Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/UeynQ2RxbCPXOCRURTuQC-umcS8.roa
File: UeynQ2RxbCPXOCRURTuQC-umcS8.roa (raw, json)
Hash identifier: eXZYjrRZ7gh59i9CERaUtHMc4uDDaDB+YAo/bl9qYe0=
Subject key identifier: 51:EC:A7:43:64:71:6C:23:D7:38:24:54:45:3B:90:0B:EB:A6:71:2F
Certificate issuer: /CN=c555e80533443d4eff1edf9899bb3f9c5b8a1bc3
Certificate serial: 018CC649EC61E700AB634220B04ECB6FC2F7
Authority key identifier: C5:55:E8:05:33:44:3D:4E:FF:1E:DF:98:99:BB:3F:9C:5B:8A:1B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVXoBTNEPU7_Ht-Ymbs_nFuKG8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/UeynQ2RxbCPXOCRURTuQC-umcS8.roa
Signing time: Mon 01 Jan 2024 18:29:42 +0000
ROA not before: Mon 01 Jan 2024 18:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210306
IP address blocks: 185.3.156.0/22 maxlen: 24
193.35.92.0/22 maxlen: 22
2a02:53c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:ec:61:e7:00:ab:63:42:20:b0:4e:cb:6f:c2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c555e80533443d4eff1edf9899bb3f9c5b8a1bc3
Validity
Not Before: Jan 1 18:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51eca74364716c23d7382454453b900beba6712f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:ad:3b:93:67:04:5e:06:e4:bc:a0:62:92:
98:8c:96:b3:b1:21:fd:08:db:47:12:b3:73:5b:8f:
dd:6f:20:6e:88:d1:f1:24:87:d7:cb:ff:bb:34:a8:
07:8b:fb:f1:64:e7:31:bf:e8:eb:4c:fc:59:23:d1:
0e:c2:54:72:7b:08:8c:06:29:57:3e:a6:2f:24:5c:
fd:48:1a:7d:b2:91:0e:a7:ec:a4:8f:cf:38:6a:54:
2c:fe:9e:1a:0d:d7:9a:55:05:88:07:74:07:99:57:
e7:7d:93:0e:b2:76:61:e8:ea:bc:22:90:9e:1c:c4:
30:d9:f5:82:67:67:c7:7a:16:f8:a5:73:55:87:a9:
9b:5e:6c:21:e0:1b:0b:52:8c:41:d6:58:47:14:be:
51:de:ae:21:8f:7f:ef:62:26:77:80:8b:72:8a:cd:
ea:92:7c:32:f1:11:5c:a2:7b:89:37:ad:b7:f3:cd:
d4:be:f1:e5:53:6f:c2:51:9d:b0:c6:d4:fb:f1:6d:
96:f3:c1:11:72:95:34:1e:fe:c7:7a:70:65:80:ac:
f6:61:70:0a:a5:51:9b:84:43:04:d0:25:9e:71:e0:
d9:e0:b9:91:29:dd:f0:47:cb:aa:1b:ca:19:a8:13:
6d:68:9f:ad:f0:b8:00:c2:71:4e:52:b7:b9:5a:88:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EC:A7:43:64:71:6C:23:D7:38:24:54:45:3B:90:0B:EB:A6:71:2F
X509v3 Authority Key Identifier:
keyid:C5:55:E8:05:33:44:3D:4E:FF:1E:DF:98:99:BB:3F:9C:5B:8A:1B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVXoBTNEPU7_Ht-Ymbs_nFuKG8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/UeynQ2RxbCPXOCRURTuQC-umcS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/xVXoBTNEPU7_Ht-Ymbs_nFuKG8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.156.0/22
193.35.92.0/22
IPv6:
2a02:53c0::/32
Signature Algorithm: sha256WithRSAEncryption
93:95:05:f0:7b:df:cf:f6:c6:c7:eb:80:9a:d6:d8:c0:3a:e1:
e8:74:ed:b9:46:55:a4:32:b5:c5:81:c9:96:00:b1:48:8c:8d:
ef:c8:54:76:0a:5f:ad:4a:78:25:1b:6e:99:e2:34:76:70:54:
39:54:27:6a:94:e9:8b:04:97:8b:04:ac:36:55:75:c0:81:b0:
68:84:36:86:4c:40:06:3a:46:86:be:e6:d0:e0:36:d0:6c:5e:
0d:03:2f:c4:45:dc:d5:4e:7c:46:0d:bb:e5:ea:09:00:f6:2a:
5b:65:74:73:84:a9:e1:d1:a0:b9:72:66:8a:ff:25:b3:86:78:
30:d2:40:b3:a8:e8:9e:f6:9a:9e:64:a5:3f:20:45:88:38:ee:
ff:39:2d:ab:a2:41:e4:fd:dc:22:42:59:bf:4c:3e:cf:9c:16:
c9:e7:2b:ee:b0:9f:3b:0a:6d:f5:1c:3e:b7:d5:ba:01:2b:4e:
2b:1a:b4:cd:6e:45:fd:c1:b6:3b:74:07:92:c6:61:13:59:34:
bf:34:de:32:c6:b5:f7:83:51:c9:8c:dd:fa:6a:ec:d5:e5:3f:
60:90:f6:fd:13:5f:76:ee:11:7b:4e:80:21:1e:52:dc:83:b5:
8c:ea:30:aa:37:ec:78:1e:fb:f7:29:99:53:4f:5c:e5:4e:f5:
39:9f:b2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:20:49 2025 by rpki-client