Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/uhJiD75LxMes30E_4QTof6b_YKo.roa
File: uhJiD75LxMes30E_4QTof6b_YKo.roa (raw, json)
Hash identifier: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=
Subject key identifier: BA:12:62:0F:BE:4B:C4:C7:AC:DF:41:3F:E1:04:E8:7F:A6:FF:60:AA
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 019423690B19D926D7C0956EEBD1E42B6848
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/uhJiD75LxMes30E_4QTof6b_YKo.roa
Signing time: Wed 01 Jan 2025 19:47:54 +0000
ROA not before: Wed 01 Jan 2025 19:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51074
IP address blocks: 185.128.80.0/22 maxlen: 22
185.128.80.0/24 maxlen: 24
185.128.81.0/24 maxlen: 24
185.128.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:0b:19:d9:26:d7:c0:95:6e:eb:d1:e4:2b:68:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Jan 1 19:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba12620fbe4bc4c7acdf413fe104e87fa6ff60aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:c4:02:9d:c7:cc:7f:05:82:aa:6a:f1:3d:
3b:40:b0:fb:de:aa:27:ce:a7:15:9c:84:b4:82:25:
19:9f:6a:ca:43:27:90:0e:b1:2a:68:6e:12:c9:37:
85:29:2d:20:b4:12:30:b9:5a:50:95:4d:b9:f4:76:
14:b9:0b:8c:03:91:c8:af:da:1d:84:31:2d:04:3f:
db:5d:34:0b:2e:a7:6a:c1:1e:52:f2:0f:31:46:58:
13:93:67:34:a5:4f:41:f0:6a:9e:7b:b4:f1:e8:b2:
cc:7d:44:22:2a:a5:3c:59:f0:00:aa:6c:5b:46:a9:
b4:fc:af:97:b9:77:88:f6:26:f5:be:ba:03:6b:b2:
1b:21:af:3c:3b:eb:51:92:db:75:00:d7:d8:51:88:
60:26:88:51:75:e3:67:55:79:a4:eb:9f:3c:cd:14:
7e:e5:e4:f6:a7:7d:8c:8c:c2:d0:3a:ad:d4:18:2d:
f8:ef:2e:6f:76:97:3a:76:ff:ab:0b:2c:36:96:91:
c9:43:f8:b0:20:8c:de:2c:42:4a:ff:1d:a2:08:f0:
86:81:d7:c4:62:c4:a5:52:72:2a:12:fe:17:ca:2e:
00:e3:d8:7b:17:04:a8:ae:44:61:e7:48:8e:45:24:
7f:b6:d6:d5:96:77:63:29:5b:4d:33:d7:f3:5a:d7:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:12:62:0F:BE:4B:C4:C7:AC:DF:41:3F:E1:04:E8:7F:A6:FF:60:AA
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/uhJiD75LxMes30E_4QTof6b_YKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.80.0/22
Signature Algorithm: sha256WithRSAEncryption
68:15:6e:2c:3e:25:0f:8a:f5:52:1a:32:7b:8c:3c:e5:37:b0:
3f:be:a5:20:fc:16:f5:1f:f9:5f:81:d5:8f:61:e9:4f:35:70:
e1:1f:f0:7f:51:ab:69:59:a7:db:28:41:4d:57:35:79:e4:61:
5d:dc:3d:61:bc:3c:78:b9:9b:03:4a:c1:26:7f:41:fd:13:09:
a4:fd:3b:09:e1:a7:c0:bc:3e:16:54:7a:f4:6d:9b:28:47:43:
a2:0b:eb:b3:9c:4b:3e:ba:ba:8c:ab:ff:20:89:62:9e:a6:b7:
2b:4d:a7:53:52:59:9a:21:86:39:1b:be:86:90:47:15:59:60:
6f:b5:24:ad:e0:bc:8f:9c:69:00:2a:94:2b:99:29:2f:84:df:
16:2e:ca:e6:3c:d8:ea:4f:4a:ff:8e:81:79:65:14:3d:6e:13:
45:30:83:25:6d:4e:35:80:de:a7:4c:9f:22:a6:cf:1f:df:d8:
74:23:7b:28:ab:f8:ab:a2:cc:3e:7f:9a:e1:0d:cd:36:92:eb:
9a:a8:81:1e:85:aa:a7:50:a7:e4:36:fe:71:9b:0e:25:f7:e1:
55:d7:5d:15:a3:32:c2:73:79:fe:14:5b:3a:cd:c9:ed:7e:1f:
be:0a:20:89:44:cb:45:98:1b:e4:68:68:70:bf:63:15:88:cd:
5a:4c:c0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:30:53 2025 by rpki-client