Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Ussh6npGXZUyfrLRRZgYmgw5SFI.roa
File: Ussh6npGXZUyfrLRRZgYmgw5SFI.roa (raw, json)
Hash identifier: uANzhK/sZNHrDrOTr7vaV+/ttgn7nbYySqUDrOucZcw=
Subject key identifier: 52:CB:21:EA:7A:46:5D:95:32:7E:B2:D1:45:98:18:9A:0C:39:48:52
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427484C0F38362A3CE6307D1E3A18DB58
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Ussh6npGXZUyfrLRRZgYmgw5SFI.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209087
IP address blocks: 85.8.136.0/22 maxlen: 22
85.8.136.0/23 maxlen: 23
85.8.136.0/24 maxlen: 24
85.8.137.0/24 maxlen: 24
85.8.138.0/23 maxlen: 23
85.8.138.0/24 maxlen: 24
85.8.139.0/24 maxlen: 24
179.189.212.0/22 maxlen: 22
179.189.212.0/23 maxlen: 23
179.189.212.0/24 maxlen: 24
179.189.213.0/24 maxlen: 24
179.189.214.0/23 maxlen: 23
179.189.214.0/24 maxlen: 24
179.189.215.0/24 maxlen: 24
185.227.92.0/22 maxlen: 22
185.227.92.0/23 maxlen: 23
185.227.92.0/24 maxlen: 24
185.227.93.0/24 maxlen: 24
185.227.94.0/23 maxlen: 23
185.227.94.0/24 maxlen: 24
185.227.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4c:0f:38:36:2a:3c:e6:30:7d:1e:3a:18:db:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52cb21ea7a465d95327eb2d14598189a0c394852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:df:01:a8:22:b7:31:ed:bc:ee:ae:25:16:
2c:83:ea:17:6c:a9:80:cf:41:b9:25:fc:26:3d:19:
56:5f:ea:d3:8e:44:3b:53:6c:a1:95:c5:f7:c6:87:
12:02:6c:ce:b1:00:dc:49:d8:bc:45:f5:17:4d:98:
a9:2d:59:74:eb:a0:f0:6d:83:55:2d:a4:f3:d3:70:
be:83:b6:bb:10:58:a3:29:02:24:13:1e:d5:1f:f7:
46:65:67:17:ec:9b:a1:ab:39:95:92:0c:f0:0d:40:
4e:7f:11:51:b9:ff:5a:bc:33:78:5e:ff:24:d4:81:
aa:d2:55:7e:51:b3:e4:aa:c1:db:24:13:49:c6:c8:
b3:03:b4:48:82:d9:bc:f7:ee:94:41:b7:9d:99:b8:
11:cd:5f:a3:e2:2d:87:2a:9b:58:3f:8d:c6:d4:fb:
05:5f:64:46:2e:e5:71:bf:f2:74:92:32:f2:d1:61:
66:2c:81:5d:ba:dc:0e:ff:4f:83:d6:d5:6c:46:18:
8a:15:e6:65:35:3e:37:54:3a:0c:2e:bd:8f:d1:5a:
eb:21:d1:8b:ee:5b:e3:0e:f9:4d:6c:dd:9a:ab:64:
a9:2d:bf:02:5e:8b:71:d8:8f:74:ba:4f:0b:2b:1d:
d8:32:76:4c:ef:65:cb:fd:bf:33:28:65:a7:a4:ac:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CB:21:EA:7A:46:5D:95:32:7E:B2:D1:45:98:18:9A:0C:39:48:52
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Ussh6npGXZUyfrLRRZgYmgw5SFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.136.0/22
179.189.212.0/22
185.227.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:11:47:89:dc:a7:c1:65:0c:f0:cf:1c:fd:13:30:55:bf:74:
30:d7:aa:ad:44:e7:b0:02:8e:97:9f:bf:d0:cb:3b:53:4c:5b:
67:63:c0:54:94:8a:2a:d2:26:5e:81:b4:f8:9e:7b:a9:01:7e:
66:e8:50:1f:7b:a0:09:79:20:25:fb:80:da:86:3c:20:ba:15:
21:8f:68:20:62:8e:f0:2e:39:1a:dd:b4:78:da:25:bd:f2:4e:
9f:c8:dc:cd:3a:69:64:e8:ac:e5:db:b2:48:29:e9:13:66:c2:
d8:63:61:6d:bc:9d:94:23:28:7b:e6:6e:04:fb:10:fb:4e:1b:
52:bc:e4:54:7b:d4:f3:30:86:fd:68:ae:4b:58:29:b0:b1:8d:
66:0c:cb:c5:43:79:b2:53:04:be:05:82:48:de:4a:f1:81:7e:
2b:aa:d0:06:07:80:c7:41:d0:f1:8b:58:31:76:5c:56:04:ae:
23:75:8c:09:62:cd:fc:f2:7a:0e:6f:e5:a5:3b:4b:b1:f6:15:
c7:5a:fd:88:67:86:f2:08:b1:e8:dd:04:c7:02:a3:bd:df:52:
8d:29:ce:6c:47:00:0d:a9:54:b8:5e:f9:eb:f9:1d:2b:26:5c:
1c:70:13:80:2c:11:e1:5a:68:43:e1:aa:b9:8a:23:59:aa:08:
aa:91:41:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:29:30 2025 by rpki-client