Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/UuM99P4hBW8NbICQKA4abiYs_1s.roa
File: UuM99P4hBW8NbICQKA4abiYs_1s.roa (raw, json)
Hash identifier: RFdd3qlA72k+4XRTI6Q2V1J+J1MI1M9ZFL2igt3kVWQ=
Subject key identifier: 52:E3:3D:F4:FE:21:05:6F:0D:6C:80:90:28:0E:1A:6E:26:2C:FF:5B
Certificate issuer: /CN=2f1e253977bf583e0e420ec977a8ecf4ed154dbe
Certificate serial: 0AEC8B2E
Authority key identifier: 2F:1E:25:39:77:BF:58:3E:0E:42:0E:C9:77:A8:EC:F4:ED:15:4D:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/UuM99P4hBW8NbICQKA4abiYs_1s.roa
Signing time: Sat 01 Jan 2022 13:58:40 +0000
ROA not before: Sat 01 Jan 2022 13:58:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4224
IP address blocks: 185.220.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183274286 (0xaec8b2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1e253977bf583e0e420ec977a8ecf4ed154dbe
Validity
Not Before: Jan 1 13:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52e33df4fe21056f0d6c8090280e1a6e262cff5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:b8:48:e8:64:6f:91:83:08:11:2a:24:e8:
7c:ca:0c:cd:73:7d:52:88:3b:74:32:74:a0:35:f3:
21:63:2f:36:61:a4:7b:20:d6:27:5d:fb:0e:23:4c:
bf:93:69:de:0c:42:9b:65:bb:40:04:85:66:0e:ee:
bc:bd:6d:bf:00:ff:b6:8c:dd:db:90:d3:0d:2e:44:
8c:e4:06:93:f6:70:a0:7a:37:8c:a5:ba:22:01:e9:
19:ed:5e:fc:38:a9:6e:39:10:e4:f4:8e:8a:4f:20:
13:e5:6c:da:d2:40:38:51:d3:93:1d:9a:24:38:73:
1b:53:68:8f:c2:d0:9b:60:6c:0e:b9:42:bc:24:de:
ec:42:84:ac:34:e2:30:c8:c3:af:97:7c:a6:2e:b2:
d1:71:e5:22:e4:a0:58:18:5c:ac:e9:93:12:8d:60:
ff:b7:bb:ec:3a:5d:b9:95:5a:38:68:3a:50:88:9a:
a4:df:4a:b3:a7:ef:50:78:ba:8d:89:e2:ff:15:e7:
09:f4:2c:30:0b:2c:58:67:96:54:17:7a:ec:a0:ff:
51:f9:74:bd:9a:78:20:27:df:08:ba:04:11:f3:9f:
35:4b:fd:fd:4a:8f:97:e8:39:65:ac:7a:9d:aa:36:
6c:65:b3:91:98:f8:c1:ca:60:76:48:62:32:ab:af:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E3:3D:F4:FE:21:05:6F:0D:6C:80:90:28:0E:1A:6E:26:2C:FF:5B
X509v3 Authority Key Identifier:
keyid:2F:1E:25:39:77:BF:58:3E:0E:42:0E:C9:77:A8:EC:F4:ED:15:4D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/UuM99P4hBW8NbICQKA4abiYs_1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5a:5f:1b:dc:83:b4:a8:6b:ac:8e:3b:0a:35:bf:38:96:08:
03:7b:eb:18:30:25:08:05:fa:b4:4e:cf:2a:ab:83:33:f0:b7:
7e:01:c5:60:99:9d:b2:4c:8c:ca:f9:25:f3:0f:af:45:6c:39:
56:0b:0a:5d:52:65:d6:fa:66:95:ef:fc:61:60:dc:63:ad:77:
01:50:5f:f6:be:52:d7:5f:db:b7:88:82:bc:47:2d:48:40:13:
b5:b3:c7:5e:e8:b4:10:48:44:a9:00:ad:df:5c:e3:a3:d7:8c:
65:58:eb:ef:49:05:9e:59:ae:b2:d3:85:fa:68:ad:69:51:05:
cb:c6:d3:25:0e:c5:1a:3a:fd:f5:3e:18:66:25:57:4b:ae:77:
d0:10:bf:f4:15:61:ac:93:c6:f7:a8:ce:99:ba:53:9f:f9:15:
ae:4e:88:c2:e3:01:10:17:8c:dd:d7:e3:e2:98:21:8f:2a:1b:
15:60:d9:d2:47:5e:5f:9d:58:e1:21:73:d8:75:c9:5a:93:4c:
dc:7e:96:c1:e7:7a:89:42:2d:d5:77:f3:fb:b4:fc:a2:9f:ba:
dc:e9:ea:fe:b7:8c:19:d2:84:c8:f2:ac:5f:0b:56:42:78:57:
b6:e4:d0:7a:2c:6c:4c:f2:2f:63:58:8c:9a:82:34:e1:d5:7f:
02:85:73:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:15:20 2025 by rpki-client