Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa
File: uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa (raw, json)
Hash identifier: 0pV5mcTfxFzm13bkl5Ni2QZOplGIOcdfnivcOrYLhtA=
Subject key identifier: B8:2B:DF:3D:79:29:14:01:27:5F:BA:D6:1B:1A:05:F5:1A:87:0F:D1
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 019421B212739C542D366927D318CE58F792
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47237
IP address blocks: 95.87.64.0/21 maxlen: 24
185.117.148.0/22 maxlen: 24
194.152.36.0/23 maxlen: 24
195.216.237.0/24 maxlen: 24
2a0b:d7c0::/30 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:12:73:9c:54:2d:36:69:27:d3:18:ce:58:f7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b82bdf3d79291401275fbad61b1a05f51a870fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:a6:de:ef:57:de:35:8c:59:30:80:20:41:
40:b6:23:65:f6:45:86:96:35:f4:b8:6c:88:88:47:
2b:09:99:a6:f8:e7:0a:9e:e0:3e:53:20:8b:cb:ce:
5f:56:dd:bc:dd:75:07:d5:84:d8:0d:a6:d9:9c:41:
58:c4:e7:fe:aa:af:f0:22:bb:37:1f:c3:e8:48:8a:
b5:60:b9:80:7d:9e:cf:61:e1:c6:72:df:51:35:04:
cd:3e:3a:14:b2:86:32:94:19:5b:13:9f:b2:61:6b:
43:d4:18:d3:1c:36:9f:b0:59:13:ff:50:c3:2b:9e:
07:5a:d2:ff:bf:a6:b5:92:d2:b1:ff:69:36:9a:67:
5a:19:56:01:6e:2c:39:91:13:bc:12:ef:53:59:32:
28:97:4b:8b:14:fc:f9:24:5f:6d:93:25:84:74:d5:
b2:77:2d:a2:c9:e1:67:33:89:6c:10:8a:57:94:f1:
d0:37:c6:85:5e:50:ec:ae:a9:5c:79:27:a5:f4:61:
59:6c:1a:75:78:8c:69:27:1a:55:c4:41:c0:62:e2:
e7:90:b8:9e:4d:26:70:a4:38:52:4c:5d:2f:90:e5:
a6:ec:86:5d:04:c0:b7:94:10:42:69:cf:c7:75:01:
6c:1b:03:8b:61:be:ad:15:30:e4:58:44:af:aa:4a:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:DF:3D:79:29:14:01:27:5F:BA:D6:1B:1A:05:F5:1A:87:0F:D1
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.87.64.0/21
185.117.148.0/22
194.152.36.0/23
195.216.237.0/24
IPv6:
2a0b:d7c0::/30
Signature Algorithm: sha256WithRSAEncryption
cf:39:f7:18:03:68:63:d2:3a:1e:f5:42:4f:5e:3d:ef:5c:d6:
6e:7c:0e:aa:da:04:21:45:93:f9:c1:6b:64:d5:12:84:93:0a:
0c:a9:5d:99:ed:c6:be:d7:2a:4b:22:5d:47:ec:d6:c0:5d:c3:
9b:d6:26:ff:01:68:19:46:3a:cb:ba:fa:78:71:6c:65:b2:cb:
29:0d:fb:6a:34:49:40:67:83:22:7f:a0:8a:ca:64:e8:2a:c9:
1f:e1:90:7e:ea:03:60:5e:c1:a8:43:4c:91:ad:2d:e7:d3:e8:
eb:93:32:39:29:61:14:2e:90:cd:e3:c9:d3:1e:e8:3c:90:4f:
1f:a2:36:24:1a:03:d0:3a:39:e2:a0:52:ac:5c:9f:72:6f:cf:
ee:7a:29:bc:be:b8:d8:ed:a6:c2:ed:c2:8c:fc:3f:ad:d7:e4:
11:6f:dd:14:74:d4:e7:c5:ef:cb:b2:f9:76:1c:2e:ad:d8:4b:
15:dc:54:12:1d:f7:c0:58:87:99:a3:91:d2:a0:36:5e:04:2c:
ef:4f:45:65:2c:75:e6:13:6b:07:33:5d:28:ac:8a:14:90:b3:
65:39:b1:f0:e7:2c:79:03:de:23:51:45:95:3b:7f:d4:8e:6f:
5b:14:e7:ec:86:f8:92:d3:8c:56:e5:50:df:f0:ed:fd:53:39:
43:65:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:28 2025 by rpki-client