Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/uvgO__JPUatiCykPjzRtFnrNm8Q.roa
File: uvgO__JPUatiCykPjzRtFnrNm8Q.roa (raw, json)
Hash identifier: hkdTvQ7u2vT4Ed4Lh62TZebe7eF6MTAA8DYI6Q5jbVU=
Subject key identifier: BA:F8:0E:FF:F2:4F:51:AB:62:0B:29:0F:8F:34:6D:16:7A:CD:9B:C4
Certificate issuer: /CN=b754992ba488a872c89cbdf42ca4df895e609c53
Certificate serial: 019426D9D360CDF29EA38DC7240FB4EF8D29
Authority key identifier: B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/uvgO__JPUatiCykPjzRtFnrNm8Q.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203537
IP address blocks: 185.130.28.0/22 maxlen: 24
193.163.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d3:60:cd:f2:9e:a3:8d:c7:24:0f:b4:ef:8d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754992ba488a872c89cbdf42ca4df895e609c53
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baf80efff24f51ab620b290f8f346d167acd9bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:09:72:a3:cc:27:38:58:aa:3c:30:99:c6:
c8:2b:57:dc:cc:90:7c:0d:8c:9f:14:2c:b2:a4:8d:
d4:7d:38:e9:19:34:fc:63:b4:a5:a8:aa:4b:f2:c1:
a2:de:34:db:b0:b4:06:cc:55:31:a9:d0:5c:45:42:
bd:75:97:e0:79:5d:8d:90:05:b2:12:6f:c1:1b:d0:
3b:57:9b:97:a3:60:6d:52:46:d8:df:db:e1:f2:3e:
d8:ab:70:b1:52:18:26:98:7a:88:9c:cf:70:dd:e0:
20:59:18:bb:26:55:a7:a7:7e:2d:87:bf:e3:17:b6:
c0:00:44:6a:c6:9f:02:dd:0a:89:c3:fa:2b:8d:7b:
ad:f3:57:6d:54:e9:60:ad:9a:20:10:cc:84:6b:2f:
3d:d1:f1:66:1a:60:0d:b8:63:9d:23:41:66:8a:34:
49:06:71:9d:d4:ff:8c:b3:4a:c7:3c:9d:cb:ef:93:
f0:8c:cc:b8:a0:3f:33:40:ee:c7:ea:51:f8:5b:58:
de:82:63:b9:46:b2:2b:e2:1f:58:c7:d0:ad:1d:69:
f2:cc:50:73:f8:ff:cc:d3:72:86:15:3b:ca:19:f8:
a9:55:1a:6e:31:39:8d:ea:fe:29:6c:0c:95:22:cc:
53:b6:33:37:c9:6e:48:5f:fe:5a:de:11:09:77:0c:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F8:0E:FF:F2:4F:51:AB:62:0B:29:0F:8F:34:6D:16:7A:CD:9B:C4
X509v3 Authority Key Identifier:
keyid:B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/uvgO__JPUatiCykPjzRtFnrNm8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.28.0/22
193.163.126.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a3:aa:b4:fe:38:1a:e2:e3:ef:15:46:ae:3c:24:9e:a0:a4:
63:33:04:19:24:d9:fc:50:03:5d:8e:47:fb:ac:ce:fd:0e:91:
9c:90:57:65:e9:d4:fe:55:9c:e8:bb:fc:e1:44:0d:9c:03:a3:
68:9d:cc:5b:69:04:d3:13:6a:58:37:93:d7:a4:6f:b4:35:7d:
87:fe:9d:35:9d:05:4a:8e:f7:d8:d2:00:40:bb:9b:01:e4:39:
22:11:5d:4d:4b:14:54:31:c7:ec:fb:f3:3d:75:0b:bb:66:9a:
96:13:8a:b8:20:40:7d:92:19:bb:35:64:19:4a:5b:4f:a0:a3:
2e:c7:fe:df:82:d8:b7:a2:2e:2a:52:53:96:ec:ab:76:6b:d7:
9c:96:6c:21:62:69:6b:0f:4c:3f:68:62:64:f9:37:ad:20:ca:
fc:78:02:fd:d8:be:c9:49:0c:6b:10:81:4e:4e:7d:3e:0b:e7:
10:22:5f:01:5c:22:81:e3:0d:8a:07:ad:f4:df:26:7e:fd:df:
36:02:84:aa:27:c7:d1:7f:76:56:a0:18:5a:2a:22:e4:28:61:
88:ca:88:be:07:66:48:ae:f7:52:2e:d0:17:4b:cd:ed:01:38:
02:1e:83:c1:a3:fa:82:17:fc:1f:d7:cc:28:c6:4c:51:b4:5b:
ea:1c:76:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:30 2025 by rpki-client