Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/u8p2k1kowabt5V010HcHbUdny4A.roa
File: u8p2k1kowabt5V010HcHbUdny4A.roa (raw, json)
Hash identifier: +zIIZMzEVP0HgE88S7aeA3JokmowyYpTKNzs1+R3c2M=
Subject key identifier: BB:CA:76:93:59:28:C1:A6:ED:E5:5D:35:D0:77:07:6D:47:67:CB:80
Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial: 01942444FE0715B1AF3D0117CC13BCB40BDC
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/u8p2k1kowabt5V010HcHbUdny4A.roa
Signing time: Wed 01 Jan 2025 23:48:08 +0000
ROA not before: Wed 01 Jan 2025 23:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39605
IP address blocks: 185.159.104.0/22 maxlen: 24
185.159.104.0/23 maxlen: 23
2a07:b880::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:fe:07:15:b1:af:3d:01:17:cc:13:bc:b4:0b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Validity
Not Before: Jan 1 23:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbca76935928c1a6ede55d35d077076d4767cb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:ab:27:23:07:76:87:5e:40:d6:5d:5c:9f:
a7:b7:87:f6:48:07:05:81:6f:d1:0b:da:76:23:ea:
1d:85:89:8e:07:99:54:91:c3:04:ad:6a:a6:da:bb:
2f:61:1d:c1:2c:13:3a:96:3e:33:ef:c1:5d:dd:3a:
ad:b1:81:71:da:df:70:37:fb:35:fc:b7:36:1f:75:
9e:38:03:7e:8b:0e:e2:84:be:63:ea:bc:32:b0:ad:
ee:7b:87:6d:e8:5f:16:bd:d2:71:f0:0a:8c:f7:b3:
35:38:d6:28:35:93:cc:4c:d9:2f:a2:c1:47:6f:3f:
4e:0a:d6:15:14:ce:63:38:1a:8b:33:86:be:64:5d:
8e:c3:0b:0d:b4:68:de:40:04:a5:f1:ff:91:2e:38:
a9:05:fb:a4:4b:d0:ad:e9:b3:cc:d0:f2:b6:fa:77:
9a:d2:b8:8d:3b:5c:f3:bc:0d:d1:d6:db:28:9a:a1:
ca:4d:4c:73:1b:5e:20:4d:8d:55:92:61:c5:8a:90:
6b:7e:b6:16:08:52:6d:6f:67:99:20:07:c1:ca:68:
d5:4e:13:32:92:6b:70:96:32:b6:cf:f3:19:a5:19:
0e:3a:d4:9f:10:ea:c5:d9:a7:07:94:ea:19:a6:a2:
b5:bf:a8:1d:0b:45:2a:84:a2:19:a7:ba:b2:36:e4:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CA:76:93:59:28:C1:A6:ED:E5:5D:35:D0:77:07:6D:47:67:CB:80
X509v3 Authority Key Identifier:
keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/u8p2k1kowabt5V010HcHbUdny4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.104.0/22
IPv6:
2a07:b880::/41
Signature Algorithm: sha256WithRSAEncryption
3b:73:7e:1e:64:5f:3d:0c:2e:24:e2:91:1e:46:a2:90:cd:f1:
2f:52:69:e1:c6:82:c9:4c:84:e8:f7:18:eb:c0:bd:c3:6b:1e:
71:be:6b:45:c4:b5:ee:36:33:1f:75:97:b6:77:85:85:81:51:
96:f3:59:fe:9c:ab:87:71:20:d7:e0:b5:63:03:6e:9b:f2:02:
df:35:8d:9c:83:77:3b:7a:49:d2:65:25:59:7c:05:b0:8e:f7:
57:70:0d:f1:49:68:11:52:39:19:bb:e9:79:68:00:69:89:8a:
a9:a4:58:f7:21:d9:98:79:2a:af:ff:75:8a:b4:6c:40:fe:7a:
f5:d8:85:15:25:d3:de:4b:5d:c3:fa:f5:e4:4e:be:0f:61:1f:
bb:e9:b6:5a:d2:ff:21:cc:79:55:d9:e7:5c:ef:a1:fa:f1:3d:
45:92:ee:d9:0a:ef:ad:46:4c:45:57:60:d6:07:78:c4:f9:04:
32:cb:eb:81:9a:ca:66:77:ee:9d:30:bd:38:0d:b2:8c:4e:4f:
fb:d1:5f:63:ae:26:c5:67:65:af:22:d3:a2:2e:0c:3d:12:ce:
ba:45:16:56:c3:66:2e:b8:91:69:a6:48:9b:1a:c6:66:19:4c:
0c:eb:97:49:0c:0b:26:35:d8:12:ef:b4:00:7e:10:c5:ae:c6:
37:7b:70:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:17:50 2025 by rpki-client