Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/Uym4eri5Ci4i1OsJYclEYLyUlJg.roa
File: Uym4eri5Ci4i1OsJYclEYLyUlJg.roa (raw, json)
Hash identifier: 95ML//ExtgKBHdFLfZBvEoJq/LtoxAna3lEAxYE74I4=
Subject key identifier: 53:29:B8:7A:B8:B9:0A:2E:22:D4:EB:09:61:C9:44:60:BC:94:94:98
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 03B7B78C
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/Uym4eri5Ci4i1OsJYclEYLyUlJg.roa
Signing time: Sat 01 Jan 2022 01:53:24 +0000
ROA not before: Sat 01 Jan 2022 01:53:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203965
IP address blocks: 185.118.172.0/24 maxlen: 24
185.118.172.0/22 maxlen: 22
185.118.175.0/24 maxlen: 24
185.118.174.0/24 maxlen: 24
185.118.173.0/24 maxlen: 24
2a06:9380::/29 maxlen: 29
2a06:9380:172::/48 maxlen: 48
2a06:9380:173::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62371724 (0x3b7b78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Jan 1 01:53:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5329b87ab8b90a2e22d4eb0961c94460bc949498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:51:34:1e:cb:8f:9e:b4:bf:bf:8f:a6:1d:
c2:9a:0a:6c:9a:de:cc:b0:ff:ae:0b:44:0f:38:1a:
c2:32:20:97:3a:f3:fa:8d:b0:2a:da:8a:03:19:7b:
eb:fd:41:de:c7:61:cd:81:30:dd:fb:9c:e7:17:34:
fb:28:f1:e8:67:d1:16:d9:3a:5a:f8:e7:67:5b:60:
05:95:39:ba:a6:35:da:72:98:a1:1a:07:db:27:d6:
bb:17:9f:47:00:f0:fb:05:8d:e9:81:bb:f4:17:f3:
12:a0:86:c3:fa:89:38:8e:a0:ee:8f:9b:cb:3b:c7:
c8:9c:dd:a9:46:ab:2e:1d:38:04:29:4b:8b:49:34:
25:f9:43:21:c0:88:09:89:7f:51:90:e7:a3:61:34:
1b:fe:f7:90:19:d1:48:f3:ae:e9:59:c8:5f:a0:c4:
f4:4c:7e:4a:07:7d:ac:b1:98:8c:1b:2f:ba:88:fb:
8e:ef:a2:87:8c:e1:4d:d0:1a:a9:20:94:e2:df:e6:
7f:24:34:54:cb:7d:fa:b4:d3:7c:a9:81:ec:ed:40:
18:41:37:7c:76:a6:2d:06:3e:9a:d9:5e:29:06:a5:
a6:e0:84:45:53:88:c3:59:be:4e:06:c0:9b:ba:d3:
3c:4f:10:fd:4e:b9:a7:49:9e:65:42:93:a3:4e:c4:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:29:B8:7A:B8:B9:0A:2E:22:D4:EB:09:61:C9:44:60:BC:94:94:98
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/Uym4eri5Ci4i1OsJYclEYLyUlJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.172.0/22
IPv6:
2a06:9380::/29
Signature Algorithm: sha256WithRSAEncryption
68:1d:c1:9d:4a:5c:45:81:f1:2c:9b:f6:ab:41:f1:df:01:f9:
9f:11:86:81:f1:40:c0:92:b3:b5:55:6d:6c:25:24:a1:40:8e:
f3:05:ef:28:a8:31:2c:23:f6:70:6e:6d:ab:d5:d1:c0:6c:96:
