Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/uMDGxERa6P3s5G-eqASpkdKIVs0.roa
File: uMDGxERa6P3s5G-eqASpkdKIVs0.roa (raw, json)
Hash identifier: lXC3iZkcxjF6FfQQB+SP6ZO01v0mV0T1x9c1yGt9OB4=
Subject key identifier: B8:C0:C6:C4:44:5A:E8:FD:EC:E4:6F:9E:A8:04:A9:91:D2:88:56:CD
Certificate issuer: /CN=c53feb2ac60fa313f9a7300e4c5ee33b43a88341
Certificate serial: 162D1E01
Authority key identifier: C5:3F:EB:2A:C6:0F:A3:13:F9:A7:30:0E:4C:5E:E3:3B:43:A8:83:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT_rKsYPoxP5pzAOTF7jO0Oog0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/uMDGxERa6P3s5G-eqASpkdKIVs0.roa
Signing time: Sat 01 Jan 2022 04:56:59 +0000
ROA not before: Sat 01 Jan 2022 04:56:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202019
IP address blocks: 185.39.216.0/22 maxlen: 22
95.181.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372055553 (0x162d1e01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53feb2ac60fa313f9a7300e4c5ee33b43a88341
Validity
Not Before: Jan 1 04:56:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8c0c6c4445ae8fdece46f9ea804a991d28856cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:be:77:87:4a:25:6d:dd:38:17:fd:1b:00:
5e:e3:dd:1e:87:88:fa:8e:5b:b1:16:2b:32:77:c7:
0c:0b:7e:d6:fd:fc:73:4f:b7:00:79:e8:4c:4a:3b:
54:7b:65:0d:70:eb:ba:70:d4:b7:c2:88:92:3e:da:
9f:0f:28:dd:50:89:dc:0f:d5:a8:4c:19:92:f4:c2:
32:12:f4:76:44:cc:a9:d0:35:4f:00:33:eb:e2:f4:
df:ce:ff:02:73:07:c3:42:f9:a9:65:59:a7:c4:78:
ef:61:fe:5e:0f:f6:8e:b1:62:eb:8b:a8:59:36:9c:
4b:24:c0:84:52:e6:85:df:2b:da:31:15:4c:d4:b9:
5b:87:c8:e2:39:0c:90:b2:7b:b5:b2:19:64:a0:90:
da:1c:3a:cb:05:89:f2:08:93:77:5f:8d:2c:79:e9:
0a:bf:6d:11:d0:6a:73:0a:2d:99:6f:83:5f:5c:1a:
0e:58:65:2d:77:88:b5:bd:b8:82:7c:da:ca:4b:5f:
3d:7d:85:1b:f4:4f:9a:6d:18:54:09:50:e1:40:a1:
3c:95:30:d3:4f:81:29:cd:94:f9:f9:47:9f:ac:b3:
c0:97:12:aa:c6:9f:d8:d3:79:f7:33:82:fc:f9:04:
1e:ab:a1:8b:7c:a6:14:0e:91:10:e4:86:68:03:3c:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C0:C6:C4:44:5A:E8:FD:EC:E4:6F:9E:A8:04:A9:91:D2:88:56:CD
X509v3 Authority Key Identifier:
keyid:C5:3F:EB:2A:C6:0F:A3:13:F9:A7:30:0E:4C:5E:E3:3B:43:A8:83:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT_rKsYPoxP5pzAOTF7jO0Oog0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/uMDGxERa6P3s5G-eqASpkdKIVs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/xT_rKsYPoxP5pzAOTF7jO0Oog0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.220.0/22
185.39.216.0/22
Signature Algorithm: sha256WithRSAEncryption
77:f3:08:16:75:8a:04:cf:63:10:ea:a8:b7:6e:7b:06:d5:d6:
0d:25:2d:84:01:60:68:d7:f9:49:0b:20:e7:e0:19:a8:b3:ca:
af:1b:5c:39:9d:2a:8c:5b:a0:99:d9:47:c5:07:bd:e3:21:8f:
e3:46:92:e7:be:24:88:43:b6:74:8b:2d:38:54:0b:75:66:50:
eb:bb:57:ba:55:56:5c:a1:9b:6c:99:97:3d:21:34:03:b9:34:
b5:ee:ae:91:82:59:7b:41:b3:ba:5d:6d:f9:e6:d1:d3:4d:cd:
c4:cc:bd:f5:13:cb:f7:4c:31:78:3e:c1:a7:66:c1:50:54:3b:
86:14:8f:a6:64:17:56:49:2d:1b:ce:67:3e:6e:fe:01:ed:9d:
45:3d:1b:79:5c:b6:9b:58:52:55:c2:ba:ed:fa:e6:d4:3b:93:
89:fa:c6:81:99:22:ce:12:0b:dd:41:f8:dd:e4:4f:b6:ef:00:
29:21:32:da:6b:6b:2b:76:c6:af:56:37:04:3c:c1:78:a0:2a:
63:9f:cc:1c:6b:7a:37:b6:6f:be:5d:4a:6c:97:f6:78:12:23:
85:a6:be:0a:50:e1:f5:bf:4c:70:77:f0:38:76:bd:f5:2c:05:
da:9d:72:d5:a6:14:da:54:58:2b:b5:69:4e:e3:58:82:a5:b9:
a5:94:5f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:25:38 2025 by rpki-client