Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/ubLjd9wmzzZG8LI97GjvLa4Oq8M.roa
File: ubLjd9wmzzZG8LI97GjvLa4Oq8M.roa (raw, json)
Hash identifier: WNYe7J1BDLBGPc0BjU7uIlRkNEG52U1I7r1qTIXqRiQ=
Subject key identifier: B9:B2:E3:77:DC:26:CF:36:46:F0:B2:3D:EC:68:EF:2D:AE:0E:AB:C3
Certificate issuer: /CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Certificate serial: 01855D2061A2B5DAAAF333D787B8A615CB32
Authority key identifier: EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/ubLjd9wmzzZG8LI97GjvLa4Oq8M.roa
Signing time: Thu 29 Dec 2022 09:04:41 +0000
ROA not before: Thu 29 Dec 2022 09:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28907
IP address blocks: 193.178.144.0/22 maxlen: 24
193.178.144.0/23 maxlen: 23
193.178.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:20:61:a2:b5:da:aa:f3:33:d7:87:b8:a6:15:cb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Validity
Not Before: Dec 29 09:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9b2e377dc26cf3646f0b23dec68ef2dae0eabc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:93:eb:cc:2c:bf:a1:31:d3:61:b0:09:c4:e8:
1d:4f:bb:e6:c3:f7:12:c4:92:b1:de:00:c2:f6:d8:
1b:3b:4d:f0:8b:0e:bf:e2:3a:c3:9a:08:ad:d9:02:
cd:03:9a:60:54:9f:f2:a4:f3:14:c6:b6:44:7d:5e:
23:bb:d0:7e:84:06:1c:6a:ff:ac:f3:6b:e0:33:9e:
e0:aa:c8:18:77:1f:4a:18:31:0b:f6:f1:9f:75:f0:
f3:ea:3b:ff:72:6f:e5:42:fb:68:c4:e8:f7:fa:7f:
a1:24:95:23:a3:68:b3:57:36:c7:b7:81:e8:93:2b:
e4:fd:42:70:4f:8c:38:38:9d:1f:76:20:6c:9f:5b:
09:e9:80:64:49:8e:2d:93:46:6a:6d:97:ef:fa:36:
66:9a:c6:fe:3a:1a:33:5b:d9:78:b9:00:86:c1:c8:
d1:1f:43:bd:2d:ad:dc:8a:f0:f2:b5:f7:b1:f9:2e:
cc:02:03:95:fc:0f:b8:80:d8:4c:93:c7:90:54:1c:
07:af:20:db:40:94:fc:eb:9c:74:dd:61:88:8c:41:
bd:12:c1:a4:46:45:cd:de:ce:4c:c2:e4:9f:06:71:
d2:53:1e:45:fa:76:e6:7a:9d:27:35:c9:7f:ba:99:
5b:d3:41:d0:cb:34:dd:d2:56:df:05:2c:a1:bc:87:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B2:E3:77:DC:26:CF:36:46:F0:B2:3D:EC:68:EF:2D:AE:0E:AB:C3
X509v3 Authority Key Identifier:
keyid:EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/ubLjd9wmzzZG8LI97GjvLa4Oq8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/69b8UVjuPsIaQh1xgjTI2KM2H6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.144.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:71:82:dc:5d:f6:72:e1:ef:e6:e8:43:20:35:cf:87:7e:af:
1c:3a:7b:60:51:b4:dd:bf:95:ff:ad:05:65:32:6b:a9:e0:9b:
af:dd:a7:c4:f8:41:1a:f8:74:3e:3c:ea:05:ff:6d:5a:69:28:
c6:51:f8:54:b7:39:95:60:97:f7:85:49:e8:8d:b7:e4:b8:74:
4b:b0:17:e5:30:99:35:53:50:0c:8e:19:aa:96:46:7a:18:50:
6e:d8:eb:a6:c7:21:ac:b0:be:35:11:be:57:b4:04:06:d5:4c:
ab:57:03:6f:45:d2:ba:4f:5b:4f:da:66:2d:ce:42:c6:f4:2b:
b3:1f:a9:ce:e0:f1:63:41:84:f5:ce:07:50:cc:9a:5d:28:c2:
0e:ce:c1:9c:32:bd:0e:09:bf:dd:41:f4:34:5a:62:fb:b3:ce:
7b:f2:00:65:b5:c4:ee:7f:5d:de:76:7d:94:6b:ea:11:e4:39:
ed:41:04:ad:b6:19:6e:e0:45:5f:98:77:7a:87:f6:08:8f:92:
85:64:dd:d9:ba:fc:d6:8a:60:79:50:84:43:be:f8:87:6a:70:
73:2b:9f:8f:6e:aa:60:a5:88:5c:65:19:24:a1:af:66:88:cc:
eb:f6:38:dc:2e:40:da:cf:bb:33:a3:b9:55:1d:e1:12:47:3e:
fa:7b:b3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:47 2025 by rpki-client