Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0d230e-a8bc-46c9-8209-55283faeda7c/1/uMx8GXbL-W8PTCJjzll-L2OWu1Q.roa
File: uMx8GXbL-W8PTCJjzll-L2OWu1Q.roa (raw, json)
Hash identifier: FJt65utAn9f86dd7b3GV64+HL2GTn4xBuM5trq6DADM=
Subject key identifier: B8:CC:7C:19:76:CB:F9:6F:0F:4C:22:63:CE:59:7E:2F:63:96:BB:54
Certificate issuer: /CN=64ea03470728afa20d51ec27290c5f3af38db804
Certificate serial: 0D358B8C
Authority key identifier: 64:EA:03:47:07:28:AF:A2:0D:51:EC:27:29:0C:5F:3A:F3:8D:B8:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOoDRwcor6INUewnKQxfOvONuAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0d230e-a8bc-46c9-8209-55283faeda7c/1/uMx8GXbL-W8PTCJjzll-L2OWu1Q.roa
Signing time: Sat 01 Jan 2022 16:10:35 +0000
ROA not before: Sat 01 Jan 2022 16:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204823
IP address blocks: 185.231.54.0/24 maxlen: 24
185.231.53.0/24 maxlen: 24
185.231.52.0/24 maxlen: 24
185.231.55.0/24 maxlen: 24
2a0c:4105::/32 maxlen: 32
2a0c:4107::/32 maxlen: 32
2a0c:4101::/32 maxlen: 32
2a0c:4106::/32 maxlen: 32
2a0c:4104::/32 maxlen: 32
2a0c:4102::/32 maxlen: 32
2a0c:4100::/32 maxlen: 32
2a0c:4103::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221612940 (0xd358b8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ea03470728afa20d51ec27290c5f3af38db804
Validity
Not Before: Jan 1 16:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8cc7c1976cbf96f0f4c2263ce597e2f6396bb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:96:f9:f5:4e:7a:e1:6f:4f:1a:8b:a2:76:
7d:f3:57:2f:23:f3:79:79:9f:29:94:1d:3d:63:ad:
cb:dc:3f:ab:44:54:65:00:1b:41:e6:7d:9a:80:c4:
b6:cc:22:82:3f:78:10:97:16:fe:ae:84:9a:2a:35:
ba:24:ec:e0:8d:4d:51:9a:e5:df:a2:ff:ef:6d:77:
97:a1:9e:cf:13:61:57:92:40:d1:00:3a:5b:4b:59:
10:7f:e0:21:5b:ed:72:75:92:fe:79:5a:5c:24:e4:
ed:5b:3f:8e:21:8c:8a:47:eb:fe:df:1a:bd:e8:fe:
55:7a:dd:ef:6b:92:98:50:d0:81:64:33:e1:36:8c:
d3:d4:6f:3d:21:bc:8c:c1:3c:7a:fa:43:93:df:73:
2c:fa:57:4d:3b:62:a3:bf:1f:50:16:b4:e6:b5:24:
6a:c5:e1:5e:8d:b5:bc:25:7a:3e:a8:df:f1:5b:22:
43:f9:ff:a3:90:4d:fd:6e:80:58:64:e9:6b:97:f1:
cb:33:e5:e6:26:cb:29:8f:f0:1d:55:19:29:6c:54:
f0:a2:87:26:d2:31:46:8d:4a:6d:b2:7d:94:13:d3:
69:89:11:4f:29:f7:04:a0:c3:05:22:32:48:ea:fd:
c6:67:a4:45:ea:76:3a:1b:24:fe:b7:bc:5c:9d:67:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CC:7C:19:76:CB:F9:6F:0F:4C:22:63:CE:59:7E:2F:63:96:BB:54
X509v3 Authority Key Identifier:
keyid:64:EA:03:47:07:28:AF:A2:0D:51:EC:27:29:0C:5F:3A:F3:8D:B8:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOoDRwcor6INUewnKQxfOvONuAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0d230e-a8bc-46c9-8209-55283faeda7c/1/uMx8GXbL-W8PTCJjzll-L2OWu1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0d230e-a8bc-46c9-8209-55283faeda7c/1/ZOoDRwcor6INUewnKQxfOvONuAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.52.0/22
IPv6:
2a0c:4100::/29
Signature Algorithm: sha256WithRSAEncryption
86:27:c4:02:d8:85:2d:e6:2b:e3:e6:24:4d:1b:22:f6:1a:f9:
96:08:dc:b9:bc:1f:d5:06:85:48:5d:22:5b:ba:8a:30:68:37:
4a:66:8b:52:ca:30:bd:c4:ae:60:fc:b9:43:24:63:38:71:7e:
2b:7d:46:e8:7c:ca:16:b5:63:ed:08:7d:ac:10:7a:bf:44:a9:
53:3a:13:72:a5:5b:3a:5a:45:d1:c8:78:8f:d4:de:5f:6b:68:
41:7f:de:00:59:a5:f9:91:c5:fe:80:c9:af:f8:af:ad:c0:26:
b3:95:ca:43:0e:cf:e1:93:fb:59:6e:61:27:ec:d0:5a:76:ef:
bc:0c:5c:fe:13:b5:e8:6b:8e:62:02:ff:43:0b:62:46:5b:fd:
e7:9f:0e:a7:c5:e5:b1:d4:58:e3:4a:82:12:8e:13:92:0d:e7:
0c:42:31:8e:b1:7e:7d:14:f7:b5:ec:e0:9d:16:99:86:c8:09:
fd:5a:d8:29:74:4d:65:5d:2a:05:3c:63:14:24:8a:89:26:6e:
b6:5c:a7:f6:f4:37:7c:b4:68:c3:33:22:87:19:2a:9e:81:7b:
f7:31:66:45:dc:9e:e6:91:b0:ad:89:97:39:04:a8:8d:50:14:
34:72:c9:91:ce:41:5a:55:67:41:87:49:47:e2:19:09:9f:c2:
1c:c1:9f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:34 2025 by rpki-client