Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa
File: uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa (raw, json)
Hash identifier: tIErXtWim6v8+5J+f3v+yr7n8hWCWnrcd2Ahi85yzJA=
Subject key identifier: B8:0C:28:54:8D:DD:A4:37:95:17:A3:90:58:AA:02:27:98:CD:F3:16
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 0194282339D92A0680D061C801B4D0A1F183
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa
Signing time: Thu 02 Jan 2025 17:49:44 +0000
ROA not before: Thu 02 Jan 2025 17:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2072
IP address blocks: 185.4.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:39:d9:2a:06:80:d0:61:c8:01:b4:d0:a1:f1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Jan 2 17:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b80c28548ddda4379517a39058aa022798cdf316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:66:2d:1b:da:97:0c:f4:21:86:86:07:e7:
88:d9:27:0b:b4:fb:df:23:2c:cc:ba:35:66:3c:59:
6b:c2:71:b5:0b:d9:f9:fa:fc:4f:3b:0f:07:66:13:
4f:b7:63:cd:9f:64:ab:4d:91:1c:e8:77:a8:71:82:
5c:82:49:1b:a5:3c:8f:c7:d9:2f:87:f3:03:d9:58:
5a:62:8d:2e:f2:53:4b:3d:90:e6:71:ac:aa:96:c7:
59:ea:ed:38:79:e9:9b:e0:fa:b5:c2:19:b1:11:5f:
60:8a:0e:3f:9a:0c:9f:73:63:2c:2d:3b:3a:6e:de:
38:6d:17:e6:b5:cc:98:c3:81:7e:17:b5:7d:8b:da:
9f:30:e6:64:2d:17:c6:39:15:f4:1e:83:88:b2:e9:
76:78:4c:e2:7e:41:6f:0f:3d:f1:78:35:4d:e1:67:
b9:71:88:a9:00:ff:95:34:34:75:de:25:2c:eb:51:
6c:41:d2:d4:03:f4:6f:57:a5:aa:e3:ba:31:4a:8a:
fb:cc:f8:8a:82:34:8a:d0:82:fd:70:90:78:58:28:
4a:56:ed:13:e7:ab:42:b4:c1:ce:02:f1:e0:91:6a:
23:a8:af:8b:a5:10:b6:23:3e:75:cf:89:d0:d4:0f:
b8:b3:07:f8:16:58:7e:1e:22:fe:a5:c6:a6:d3:fc:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0C:28:54:8D:DD:A4:37:95:17:A3:90:58:AA:02:27:98:CD:F3:16
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.251.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1a:60:f5:0d:2c:23:bd:80:92:5e:16:90:0d:4f:d5:f9:99:
f1:c4:9d:f8:51:a0:6d:af:1c:ee:3e:ad:98:85:c2:51:d7:37:
52:57:be:76:c5:84:d3:7e:21:72:02:0f:cf:ca:5e:50:03:19:
ae:7b:29:f7:c4:a6:70:a2:ac:25:60:f9:00:4e:26:52:9c:f8:
c2:cb:e2:71:24:c2:a5:58:af:f7:51:6c:df:8e:09:72:bf:09:
dc:1c:4b:29:3c:89:49:ec:be:6d:4e:e8:80:68:94:7c:65:d7:
df:9d:f5:c4:43:6a:09:0a:07:30:95:cc:b3:34:8c:b5:72:02:
63:8e:8a:b3:d7:b2:8a:66:f3:dc:db:32:43:41:9c:ee:43:9d:
e3:a6:f3:f8:86:72:e7:a6:0d:22:fa:90:d1:82:47:c9:64:05:
3d:bb:9f:dd:6c:9b:1f:03:17:ae:8f:97:5c:62:ef:1c:13:4a:
8e:da:8c:f7:d7:a9:e7:31:fa:e1:cd:e8:73:1d:3d:ab:3f:41:
ad:87:cf:2b:22:bc:f1:b0:20:d8:49:4b:a1:ca:aa:36:13:cc:
0d:60:1d:40:d9:96:8e:84:65:bb:0e:96:7e:4f:a5:d7:23:96:
60:71:9f:4a:6a:0e:ac:00:a6:c9:ba:20:6f:96:60:d6:9d:f0:
eb:b5:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:20 2025 by rpki-client