Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/U8dIjWtcY2-M_CEVsA6b8bwpFDE.roa
File: U8dIjWtcY2-M_CEVsA6b8bwpFDE.roa (raw, json)
Hash identifier: Fkz8GUWY9XL31RlpgAhEjSOpkZkA5/bNbRzb9y7VS9c=
Subject key identifier: 53:C7:48:8D:6B:5C:63:6F:8C:FC:21:15:B0:0E:9B:F1:BC:29:14:31
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 0194228E313562465BC51833CB79791363D7
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/U8dIjWtcY2-M_CEVsA6b8bwpFDE.roa
Signing time: Wed 01 Jan 2025 15:48:51 +0000
ROA not before: Wed 01 Jan 2025 15:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.103.5.0/24 maxlen: 24
185.103.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:31:35:62:46:5b:c5:18:33:cb:79:79:13:63:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Jan 1 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53c7488d6b5c636f8cfc2115b00e9bf1bc291431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:68:29:56:6b:9d:8b:06:c3:4f:05:82:bc:
d4:f7:79:18:b9:de:82:d5:a7:1d:42:4f:b0:db:5a:
00:d8:05:5c:4b:3c:56:55:a5:b8:6a:11:50:db:3f:
54:58:9d:f6:b8:92:37:74:be:d6:cb:a6:b4:aa:05:
4e:1a:f1:05:8b:2a:63:0b:0a:8e:a2:78:11:05:d1:
e1:d5:d2:95:ab:ff:77:2d:47:28:9d:88:f7:c2:31:
f0:89:87:3a:5a:75:5e:bd:19:e4:32:e8:99:c7:1a:
6b:5a:f8:88:9e:45:9c:18:37:4b:02:75:86:dd:84:
be:a4:58:3d:c6:67:37:1f:61:5c:fa:4d:59:53:ff:
c4:ff:70:07:9a:d1:22:9b:e8:af:f0:72:62:a5:2a:
95:e8:43:78:f5:4f:ca:ce:d0:ac:5a:88:7e:12:1f:
e2:fd:47:b4:06:7b:d6:c8:d1:f8:d7:5c:72:20:28:
3b:6d:77:70:13:f0:3b:b0:6a:42:8f:36:8d:ae:0a:
38:77:53:79:63:ad:7c:82:21:dc:a1:5e:83:fc:5c:
18:e7:f9:d5:e3:0d:81:94:30:c8:99:af:d8:b9:80:
10:b0:50:25:70:f6:9b:3d:25:a8:86:89:a6:af:0b:
9c:dc:6e:25:74:4d:8e:e2:5e:33:52:03:3b:76:5f:
58:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C7:48:8D:6B:5C:63:6F:8C:FC:21:15:B0:0E:9B:F1:BC:29:14:31
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/U8dIjWtcY2-M_CEVsA6b8bwpFDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.5.0/24
185.103.7.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5d:8a:01:b1:16:52:60:38:69:d3:77:53:2c:b1:5c:54:aa:
d2:ab:41:68:ce:72:04:52:8b:9a:b0:df:07:62:95:f7:2e:50:
7f:96:58:ee:e8:a7:f4:d7:8c:bc:6f:18:24:36:f8:ff:82:38:
06:ac:22:f9:a2:e0:40:94:94:bf:47:83:83:22:77:e4:a9:11:
cf:c6:7b:fe:ff:1b:d2:18:d4:03:68:f4:d9:88:ae:f7:dd:22:
d8:73:93:b4:f2:27:f8:1d:23:e8:20:b5:82:d2:91:60:98:00:
f9:a8:37:71:16:20:f6:10:7b:38:82:8d:c7:5c:1e:87:bb:49:
92:89:16:6c:e5:b8:d1:64:12:e2:81:a6:9b:b4:16:ec:28:a4:
53:d0:d8:ff:57:d0:c6:2b:7c:74:13:4a:33:90:43:76:0a:a3:
24:0d:56:dc:1c:56:d4:30:d6:20:c3:e2:4e:06:09:29:55:d2:
63:06:3d:98:86:fe:6b:a4:f5:06:5d:83:2b:55:0e:41:69:08:
56:2d:3e:f3:5d:dd:08:c1:cd:7b:f9:c9:14:69:3b:28:dc:0d:
1b:03:ad:c2:73:d6:e3:7c:4d:56:8e:8f:17:36:68:f3:98:2f:
ad:4d:41:a8:5b:ee:2c:06:b1:36:8e:78:41:0f:36:2c:68:90:
1c:bc:53:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:43 2025 by rpki-client