa:ce:
7b:5d:62:29:02:f9:56:05:ca:d0:38:ac:d0:03:2a:
24:23:19:fa:4b:c4:34:85:b0:b8:a5:5d:8a:3a:ad:
72:00:26:6f:fb:8c:ff:73:20:74:0a:79:b4:b5:28:
0f:e6:4a:77:0e:3b:42:6c:98:d0:9c:4f:12:cf:b8:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8E:CA:1D:6B:64:F1:F9:75:CD:E0:5F:A6:DC:76:77:1C:2E:5B:ED
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/U47KHWtk8fl1zeBfptx2dxwuW-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.145.0/24
185.243.129.0/24
IPv6:
2a01:f180::/48
Signature Algorithm: sha256WithRSAEncryption
09:76:59:ba:ce:80:e0:49:f9:dd:75:de:30:b9:14:18:d8:89:
bf:b3:18:16:ea:8a:d4:a0:b3:96:77:f6:6d:c8:c8:cd:3d:1b:
01:d0:fe:d5:61:dd:d9:46:74:05:ac:fa:62:f2:1c:bf:d5:ab:
28:32:1e:f6:55:6f:c7:72:7c:7e:c6:9d:e3:fb:2d:62:6c:fc:
6e:6d:26:64:98:6f:f0:61:63:a2:96:03:d3:32:a3:93:1d:83:
4e:98:2b:13:97:53:0c:83:bd:f9:5a:60:9c:00:a4:3b:ab:1b:
3c:11:1a:37:fd:e5:1f:77:38:c5:ee:f2:72:1d:e1:1e:4d:d5:
32:f7:74:16:57:66:de:e2:2f:62:9b:42:6d:fb:e8:0b:1f:5f:
63:d3:e8:56:22:4e:d1:c0:c6:c9:72:07:3d:e8:b8:27:7e:5e:
ef:01:db:27:d7:08:f3:2c:95:3a:cd:93:63:48:dd:d6:77:d1:
c0:d0:c9:ed:8f:2e:91:67:f3:f9:e2:c2:76:ca:4c:8b:03:db:
8a:d9:52:05:ab:78:37:24:48:74:7f:f5:04:db:7e:e2:f7:6b:
4d:86:c6:d2:7b:a5:8b:cd:b1:53:fd:5a:80:37:55:d7:cf:b5:
b4:9f:03:05:2e:71:42:ba:bc:cc:d5:1b:5c:69:35:46:d5:92:
37:54:ca:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:25 2025 by rpki-client