Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/u_mf6VdBhl7uVcbRln1YvZc-0jU.roa
File: u_mf6VdBhl7uVcbRln1YvZc-0jU.roa (raw, json)
Hash identifier: 9N3f5UD+rfeQMlZdEvv17Zf+Q0fMXytQZVrXxXqC8WM=
Subject key identifier: BB:F9:9F:E9:57:41:86:5E:EE:55:C6:D1:96:7D:58:BD:97:3E:D2:35
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019350474CCA2E5E980E5AA9BFB89DFD4E56
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/u_mf6VdBhl7uVcbRln1YvZc-0jU.roa
Signing time: Thu 21 Nov 2024 19:51:10 +0000
ROA not before: Thu 21 Nov 2024 19:51:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29262
IP address blocks: 62.182.32.0/24 maxlen: 24
62.182.33.0/24 maxlen: 24
62.182.34.0/24 maxlen: 24
62.182.35.0/24 maxlen: 24
185.254.55.0/24 maxlen: 24
194.56.186.0/23 maxlen: 23
194.169.92.0/23 maxlen: 23
194.169.92.0/24 maxlen: 24
194.169.93.0/24 maxlen: 24
194.169.94.0/23 maxlen: 23
194.169.94.0/24 maxlen: 24
194.169.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:47:4c:ca:2e:5e:98:0e:5a:a9:bf:b8:9d:fd:4e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Nov 21 19:51:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbf99fe95741865eee55c6d1967d58bd973ed235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:6d:88:1c:f6:72:a4:da:62:37:ff:98:7d:
0f:6f:70:47:b5:62:f1:df:9a:2f:eb:15:3d:30:cf:
42:e5:69:08:c9:52:63:3d:30:5b:18:ca:fa:c5:1a:
55:ce:61:ba:81:99:27:ad:14:63:57:19:6d:3d:48:
cf:04:5e:a4:55:5b:03:2e:e2:0c:0e:09:93:9d:57:
6a:a0:2a:d0:80:5c:9f:31:e9:f2:b8:45:56:40:2b:
c3:10:5a:c5:66:f5:cd:71:19:56:78:21:97:8c:7f:
8c:31:8c:b8:57:97:51:fd:50:3a:d0:2f:0c:71:4b:
b0:3b:9f:61:0b:60:29:19:18:e8:7b:26:77:9b:5a:
4c:7e:f9:78:6b:ce:f3:44:12:a8:4c:7a:ac:8a:f8:
c3:c5:84:38:4c:de:5c:25:78:69:38:c7:3b:a6:e8:
cb:e8:5a:f9:ec:17:66:ce:3c:08:51:59:3f:16:38:
a1:b1:b6:5d:25:82:6b:ab:71:5e:3c:8c:7c:66:5c:
90:2b:f1:b5:f8:a4:20:83:b2:1e:b0:6c:7b:ee:87:
d8:15:1f:d9:06:1f:af:d4:a1:e0:82:da:00:fe:8a:
ee:b6:3d:27:4e:52:14:73:43:8e:fb:92:4c:ad:9a:
c0:8a:cf:ad:e6:0f:28:37:16:08:be:72:d5:d0:f2:
99:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F9:9F:E9:57:41:86:5E:EE:55:C6:D1:96:7D:58:BD:97:3E:D2:35
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/u_mf6VdBhl7uVcbRln1YvZc-0jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.32.0/22
185.254.55.0/24
194.56.186.0/23
194.169.92.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:49:42:f5:65:8c:60:de:fb:4b:06:48:18:22:86:2a:4f:79:
7c:26:d7:25:2f:ab:b3:e3:19:59:a9:16:e6:29:ea:c7:e5:d1:
e0:f8:9f:58:89:fc:ed:99:b3:b9:42:07:ff:37:31:7c:50:45:
ed:ee:32:3e:88:6f:70:a4:23:87:fd:a0:c9:aa:86:94:aa:c2:
30:6e:6b:b2:33:85:54:3d:eb:cd:4e:e4:f0:b1:c0:1e:74:21:
0d:e4:64:7d:73:df:68:4e:02:6b:81:7c:1f:92:d3:dc:81:e6:
92:2f:3e:42:4e:ec:1a:ff:3f:e9:6a:65:1e:e2:e9:8e:9a:d6:
52:db:c6:1e:f2:8f:b4:cb:3e:bb:ed:46:84:28:ac:5a:a4:a5:
71:15:4e:cf:33:22:2f:a2:2e:b4:e1:be:80:05:ed:86:b6:d6:
72:10:a8:7f:d7:c4:93:3d:99:a7:7d:a2:0e:bb:dd:ae:d0:bc:
d5:f1:a1:32:de:52:da:de:5f:dc:a6:92:1e:34:0a:19:77:9c:
27:ad:06:d7:c1:f2:04:2c:05:62:4f:0f:a8:a0:b8:59:7c:2e:
93:e6:2b:05:e4:33:27:69:4f:07:90:c0:b3:e0:a1:b0:58:80:
68:ca:39:2b:a9:c2:4b:26:6a:1f:d4:e8:e9:31:f2:f2:e6:95:
48:42:7f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:05 2025 by rpki-client