Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/uBti8V7rgRJmV3MvWeUtRQOjxnE.roa
File: uBti8V7rgRJmV3MvWeUtRQOjxnE.roa (raw, json)
Hash identifier: OniV0UFlunPKvyMq6pSBkv85oia7H5qvAxDaBiuknUc=
Subject key identifier: B8:1B:62:F1:5E:EB:81:12:66:57:73:2F:59:E5:2D:45:03:A3:C6:71
Certificate issuer: /CN=0529e4de4bc11fed9101a50824aaa4e2638aba6a
Certificate serial: 0411E3FF
Authority key identifier: 05:29:E4:DE:4B:C1:1F:ED:91:01:A5:08:24:AA:A4:E2:63:8A:BA:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSnk3kvBH-2RAaUIJKqk4mOKumo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/uBti8V7rgRJmV3MvWeUtRQOjxnE.roa
Signing time: Sat 01 Jan 2022 15:02:39 +0000
ROA not before: Sat 01 Jan 2022 15:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.146.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68281343 (0x411e3ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0529e4de4bc11fed9101a50824aaa4e2638aba6a
Validity
Not Before: Jan 1 15:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b81b62f15eeb81126657732f59e52d4503a3c671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ba:78:b8:4d:80:4e:69:c2:da:b7:8f:b5:b2:
03:74:e1:cb:f6:cc:5a:b2:19:4a:d0:83:b6:e2:fe:
24:2e:44:f1:23:d9:75:31:ed:51:b0:93:b3:c7:20:
91:72:54:7a:19:5e:96:78:8f:af:15:0f:1c:a1:a1:
c5:71:cd:6b:e9:8d:8f:d8:fb:d3:e6:ef:df:14:f8:
e6:1e:da:1a:37:5b:d9:2f:8a:84:31:07:01:b4:f2:
1f:e8:4c:a0:4f:1f:81:bc:fc:14:e5:18:3a:f1:31:
91:d1:a4:5b:53:f4:ff:7f:94:c4:28:15:bb:5e:71:
56:51:e1:9e:56:31:2f:a1:9e:27:bc:5d:d1:63:91:
08:24:e4:0a:46:64:0d:a0:47:ac:bd:25:b6:0f:4b:
e3:38:b1:e9:26:78:eb:8f:4a:03:6d:f4:b0:16:02:
1f:2b:c8:54:0b:f9:ab:84:78:98:87:88:2a:94:b4:
82:22:fd:cc:b7:be:d6:df:6a:af:b6:0b:90:c7:62:
42:16:04:f7:53:bc:18:52:74:63:ba:af:76:71:7b:
00:63:fe:d1:58:4b:b7:ba:c7:6f:4e:67:e5:1d:b8:
fb:20:e7:f9:cb:86:fe:bb:b6:68:a2:ed:fd:3a:28:
6f:4f:63:70:e3:65:ac:c8:53:7d:d0:28:f6:c9:b4:
4f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1B:62:F1:5E:EB:81:12:66:57:73:2F:59:E5:2D:45:03:A3:C6:71
X509v3 Authority Key Identifier:
keyid:05:29:E4:DE:4B:C1:1F:ED:91:01:A5:08:24:AA:A4:E2:63:8A:BA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSnk3kvBH-2RAaUIJKqk4mOKumo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/uBti8V7rgRJmV3MvWeUtRQOjxnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/BSnk3kvBH-2RAaUIJKqk4mOKumo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.67.0/24
Signature Algorithm: sha256WithRSAEncryption
02:37:fd:1a:b3:17:e5:0c:2f:52:a9:85:01:75:f7:e9:4a:50:
fa:7d:d5:fc:5a:21:04:a9:d4:c2:4c:a4:8b:6d:43:bc:21:98:
96:6c:e5:b5:14:82:93:f2:59:92:a5:a4:cf:71:2d:5e:57:f6:
74:5c:92:44:d5:ce:54:e6:25:ac:03:c8:61:7a:83:a6:ed:2a:
11:07:58:05:e2:91:f6:ca:38:94:c0:ed:84:03:98:1b:30:87:
0b:e3:27:52:a6:70:ae:9c:a0:e3:24:36:0d:d7:ae:15:e3:b8:
08:65:20:89:5f:90:8d:13:4b:bf:0b:a9:06:93:28:f1:5a:b7:
a5:5f:66:75:80:71:89:1f:96:93:23:92:d5:de:db:8c:6e:0a:
55:b1:00:ab:f0:97:25:1d:45:8b:85:7c:c0:c8:3a:74:b7:70:
56:f0:47:6c:04:95:a1:a3:62:6f:d9:57:f0:a2:4b:39:7b:bf:
b6:b5:06:04:68:01:d8:d4:6a:a4:54:f1:06:7f:32:85:e5:0e:
7d:66:1d:a7:d8:f9:da:bc:77:85:87:43:7e:1d:dd:64:81:61:
be:ef:cd:e0:04:06:5e:5f:bc:95:4b:78:18:2e:cc:df:b9:30:
b8:0c:1e:b0:48:23:f0:fd:67:2e:97:25:72:33:96:d1:99:fa:
65:99:43:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:19:54 2025 by rpki-client