Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/U18ZgLj5OBdZtKulHwgk58__-iY.roa
File: U18ZgLj5OBdZtKulHwgk58__-iY.roa (raw, json)
Hash identifier: l0olVXHseHYKb1JyTRZehUwkwTt4apIx6ciEAfAWhN0=
Subject key identifier: 53:5F:19:80:B8:F9:38:17:59:B4:AB:A5:1F:08:24:E7:CF:FF:FA:26
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 018477B4BC48B807A375052C15C0C5FB0DF3
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/U18ZgLj5OBdZtKulHwgk58__-iY.roa
Signing time: Mon 14 Nov 2022 19:54:04 +0000
ROA not before: Mon 14 Nov 2022 19:54:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203936
IP address blocks: 185.240.88.0/23 maxlen: 23
89.34.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:77:b4:bc:48:b8:07:a3:75:05:2c:15:c0:c5:fb:0d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Nov 14 19:54:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=535f1980b8f9381759b4aba51f0824e7cffffa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:20:f3:42:d8:61:13:fd:38:74:d9:50:c0:c0:
fe:78:de:9c:52:10:52:bc:0b:97:5c:b2:0a:3b:63:
32:0b:4e:7a:68:bd:f6:e7:d4:4b:c4:8f:5b:c2:bd:
68:4a:ee:94:8c:6e:b5:64:33:fd:b0:45:5a:96:bd:
d8:dd:00:21:53:93:a9:4e:cc:a6:05:16:4e:f3:b9:
f0:45:7c:b0:28:a3:55:f4:72:4a:35:69:8e:ec:50:
b3:90:e5:a2:cd:e4:e5:cb:c9:79:62:76:43:d5:c3:
9f:a7:dc:5f:bf:2f:42:06:d8:68:7f:18:47:ae:17:
cb:49:f7:ac:c9:9b:1f:7b:db:02:55:85:a2:52:e2:
e9:84:13:e5:e5:7e:53:fd:34:58:4b:28:79:d8:e5:
78:82:42:d9:1e:5d:ac:19:fa:69:36:33:0c:a9:c2:
bf:32:2b:3e:90:ee:de:a9:1f:5d:73:74:94:c3:ce:
85:a7:e5:78:7d:11:c8:44:17:1e:68:8a:d0:c9:3f:
af:52:d4:b5:81:a3:65:c7:da:78:aa:2c:b0:d9:ac:
d6:48:29:72:fc:77:2f:67:dc:47:d2:5e:85:92:06:
2d:9c:65:05:14:b4:2a:1e:a2:ab:0a:c7:6f:56:8a:
99:2e:a7:5a:c3:c5:d2:7f:53:66:af:c2:fe:0a:51:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5F:19:80:B8:F9:38:17:59:B4:AB:A5:1F:08:24:E7:CF:FF:FA:26
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/U18ZgLj5OBdZtKulHwgk58__-iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.76.0/24
185.240.88.0/23
Signature Algorithm: sha256WithRSAEncryption
56:ab:9c:c1:cc:a2:bb:0e:89:58:2a:59:ed:87:36:8b:bd:55:
af:16:32:d7:8c:93:59:5c:ce:25:59:70:8e:c1:41:b7:ad:1b:
bc:91:da:a6:1c:2d:15:77:34:7d:a8:cf:91:b8:f8:f3:3e:10:
e4:d2:bf:3c:14:50:d3:4b:82:95:eb:bc:17:ad:eb:e9:ed:3b:
e2:70:22:41:10:43:c3:ae:38:39:96:ae:6c:83:a7:b6:b2:d6:
bd:cd:84:b6:0d:cc:29:be:47:a3:fd:90:4a:cf:73:b8:5d:ee:
e7:df:15:b3:d2:64:f0:20:f7:a0:d5:fa:07:e0:a4:a8:90:c0:
9c:00:0b:97:3e:6a:f7:c4:27:1c:ee:20:73:fb:c4:be:18:1b:
16:e9:17:39:e3:1c:5e:7d:eb:7d:9f:9c:cc:10:25:7a:b1:27:
4b:42:a0:ab:12:9f:f7:75:0f:de:86:91:e0:20:2c:4a:de:d9:
38:63:01:df:c9:bb:d2:5b:34:52:85:a0:ba:f0:69:0d:4c:ff:
86:42:ce:a5:a4:b4:cb:49:7b:9d:75:07:f6:55:51:02:e4:eb:
78:2b:20:b7:af:d5:9f:cb:0b:11:16:a0:d3:a2:ab:af:88:41:
00:39:a0:63:f7:28:59:ac:e2:4b:ee:e6:01:6a:00:dc:dc:de:
2f:e8:f2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:15 2025 by rpki-client