Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa
File: u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa (raw, json)
Hash identifier: ZwDDqnoNXIsm40ptE+7O6BmOJ1pGhObOr/LwRxZDq2E=
Subject key identifier: BB:4C:56:7A:DF:59:0C:73:17:56:48:CF:AD:BC:EC:D4:E9:96:3B:58
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 019420D5F8D61852094DA9E4CDAAC78EAED4
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa
Signing time: Wed 01 Jan 2025 07:48:01 +0000
ROA not before: Wed 01 Jan 2025 07:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.30.28.0/22 maxlen: 22
185.38.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f8:d6:18:52:09:4d:a9:e4:cd:aa:c7:8e:ae:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Jan 1 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb4c567adf590c73175648cfadbcecd4e9963b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:22:9e:eb:8a:68:6a:8a:1a:a5:18:39:d2:
37:43:16:77:7f:a2:9a:5c:77:df:a9:fe:d7:96:41:
51:6d:6e:44:0f:66:b9:b7:f9:5a:fb:de:3f:e8:1e:
09:c0:26:6c:da:91:b6:7a:3d:96:49:e9:10:c5:2a:
24:fd:a1:0f:b4:2a:51:21:e6:fa:1d:15:f2:d2:cc:
d5:43:45:f1:f1:fd:ff:9f:83:63:a2:28:f2:d6:aa:
d0:86:f6:c6:49:c2:e1:3b:33:fd:8a:e8:6a:44:65:
d1:51:a9:d8:ab:ab:6d:c9:bf:fa:fd:27:cf:f3:a9:
dc:cf:fb:53:6e:e2:37:a2:f1:b4:46:94:df:9a:3d:
d3:73:34:9d:90:b8:d0:87:6f:84:70:bf:8d:d8:57:
17:40:82:0b:21:26:17:29:6e:bc:c9:57:0d:8c:4e:
66:81:f4:da:fc:0c:e5:7a:2d:d4:9f:78:03:6e:9f:
a4:e0:ba:a9:a8:a0:9a:13:74:22:d1:00:cb:d8:5e:
f2:91:c7:f5:67:66:15:87:20:54:62:55:b9:b2:95:
61:43:36:50:41:69:79:fb:65:12:5e:2d:a7:50:17:
0f:48:6c:7a:18:8e:6e:50:4b:df:ca:fd:83:88:c9:
50:d6:0b:35:3e:5a:a3:88:b0:e2:59:19:66:ce:40:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4C:56:7A:DF:59:0C:73:17:56:48:CF:AD:BC:EC:D4:E9:96:3B:58
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.28.0/22
185.38.196.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:3a:73:84:98:a9:7d:85:da:15:48:25:cf:c0:4c:fb:1f:21:
6a:6b:63:b7:ae:57:96:f5:ad:cc:d9:a4:62:65:b3:cd:cc:9e:
7e:66:e5:e9:58:8f:05:06:f8:9a:64:67:c8:11:92:ba:a8:d4:
58:0b:67:20:98:14:73:eb:14:1d:bf:1d:92:c2:40:33:29:99:
a7:b9:db:fe:42:50:e0:a9:0f:d3:16:f9:4d:fc:1f:df:3d:37:
f1:c4:19:b0:18:e3:c7:e5:89:f6:c4:1b:be:25:95:81:cb:44:
89:b3:10:73:79:7b:30:ff:39:d0:77:72:04:f0:fe:cc:98:58:
a2:70:17:12:a5:4f:05:c2:d9:01:3a:cf:c1:78:24:18:cd:bf:
53:9c:7f:0c:fc:25:46:86:9b:73:2d:e4:ca:2a:96:4c:72:f7:
ba:b3:eb:df:45:93:9e:3e:70:b7:e5:ae:9c:31:6c:b5:47:41:
c0:90:b6:4d:50:c8:32:43:ab:0c:7c:d1:c3:1e:d9:87:57:af:
a6:ac:e3:f4:b2:7e:c9:0f:70:46:0a:29:ea:3b:40:e2:d6:c4:
4d:c6:ac:79:d0:da:4f:97:2d:63:14:63:50:15:bb:ae:3f:21:
be:12:01:17:aa:a7:43:04:98:29:e7:3e:23:a0:c1:c6:1d:ee:
d6:7d:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:31 2025 by rpki-client