Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/UmPdXcB87LTnfP1Vg3oW_URaukk.roa
File: UmPdXcB87LTnfP1Vg3oW_URaukk.roa (raw, json)
Hash identifier: 83EUHwQ3blWBwS3edM/z7UuelSE4PX5MSdHszZ1a7QU=
Subject key identifier: 52:63:DD:5D:C0:7C:EC:B4:E7:7C:FD:55:83:7A:16:FD:44:5A:BA:49
Certificate issuer: /CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Certificate serial: 01941F8BFF84C006A4BA83037BF6768FECB6
Authority key identifier: 7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/UmPdXcB87LTnfP1Vg3oW_URaukk.roa
Signing time: Wed 01 Jan 2025 01:47:36 +0000
ROA not before: Wed 01 Jan 2025 01:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206771
IP address blocks: 185.171.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8b:ff:84:c0:06:a4:ba:83:03:7b:f6:76:8f:ec:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5263dd5dc07cecb4e77cfd55837a16fd445aba49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:a9:97:8b:d1:63:66:6a:c9:10:2f:91:51:
89:94:9f:7c:f5:87:e9:fe:ae:82:3c:7e:e1:e7:cb:
9b:83:13:af:17:dd:2f:80:6b:d5:6b:ce:c1:49:55:
53:4c:48:b0:1b:15:53:5d:ef:86:16:96:f1:5b:f1:
66:4f:69:9d:4e:d2:82:a1:80:66:f9:0d:7c:59:74:
12:99:33:65:6b:9b:02:b5:49:41:4f:55:fd:26:bc:
e3:e6:5a:7b:b6:8e:0f:9c:74:15:ef:eb:57:b2:2e:
18:55:86:70:ff:2a:d2:a0:95:9f:2e:70:0c:0c:02:
21:f6:c6:1b:e9:97:66:a3:4a:ec:ac:dc:95:60:56:
ae:23:93:17:00:8c:7b:63:46:ba:0f:d7:65:eb:12:
e6:32:46:7a:b1:59:1e:40:17:36:21:27:00:9f:60:
ee:f0:cd:4c:5e:27:f7:f4:0c:cc:7a:24:04:e2:fb:
4d:e3:cc:f0:43:57:f1:9c:b8:9b:2f:6a:80:de:01:
36:2c:6f:68:e5:eb:c8:23:e9:a3:89:d7:86:a1:54:
3c:08:93:b0:d0:26:af:f0:26:2f:9d:27:f1:1d:9f:
b8:ba:e7:84:73:a8:6d:2a:fc:1c:3b:3b:70:65:d6:
30:2e:a4:15:17:cc:35:68:b3:d3:d8:89:87:a0:d4:
3f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:63:DD:5D:C0:7C:EC:B4:E7:7C:FD:55:83:7A:16:FD:44:5A:BA:49
X509v3 Authority Key Identifier:
keyid:7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/UmPdXcB87LTnfP1Vg3oW_URaukk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.116.0/22
Signature Algorithm: sha256WithRSAEncryption
32:50:0f:97:d2:1e:49:5f:22:15:7d:c7:b7:ae:05:46:cd:ca:
d9:50:7f:f1:5e:14:e3:72:20:6d:10:96:79:51:1a:9e:e8:a4:
2d:d5:36:d5:98:8a:32:db:f1:13:a8:85:df:7d:09:18:e6:9e:
64:7d:c0:ef:7b:dc:1e:ff:fd:1e:c9:69:d2:65:44:36:3b:72:
92:37:83:83:96:fa:a2:85:0a:39:90:b0:29:0e:f5:af:6c:cf:
1b:97:24:b9:71:22:3d:d1:94:d4:26:44:cf:de:a0:ff:f1:88:
0f:f7:31:30:c2:d9:aa:7a:8d:6f:c3:50:36:1c:1d:2e:f6:aa:
be:f1:be:18:34:06:5f:15:f8:82:a9:11:26:6a:8f:20:90:9d:
84:83:d6:c5:e6:c6:59:0c:ab:d8:4b:65:9d:da:f5:7f:f7:c9:
e8:da:d2:c5:4b:d6:32:8c:cc:39:ad:49:7d:dc:f9:b4:a1:ac:
fa:7c:0b:9a:f4:ba:4c:2e:73:c1:76:d3:0d:df:87:5f:64:ce:
7d:af:39:2f:3f:6d:f7:08:f1:ed:6f:a6:12:78:7e:b2:1a:73:
41:6e:33:96:c5:82:44:67:37:62:87:da:06:03:7c:f8:32:d6:
ee:d1:be:90:5f:3e:35:ac:01:c0:fa:73:f6:f6:e5:1e:ae:0c:
44:71:68:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:33 2025 by rpki-client