Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa
File: uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa (raw, json)
Hash identifier: MtHvS+JR+Oum24yd4r12c1cN1Y/6sK4FbwymNPm07k4=
Subject key identifier: B8:F9:24:CE:0E:62:FC:DF:42:FD:07:F3:95:91:7B:CC:2A:15:0A:91
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 019427B590B98D319AEFD42BFD17DD0C893A
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa
Signing time: Thu 02 Jan 2025 15:49:57 +0000
ROA not before: Thu 02 Jan 2025 15:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214379
IP address blocks: 185.126.255.0/24 maxlen: 24
194.4.71.0/24 maxlen: 24
212.79.125.0/24 maxlen: 24
212.87.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:90:b9:8d:31:9a:ef:d4:2b:fd:17:dd:0c:89:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jan 2 15:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8f924ce0e62fcdf42fd07f395917bcc2a150a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:cb:76:13:87:8c:0c:1b:73:f3:41:3f:bc:
cb:53:da:53:d7:de:74:a8:59:35:c9:4e:4b:04:58:
b1:c4:0b:fc:6a:f7:b1:53:ff:35:7b:d6:d4:0b:51:
c8:61:f7:82:39:e0:5b:6e:fe:5c:fb:b1:5e:1c:32:
08:b8:2d:b8:87:ce:b4:79:c0:bb:bf:d1:11:dd:b8:
d8:ee:6c:e0:bf:4e:fb:da:1e:89:92:a6:ad:ff:54:
6d:8f:33:93:67:f9:59:1c:bd:90:31:c3:e9:49:02:
14:e6:e6:ed:5e:63:69:8b:5d:35:d8:b4:3e:63:b1:
9d:65:05:f6:f5:22:10:60:d4:e0:79:4c:22:bb:60:
9d:b8:ac:31:d0:92:12:b3:e8:29:5f:fb:c2:3b:05:
22:d2:22:bc:47:a6:78:f5:61:a1:40:80:63:14:07:
f4:7d:14:30:ff:f6:ab:21:08:66:69:aa:8b:e9:86:
0e:67:dc:ee:97:9d:d4:6e:1f:99:62:76:dc:b3:83:
dd:72:de:f4:cd:05:37:69:dd:32:88:53:87:b5:7e:
bb:d5:c4:a3:ef:d2:68:3d:13:23:b1:80:ea:57:f2:
a7:e7:dc:46:0e:08:ab:f0:c9:85:61:64:d1:b2:be:
64:59:30:4c:08:68:0d:df:c7:81:54:ef:8f:2c:f4:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F9:24:CE:0E:62:FC:DF:42:FD:07:F3:95:91:7B:CC:2A:15:0A:91
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.255.0/24
194.4.71.0/24
212.79.125.0/24
212.87.168.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b3:ea:a6:2f:6e:a4:b5:ca:6b:58:ec:db:82:cd:31:d6:77:
c1:d9:bf:b1:45:5d:38:5e:1e:24:91:86:12:3c:ad:8a:cf:50:
c1:60:34:c3:65:70:f2:52:a4:61:98:ee:3b:cd:2e:0c:b7:c4:
60:48:39:d6:92:6c:d6:46:5a:67:5b:79:d5:0a:1c:3e:02:8d:
ba:36:ea:1d:8f:0a:e4:ad:31:b7:19:b8:b6:9d:6d:b5:bf:44:
fd:33:34:21:31:52:ae:40:ff:54:03:46:86:9a:89:93:62:52:
a5:30:7d:8b:a9:42:46:c1:97:75:0d:d2:7d:3f:de:52:89:96:
a2:46:78:18:20:bc:99:f2:e0:6c:bf:54:96:89:1b:7f:98:23:
b3:97:86:84:07:75:4c:de:ff:f2:d5:b3:f9:fd:f3:af:14:1a:
c9:a0:10:6d:32:ab:5c:04:c3:41:74:a0:6e:1a:42:2f:25:af:
de:2c:1b:14:68:63:04:e9:4f:a0:21:95:cf:8b:27:5b:eb:49:
46:a2:54:9d:d8:3d:37:72:d3:a7:2a:e6:57:cd:24:72:ca:d2:
3f:59:80:9f:3a:c5:d1:19:1a:c4:05:98:1e:e7:77:b6:1c:f3:
1d:d1:75:0e:63:4b:e7:15:23:b1:1c:b6:f7:29:1a:5f:1d:98:
2b:9c:3c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:33:06 2025 by rpki-client