74:e6:4c:9f:39:c6:0e:45:cf:e8:e9:ae:e5:ca:d9:fd:42:ce:
20:62:2a:01:ed:fb:3e:5f:fe:3c:03:c1:ee:da:5c:34:02:db:
6f:30:d3:cf:d6:fb:23:86:db:ae:24:1a:94:35:f8:26:46:65:
05:df:28:e6:2c:b4:cd:2d:6b:80:bd:5b:88:00:4e:c3:23:b9:
6a:7a:f8:cf:49:9a:00:4e:e6:81:1e:37:ee:c2:8b:5d:35:51:
8b:52:7b:32:b2:3d:37:e2:13:96:fd:2e:a8:ab:bb:ed:e5:60:
ca:b8:2f:cd:63:1a:6d:d6:c4:f1:33:41:90:6a:de:56:01:31:
54:90:4c:3c:0e:5d:fd:f4:71:ba:30:a6:26:a2:89:cf:45:90:
08:c6:04:71:39:28:46:7d:f7:3f:9d:df:cb:f0:19:c8:07:5c:
d8:5a:5a:32:4b:ee:70:61:bf:ee:2f:fd:97:32:23:ba:fb:bb:
be:67:59:39:8a:8a:bb:15:80:bc:51:f8:3c:50:c4:d1:5a:54:
11:ea:4d:49
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEA7e3jDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NzJkMTc4YzhlNTNmNTIxMzFjMWZiNjQ3NDNjOTYwY2Y4OTdmZDBjMB4XDTIyMDEw
MTAxNTMyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTMyOWI4N2FiOGI5
MGEyZTIyZDRlYjA5NjFjOTQ0NjBiYzk0OTQ5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN4FUTQey4+etL+/j6YdwpoKbJrezLD/rgtEDzgawjIglzrz
+o2wKtqKAxl76/1B3sdhzYEw3fuc5xc0+yjx6GfRFtk6WvjnZ1tgBZU5uqY12nKY
oRoH2yfWuxefRwDw+wWN6YG79BfzEqCGw/qJOI6g7o+byzvHyJzdqUarLh04BClL
i0k0JflDIcCICYl/UZDno2E0G/73kBnRSPOu6VnIX6DE9Ex+Sgd9rLGYjBsvuoj7
ju+ih4zhTdAaqSCU4t/mfyQ0VMt9+rTTfKmB7O1AGEE3fHamLQY+mtleKQalpuCE
RVOIw1m+TgbAm7rTPE8Q/U65p0meZUKTo07EUPkCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRTKbh6uLkKLiLU6wlhyURgvJSUmDAfBgNVHSMEGDAWgBSnLReMjlP1ITHB
+2R0PJYM+Jf9DDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3B5MFhqSTVUOVNFeHdmdGtkRHlXRFBpWF9Rdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDQvMWI4MTNhLTVlODYtNDViMC05OWNkLTI4YjlkMjYxZWNiMS8x
L1V5bTRlcmk1Q2k0aTFPc0pZY2xFWUx5VWxKZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQv
MWI4MTNhLTVlODYtNDViMC05OWNkLTI4YjlkMjYxZWNiMS8xL3B5MFhqSTVUOVNF
eHdmdGtkRHlXRFBpWF9Rdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArl2rDANBAIAAjAHAwUDKgaTgDAN
BgkqhkiG9w0BAQsFAAOCAQEAaB3BnUpcRYHxLJv2q0Hx3wH5nxGGgfFAwJKztVVt
bCUkoUCO8wXvKKgxLCP2cG5tq9XRwGyWdOZMnznGDkXP6Omu5crZ/ULOIGIqAe37
Pl/+PAPB7tpcNALbbzDTz9b7I4bbriQalDX4JkZlBd8o5iy0zS1rgL1biABOwyO5
anr4z0maAE7mgR437sKLXTVRi1J7MrI9N+ITlv0uqKu77eVgyrgvzWMabdbE8TNB
kGreVgExVJBMPA5d/fRxujCmJqKJz0WQCMYEcTkoRn33P53fy/AZyAdc2FpaMkvu
cGG/7i/9lzIjuvu7vmdZOYqKuxWAvFH4PFDE0VpUEepNSQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:37 2025 by rpki-client