Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/xmUpqD4NUMAqisL66k_x6MTYnaQ.roa
File: xmUpqD4NUMAqisL66k_x6MTYnaQ.roa (raw, json)
Hash identifier: dGRcbHkgyhvucFtnmzWvrILS2aHk2c8SQDJ6rOX+JL4=
Subject key identifier: C6:65:29:A8:3E:0D:50:C0:2A:8A:C2:FA:EA:4F:F1:E8:C4:D8:9D:A4
Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial: 01941FFA59629522EE644735C658807FE93D
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/xmUpqD4NUMAqisL66k_x6MTYnaQ.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42687
IP address blocks: 185.182.168.0/22 maxlen: 22
185.182.170.0/23 maxlen: 23
185.219.242.0/23 maxlen: 24
2a0d:25c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:59:62:95:22:ee:64:47:35:c6:58:80:7f:e9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c66529a83e0d50c02a8ac2faea4ff1e8c4d89da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:63:4c:cd:25:ff:dd:f1:e7:c6:c1:4f:b5:
88:4f:da:b2:8a:61:6c:85:2f:bb:ed:ce:46:eb:35:
75:64:00:f4:37:87:fa:14:85:98:a1:b0:76:e1:a3:
d6:5e:08:0e:85:f8:e2:15:88:ef:91:b8:75:27:d2:
fe:bd:47:d3:c0:95:cc:e2:45:92:08:4c:d5:c1:ca:
a4:ca:b1:3c:cd:30:b7:35:09:fc:cb:94:ee:8f:68:
31:c2:ec:61:e4:2d:87:ad:0a:ff:8b:6a:b4:93:74:
34:3c:d4:33:40:44:5a:62:b0:42:d8:69:4e:d5:f8:
57:67:c2:12:27:d6:97:45:77:b9:5f:44:90:aa:3f:
62:1b:61:e0:54:b3:23:fa:fe:fc:f1:d5:1b:a7:01:
51:b9:c8:d9:9b:82:0f:f8:1d:fb:8b:47:cf:4e:da:
1e:3b:6f:48:d2:e0:63:67:fc:02:54:fd:67:6f:66:
6d:b2:9f:07:c6:6e:87:17:8c:e6:8e:8a:a1:c9:af:
c8:db:5d:07:7c:c1:c7:47:c1:18:e1:c1:93:b1:4d:
46:c2:f5:54:c5:68:9d:42:72:0b:d4:fd:f6:ca:28:
70:97:9f:79:7f:ca:9f:d5:86:bd:cd:59:2a:43:f3:
ec:c9:5f:8d:3e:67:44:ba:d0:b7:e3:12:a5:33:9d:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:65:29:A8:3E:0D:50:C0:2A:8A:C2:FA:EA:4F:F1:E8:C4:D8:9D:A4
X509v3 Authority Key Identifier:
keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/xmUpqD4NUMAqisL66k_x6MTYnaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.168.0/22
185.219.242.0/23
IPv6:
2a0d:25c0::/29
Signature Algorithm: sha256WithRSAEncryption
ad:12:b4:9b:00:3b:48:39:52:7b:9c:8d:6a:3e:68:65:ce:3d:
39:ab:76:02:f2:40:e4:e1:f7:93:ef:fa:92:92:96:98:e8:bb:
c1:4e:a5:cb:45:9f:bc:a6:82:8d:65:3b:23:ad:44:58:c9:65:
5e:ac:86:14:18:3c:dc:9d:73:fa:e6:a0:97:5a:d7:ec:2f:85:
e2:fb:e9:e2:8e:3f:55:fa:02:fc:ff:2a:58:20:12:1b:96:e5:
5a:33:bb:71:7f:36:4a:3c:45:51:5a:ec:dc:57:72:6c:63:32:
63:de:da:9b:a3:5f:75:c0:7e:7a:83:c2:46:5c:ed:ed:97:85:
64:91:a9:b4:70:ae:a5:90:0f:5c:06:52:dc:d7:f5:79:aa:0c:
37:f0:99:8a:3d:cb:c3:7a:b5:91:23:6f:38:5c:74:6a:32:a0:
a0:17:be:7a:06:31:0a:4a:95:8b:ac:5a:9a:4d:65:46:ec:29:
00:9b:a8:fd:ed:1f:6f:4d:51:de:cc:4c:8e:e3:06:bb:e8:f6:
a1:48:80:97:92:68:5c:0b:41:cc:56:05:53:05:ae:61:dc:23:
ba:1b:ca:8e:cc:41:68:86:ef:c0:5a:3f:39:d9:d9:8f:01:1b:
49:88:75:94:d0:4e:3d:46:98:16:b7:c9:2e:65:a9:8f:7e:9c:
9a:8b:90:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:57:03 2025 by rpki-client