Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/UY4B6ai0IUqpic2uyFBbXClXwVs.roa
File: UY4B6ai0IUqpic2uyFBbXClXwVs.roa (raw, json)
Hash identifier: EpiSZtVV+62huL/J924f304WF/rHjhsYoh5R56nHB5w=
Subject key identifier: 51:8E:01:E9:A8:B4:21:4A:A9:89:CD:AE:C8:50:5B:5C:29:57:C1:5B
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 019422FB7AB5D44BF386A1CDA9A279D96340
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/UY4B6ai0IUqpic2uyFBbXClXwVs.roa
Signing time: Wed 01 Jan 2025 17:48:13 +0000
ROA not before: Wed 01 Jan 2025 17:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 185.233.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:7a:b5:d4:4b:f3:86:a1:cd:a9:a2:79:d9:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Jan 1 17:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=518e01e9a8b4214aa989cdaec8505b5c2957c15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:29:2f:be:02:a5:c3:bd:5f:9f:65:f2:b5:
47:11:0f:b7:5f:19:c7:b4:a3:b8:57:13:04:7c:32:
06:dc:3b:e5:e8:28:e8:8b:87:78:4e:c8:c0:75:a4:
eb:a2:a3:ef:59:38:f9:88:57:be:05:32:21:21:b5:
b6:38:b2:6d:f2:59:bb:2b:e7:f8:b9:ba:d8:70:d1:
c1:36:88:8e:00:5d:ea:40:a0:d7:83:3e:4c:62:0b:
2a:9a:54:16:1e:85:fb:61:e8:c7:e3:51:a4:2f:08:
18:3f:2b:a0:ed:8b:93:8e:07:d3:53:43:61:6d:76:
76:01:32:4c:ea:a7:04:48:b1:f3:3a:42:fb:7d:d5:
eb:fe:38:c7:5c:45:f2:c9:80:8d:64:f4:4f:a1:0c:
40:6d:1c:dc:f0:d9:da:88:3d:0b:bf:79:f3:fc:c6:
e7:e9:34:99:ba:db:44:3e:f7:05:75:6e:16:9f:82:
62:23:82:4e:e2:a4:8a:a7:29:78:65:2b:46:84:46:
36:59:c5:45:73:93:93:0f:5b:08:66:3c:0f:58:6c:
39:43:71:e8:21:0d:7b:52:41:39:84:ca:ee:a6:5e:
91:5c:43:02:c1:18:d2:c5:48:43:e2:a9:f6:eb:b0:
e0:65:99:79:41:b7:7a:e4:26:9c:6f:4d:99:a8:7c:
ee:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8E:01:E9:A8:B4:21:4A:A9:89:CD:AE:C8:50:5B:5C:29:57:C1:5B
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/UY4B6ai0IUqpic2uyFBbXClXwVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.164.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2e:58:b8:68:ee:f5:5c:37:fd:83:86:b9:ec:5d:2f:a1:18:
27:41:00:74:6d:fc:08:c4:8e:c2:8b:5b:a2:61:a2:95:07:13:
89:b3:e1:db:34:dd:ba:2a:c6:29:09:39:97:f6:a8:e2:fb:70:
04:b9:03:b3:d4:60:41:9e:75:ca:5d:d7:71:b8:39:1d:f5:d1:
33:1b:01:65:62:c3:3f:4d:4d:4e:f6:6a:7e:c1:5e:ce:7e:9a:
02:0c:bc:b1:11:f5:c0:16:fe:87:d3:0f:33:e4:03:b7:d0:aa:
d5:58:64:f9:ad:3f:5e:cd:8e:79:3d:84:1a:f5:e0:42:74:f3:
f6:ce:9d:dd:87:d6:a4:84:50:d6:5d:0a:9e:e0:22:2b:97:6e:
49:96:31:bc:dc:7c:85:dc:aa:8b:ce:23:6c:d4:f0:d6:5a:d4:
ab:cf:1c:ac:07:d6:ca:1d:75:4b:27:9f:1e:e8:c9:19:26:f8:
b5:7d:ae:64:9a:d1:32:5d:6d:3a:43:20:5f:09:aa:49:66:29:
d6:b3:e4:3e:46:49:4e:41:1e:49:54:57:f8:eb:cd:48:db:31:
bf:c5:ef:fe:3c:cf:03:15:48:76:dd:ae:c3:ba:4f:aa:df:96:
13:78:b0:64:8b:12:3a:c6:01:4c:a7:b7:64:b3:79:f4:18:9f:
61:10:f7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:19:45 2025 by rpki-client