Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/faf163-0983-48ed-a3bd-ae7d31fb05e5/1/UVSikNEmKu15vw2AgD-uyRlkL-Y.roa
File: UVSikNEmKu15vw2AgD-uyRlkL-Y.roa (raw, json)
Hash identifier: kX+bgfRAGwaOMCcnYB6q2K8aGW2vz7MqFOTQzfFsCSg=
Subject key identifier: 51:54:A2:90:D1:26:2A:ED:79:BF:0D:80:80:3F:AE:C9:19:64:2F:E6
Certificate issuer: /CN=a7bf29d886b3fdf093b992258ad158996f184b2b
Certificate serial: 01849ECBA01B063B8272D8D3567980C5D544
Authority key identifier: A7:BF:29:D8:86:B3:FD:F0:93:B9:92:25:8A:D1:58:99:6F:18:4B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p78p2Iaz_fCTuZIlitFYmW8YSys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/faf163-0983-48ed-a3bd-ae7d31fb05e5/1/UVSikNEmKu15vw2AgD-uyRlkL-Y.roa
Signing time: Tue 22 Nov 2022 10:04:15 +0000
ROA not before: Tue 22 Nov 2022 10:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203485
IP address blocks: 185.133.92.0/22 maxlen: 24
2a05:40::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:cb:a0:1b:06:3b:82:72:d8:d3:56:79:80:c5:d5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bf29d886b3fdf093b992258ad158996f184b2b
Validity
Not Before: Nov 22 10:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5154a290d1262aed79bf0d80803faec919642fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:9a:e7:f0:03:3d:05:44:8b:f6:3e:fb:8d:
f2:28:70:da:c8:bf:25:18:b4:e5:80:e4:80:cb:07:
8f:68:ff:89:9d:8b:9d:92:01:b2:68:1b:f9:35:7c:
be:41:25:70:30:97:0e:d8:fc:29:4a:e9:e3:db:3e:
09:7b:2d:72:ca:d1:c6:3f:db:af:84:54:ed:c3:69:
ba:8f:28:c6:c3:d4:d8:23:b7:4e:cd:3a:78:c1:12:
e2:3c:d4:b9:5e:5d:d9:e2:e8:79:70:ce:dc:28:a4:
b1:98:92:38:d5:da:e0:01:80:01:54:d6:53:32:99:
52:bb:8d:12:44:0d:38:f1:ed:e1:16:cf:d7:34:a6:
75:92:d1:fe:00:87:4d:f5:b3:90:8b:27:82:24:89:
62:2a:69:74:7f:58:41:77:61:a1:8c:8b:59:76:ed:
f2:f3:63:65:aa:35:af:d8:f0:0d:1e:10:bd:f7:93:
1e:e0:fa:3e:d1:c6:46:b4:25:5e:e1:e9:b8:0e:dd:
14:ac:21:b9:32:59:16:21:4a:85:17:f7:3b:3d:9c:
03:9c:52:41:ac:10:90:b6:c0:cf:db:87:1a:21:48:
9f:d2:64:83:16:1a:ce:72:63:7a:76:8e:ca:07:d3:
6f:32:85:ee:70:26:04:2b:5a:c4:4d:00:e3:c6:77:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:54:A2:90:D1:26:2A:ED:79:BF:0D:80:80:3F:AE:C9:19:64:2F:E6
X509v3 Authority Key Identifier:
keyid:A7:BF:29:D8:86:B3:FD:F0:93:B9:92:25:8A:D1:58:99:6F:18:4B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p78p2Iaz_fCTuZIlitFYmW8YSys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/faf163-0983-48ed-a3bd-ae7d31fb05e5/1/UVSikNEmKu15vw2AgD-uyRlkL-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/faf163-0983-48ed-a3bd-ae7d31fb05e5/1/p78p2Iaz_fCTuZIlitFYmW8YSys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.92.0/22
IPv6:
2a05:40::/29
Signature Algorithm: sha256WithRSAEncryption
7f:78:f1:a0:37:1e:70:bf:ee:2c:f3:80:62:07:54:b2:2d:02:
82:41:d6:1e:e2:7d:22:ef:b5:7b:4d:01:95:f0:d6:6b:b4:b2:
73:b6:b5:16:3c:e6:d0:2e:6a:9a:d4:3b:b5:93:23:dd:cc:1a:
0b:84:d8:35:16:58:7f:1c:62:a4:e0:1d:03:7d:40:d5:f5:de:
cf:86:b0:74:88:50:d9:c2:8f:c1:ae:a8:d0:51:d7:24:1f:bb:
fc:1b:08:43:02:af:7f:b6:88:48:01:58:67:5f:8d:99:97:f0:
f6:28:52:4f:c0:e4:31:ea:5a:fe:43:94:06:01:44:5e:ef:06:
93:90:6c:7f:f7:68:1e:e8:2e:bf:a4:a3:d0:37:0b:0e:c1:35:
89:c6:f6:1d:2e:fc:df:b3:03:75:a4:bc:df:98:9e:a3:06:7f:
14:f9:9e:fe:2a:1a:74:93:1b:2d:3e:b3:91:79:60:2b:96:f8:
31:c0:72:1c:41:85:66:1e:9f:c5:51:2f:f1:e6:bc:02:64:be:
55:f3:22:87:c5:2d:dd:82:48:0e:fb:68:e7:23:96:bf:47:27:
e6:a7:bb:e3:34:60:c9:b0:a9:26:04:23:7c:a8:4c:79:29:36:
28:e3:26:41:9f:73:e5:56:dd:a6:6d:11:0e:6a:68:82:a7:95:
b3:e9:47:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:31 2025 by rpki-client