Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/h_uvtBb89v86Ot0rZM5k7wf9t3c.roa
File: h_uvtBb89v86Ot0rZM5k7wf9t3c.roa (raw, json)
Hash identifier: wRsRpB1TywlOMa0+6dhzZ3BVy/WX6GDrbpQr+SBFVlM=
Subject key identifier: 87:FB:AF:B4:16:FC:F6:FF:3A:3A:DD:2B:64:CE:64:EF:07:FD:B7:77
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 019426D95C3460948034D72E744E64F2CFCB
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/h_uvtBb89v86Ot0rZM5k7wf9t3c.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 80.254.232.0/21 maxlen: 24
185.204.16.0/22 maxlen: 24
193.16.12.0/24 maxlen: 24
193.16.13.0/24 maxlen: 24
193.16.14.0/24 maxlen: 24
193.16.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5c:34:60:94:80:34:d7:2e:74:4e:64:f2:cf:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87fbafb416fcf6ff3a3add2b64ce64ef07fdb777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:97:c2:57:dd:15:eb:c9:39:52:08:40:88:
a7:4e:ed:4b:cd:19:6a:3b:db:8b:65:26:a0:4c:d8:
fd:f4:40:2c:6f:99:f2:31:80:34:4e:4b:30:7c:10:
c3:6d:51:90:ed:ce:e9:68:3d:a3:f8:15:8c:e8:5d:
01:79:a7:15:1f:a4:77:df:e5:81:42:04:dd:00:bc:
67:c6:31:5c:c3:19:08:cd:06:57:5f:95:1e:52:d3:
64:9b:58:be:08:45:e1:fb:ed:3e:dc:29:27:dc:2a:
8d:b4:98:fd:3d:0b:ba:0d:cd:fa:18:cf:e1:08:e8:
8b:bd:ed:5e:77:bc:43:18:10:86:ac:1e:28:b8:14:
c1:12:7a:6a:6c:4b:3b:40:8e:38:b6:f9:78:a8:14:
88:ea:0a:bb:8b:3a:83:8b:e6:0b:73:ef:35:f1:34:
cd:a4:3e:12:bc:22:00:91:81:97:fb:91:00:ec:e8:
80:48:2e:46:bb:22:2a:de:c6:a0:8b:b8:bd:72:f0:
90:88:a1:af:7d:11:8f:e2:c9:3d:fa:60:89:f2:ec:
92:f2:13:31:34:6a:60:b5:3d:ca:72:54:57:ea:85:
1c:20:0c:2a:57:48:b3:e1:05:8c:8d:1b:15:2f:21:
0a:ed:b9:04:3c:7e:21:32:e4:0e:48:30:0b:1a:ac:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FB:AF:B4:16:FC:F6:FF:3A:3A:DD:2B:64:CE:64:EF:07:FD:B7:77
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/h_uvtBb89v86Ot0rZM5k7wf9t3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.232.0/21
185.204.16.0/22
193.16.12.0/22
Signature Algorithm: sha256WithRSAEncryption
55:1b:8f:bd:5d:13:30:d5:31:7f:be:54:51:30:cf:48:b5:58:
93:62:a8:99:1b:66:d7:9a:ef:69:df:be:29:a3:c7:c8:5e:aa:
d8:ab:74:30:ba:11:cc:b7:4e:8a:ba:0c:3d:fe:0d:b4:6e:6a:
ff:8d:87:29:39:24:8b:2a:43:19:eb:15:f5:7f:e6:bd:b3:de:
ba:69:c6:9f:69:de:7e:eb:18:aa:f9:07:d2:f4:ee:d6:47:3a:
bf:af:8c:e5:74:a0:70:b0:ff:9d:9e:de:01:05:3b:ac:4c:c9:
7f:22:17:a1:ef:1f:e1:bc:b8:65:47:c7:45:c5:5f:1d:0f:e2:
09:ed:21:7b:4e:52:d3:97:26:cc:74:c4:d4:69:18:a1:71:1d:
fa:63:ec:67:a9:eb:a0:52:1b:04:31:57:4c:7f:f8:38:a8:67:
42:e5:f8:36:9d:c7:77:e7:01:cf:c4:be:fe:04:c0:ab:1f:23:
6a:d1:41:d9:d9:f1:7c:5a:79:aa:84:9a:02:e2:a4:e6:98:32:
bf:70:d4:87:ed:76:2c:27:1c:7a:cd:36:d7:85:f0:10:ac:57:
99:51:49:0d:33:82:77:db:ba:3e:bd:93:69:5b:5e:ef:a8:ba:
f0:7c:00:13:a9:f1:4e:38:a1:34:f2:a4:ca:19:6d:01:a0:ef:
e6:8c:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:24:31 2025 by rpki-client