Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/jUumzvSvJZopQlJjgUSxl9OvmLg.roa
File: jUumzvSvJZopQlJjgUSxl9OvmLg.roa (raw, json)
Hash identifier: N22cbwLq9iCzp/eC/Re+Jyp8fEgyBO6vAKONLHpReeg=
Subject key identifier: 8D:4B:A6:CE:F4:AF:25:9A:29:42:52:63:81:44:B1:97:D3:AF:98:B8
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 18D1217F
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/jUumzvSvJZopQlJjgUSxl9OvmLg.roa
Signing time: Sat 01 Jan 2022 05:53:33 +0000
ROA not before: Sat 01 Jan 2022 05:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202687
IP address blocks: 185.84.240.0/24 maxlen: 24
2a03:4bc0:1015::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416358783 (0x18d1217f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Jan 1 05:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d4ba6cef4af259a294252638144b197d3af98b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:c4:09:b5:84:88:9c:b5:9f:92:96:a1:22:
7a:89:f2:fd:44:6f:b5:98:0b:de:10:4c:49:5b:19:
20:fd:f4:72:08:82:35:f8:8e:1f:1c:fb:77:7f:f1:
9e:e9:b1:90:2f:b2:e8:ca:fc:85:25:74:ab:dd:6f:
83:b5:4d:25:0a:3e:84:99:fa:20:78:df:54:e0:10:
39:a3:eb:dc:1a:00:61:dd:25:26:36:97:a7:2a:a5:
37:8f:12:25:b3:94:0a:bf:5a:7a:68:a2:78:d0:56:
da:58:a2:6e:24:af:d3:97:2e:30:9f:69:d2:bb:80:
d5:da:d9:3e:82:07:69:a1:d3:a9:38:76:84:cc:91:
d0:b2:74:de:ee:64:6c:ce:c6:d0:6a:ae:c2:8b:0f:
30:94:e4:a1:f1:b3:b1:cc:30:b2:92:b4:e7:25:1c:
32:98:0e:8f:c4:42:47:1c:6b:28:bc:ee:90:36:14:
65:73:f0:9a:83:cc:c1:74:00:d3:85:4b:46:eb:a6:
8c:b4:cc:da:8c:e0:82:4a:e2:0a:34:fd:96:cd:18:
cd:71:ca:d7:48:3c:76:81:2c:5d:38:cb:ed:0a:df:
d0:41:1a:06:b0:54:96:18:5f:07:8c:30:7c:14:7f:
9c:4b:34:17:03:d9:8a:c7:90:04:78:01:04:0d:cc:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:A6:CE:F4:AF:25:9A:29:42:52:63:81:44:B1:97:D3:AF:98:B8
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/jUumzvSvJZopQlJjgUSxl9OvmLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.240.0/24
IPv6:
2a03:4bc0:1015::/48
Signature Algorithm: sha256WithRSAEncryption
3c:bf:25:71:72:c5:ff:35:59:c5:7e:a2:6a:ab:94:98:2e:c4:
9e:11:75:35:1b:89:fc:15:a3:df:5b:94:13:f8:2d:35:d2:20:
d9:f0:c3:00:99:26:c0:58:c3:92:e3:b6:c0:da:67:5c:71:53:
ff:4b:d6:dc:71:64:5b:51:29:d3:1c:f9:6c:d6:1e:e1:25:b9:
3e:62:dc:66:a2:15:64:b1:ae:8a:17:e1:5f:22:ed:af:ac:a8:
79:de:db:4e:02:e6:f0:74:66:c5:8c:ac:78:ce:42:4e:41:3b:
0a:98:81:95:97:7c:37:5f:90:15:82:83:ca:e1:df:95:d0:f9:
10:fa:73:d6:66:57:05:23:6e:97:33:57:cc:15:5f:56:ec:b5:
69:ea:17:4f:8e:07:c7:78:6e:68:c7:28:b0:e6:8b:8d:32:80:
78:34:71:96:de:7a:18:65:e2:3a:5f:4a:9c:e0:83:d1:76:b0:
ef:2a:8f:ee:a3:13:ab:4f:37:b1:1c:ed:f4:d0:da:a2:af:df:
c5:0f:14:d8:68:56:c1:7f:ea:ab:9a:5c:52:23:9e:c0:f7:60:
0f:cd:cf:b7:61:3c:5b:4d:c8:14:f2:ad:c8:ac:38:51:4a:f7:
9f:33:f6:1b:43:2b:fe:95:22:72:73:49:e5:da:78:28:a4:4d:
5b:f6:15:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:45:16 2025 by rpki-client