Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/UNRS2RJKSr_3M0uyj4V1Z1b8GzM.roa
File: UNRS2RJKSr_3M0uyj4V1Z1b8GzM.roa (raw, json)
Hash identifier: 8qzrm1MIKTnzkIfkAulINGjHkVYf2Jp6beoYAVMpJDs=
Subject key identifier: 50:D4:52:D9:12:4A:4A:BF:F7:33:4B:B2:8F:85:75:67:56:FC:1B:33
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018CC56EC63C6C78713557C0CC8DBF634C3C
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/UNRS2RJKSr_3M0uyj4V1Z1b8GzM.roa
Signing time: Mon 01 Jan 2024 14:30:20 +0000
ROA not before: Mon 01 Jan 2024 14:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6079
IP address blocks: 88.135.96.0/20 maxlen: 24
213.159.136.0/21 maxlen: 24
141.136.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c6:3c:6c:78:71:35:57:c0:cc:8d:bf:63:4c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 1 14:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50d452d9124a4abff7334bb28f85756756fc1b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:65:b7:ee:8f:9c:16:97:b0:8c:11:e8:1e:23:
89:5c:fc:e0:b2:7c:9b:15:33:b9:fd:ee:69:33:82:
99:9f:d9:f3:2f:79:d1:e7:d3:4b:3c:62:ea:aa:7d:
76:e5:24:cb:2d:9b:c0:69:89:d0:8b:61:8f:3a:f6:
67:0f:d7:26:a6:c5:95:5c:b4:05:4e:0f:54:aa:3c:
fb:22:7e:ba:2f:86:7f:d8:d6:d0:b3:2f:06:af:7d:
64:a4:d8:dd:8a:fb:07:fe:6a:cb:ea:96:4c:c9:d0:
f7:af:15:4a:08:6a:e4:c1:3f:05:fd:3b:0b:a8:d6:
7a:03:f4:54:11:a8:8d:af:5c:a9:65:da:d3:73:ca:
5f:77:13:35:2e:5b:a2:8e:a2:9b:67:6b:75:c5:60:
3c:15:0e:f0:db:2e:98:d5:8f:92:c0:9a:18:29:4c:
f3:b6:50:97:4b:f5:14:0c:41:95:b7:83:fe:6d:2d:
be:d9:f3:09:06:ae:20:ad:06:d2:bb:22:16:a1:5c:
fe:a0:83:b5:a8:be:18:a9:83:72:5b:69:e4:64:16:
41:7c:a2:ff:8c:ee:ac:4e:24:f3:2a:74:d1:84:74:
86:38:1a:df:04:9a:19:67:2f:da:91:55:15:dd:4f:
ef:4a:82:2a:bf:2a:63:99:d2:04:92:ed:6f:21:9e:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D4:52:D9:12:4A:4A:BF:F7:33:4B:B2:8F:85:75:67:56:FC:1B:33
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/UNRS2RJKSr_3M0uyj4V1Z1b8GzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.96.0/20
141.136.16.0/20
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:c0:e1:4d:35:70:36:69:34:a9:b1:7e:80:7a:2b:b1:b0:76:
75:66:06:a4:95:74:f4:e1:b9:d8:0e:2d:65:94:85:a2:fc:fe:
17:11:60:a2:08:2d:d9:ca:09:35:49:19:21:ab:ec:bb:c0:f5:
81:17:fc:6b:b5:51:bf:1a:7b:9d:e2:ef:7c:ae:a7:cd:96:72:
38:c4:9e:b7:b3:5b:34:67:dd:a2:fa:1e:dd:60:50:36:88:fd:
74:2b:9e:38:77:05:fd:eb:c2:cc:55:64:b2:8f:dd:e8:5e:84:
c0:61:c8:43:67:1a:f4:52:7c:6c:97:a3:4e:61:b3:eb:ea:4b:
9e:6f:e5:ad:b7:ec:ca:93:34:30:f6:a7:69:6a:a9:b1:11:c5:
b6:63:6d:68:9b:a1:b5:10:2d:94:d6:7e:26:5f:75:81:01:bc:
12:ba:01:db:c0:11:9b:74:18:c3:1d:e4:4c:27:3b:d9:51:27:
7c:aa:3d:e4:cc:24:f2:5a:6b:b3:99:22:f2:6b:a8:72:37:d7:
82:b4:b7:0e:58:fb:3b:55:1d:7a:1b:5d:7c:59:9e:8e:2d:60:
6e:56:3c:35:30:68:bf:70:01:e1:68:ea:b7:bf:23:ca:cf:b7:
1e:5d:9e:e7:ec:d1:45:ce:11:f1:0c:ea:ce:6c:2c:c9:ad:5f:
ca:f8:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:46:07 2025 by rpki-client