Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/vUcygcUAOYjxcAmFq2U_EwBuh-g.roa
File: vUcygcUAOYjxcAmFq2U_EwBuh-g.roa (raw, json)
Hash identifier: 828JW3OMYRuQAH8QmwdHzxtT6N11D/DEub1Gr0aNUt0=
Subject key identifier: BD:47:32:81:C5:00:39:88:F1:70:09:85:AB:65:3F:13:00:6E:87:E8
Certificate issuer: /CN=1fe8ee87853406cd8d04ba8e39bf7a51ffb8a3bc
Certificate serial: 0183A3316D51578D1D3953F22969FDF1584F
Authority key identifier: 1F:E8:EE:87:85:34:06:CD:8D:04:BA:8E:39:BF:7A:51:FF:B8:A3:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-juh4U0Bs2NBLqOOb96Uf-4o7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/vUcygcUAOYjxcAmFq2U_EwBuh-g.roa
Signing time: Tue 04 Oct 2022 13:31:08 +0000
ROA not before: Tue 04 Oct 2022 13:31:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50033
IP address blocks: 185.161.124.0/22 maxlen: 22
185.211.52.0/22 maxlen: 22
2a07:c3c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:31:6d:51:57:8d:1d:39:53:f2:29:69:fd:f1:58:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe8ee87853406cd8d04ba8e39bf7a51ffb8a3bc
Validity
Not Before: Oct 4 13:31:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd473281c5003988f1700985ab653f13006e87e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:27:4a:53:f4:bd:f4:84:f7:3a:7d:e8:32:
05:f1:aa:11:87:5b:97:60:2f:23:d9:29:e1:aa:cb:
bf:c4:4a:37:66:95:52:a2:8f:87:45:ee:77:7a:77:
8f:1d:5e:bf:92:f5:25:22:f9:b2:95:4a:41:38:b6:
94:c3:d4:ca:b0:ab:71:9d:6b:10:40:51:e8:8d:14:
ce:fa:a2:ea:e6:92:9e:40:e5:5e:2e:d9:58:d7:25:
63:fc:78:71:93:c2:e6:fb:56:d7:c4:bd:18:65:4d:
d7:96:fa:8f:04:5d:90:14:81:f5:c9:67:2e:9d:a5:
2a:81:cd:9f:f2:98:15:1f:47:85:09:a1:4e:03:7a:
cf:7e:b3:cf:79:cb:2c:64:dd:d5:0b:98:5e:6e:35:
9e:95:f3:4d:c7:9a:f1:83:ee:57:34:cc:8d:8f:f4:
67:1e:59:03:5a:6c:7d:09:60:f9:d7:a3:70:77:b5:
17:79:49:f8:55:3f:4a:25:6e:fd:ff:d5:b1:db:c3:
a6:85:0b:58:01:8c:3a:17:26:35:ee:b1:90:82:49:
1f:8e:75:3a:a0:f5:9c:9a:2f:41:5c:51:cf:7f:0b:
ee:10:4d:d1:ce:35:35:cd:d3:eb:17:a4:0c:11:47:
76:30:53:1a:38:61:77:7e:d0:2e:e9:c1:be:7a:68:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:47:32:81:C5:00:39:88:F1:70:09:85:AB:65:3F:13:00:6E:87:E8
X509v3 Authority Key Identifier:
keyid:1F:E8:EE:87:85:34:06:CD:8D:04:BA:8E:39:BF:7A:51:FF:B8:A3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-juh4U0Bs2NBLqOOb96Uf-4o7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/vUcygcUAOYjxcAmFq2U_EwBuh-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/H-juh4U0Bs2NBLqOOb96Uf-4o7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.124.0/22
185.211.52.0/22
IPv6:
2a07:c3c0::/29
Signature Algorithm: sha256WithRSAEncryption
b5:2b:e5:ae:3a:80:ed:0a:b8:c8:b2:2d:4f:06:b0:b4:0f:0f:
3c:72:2f:15:15:e8:dd:d6:8c:0f:de:b6:c0:2a:82:7f:00:75:
56:da:06:1e:55:d6:6f:2a:0a:52:fd:ae:31:c7:60:3c:33:3b:
03:ab:f6:1d:c0:01:7e:00:fb:16:8a:7e:3b:e8:7f:88:80:69:
40:88:ea:cf:11:2e:31:02:0f:c8:3c:40:7e:fa:a6:e1:e5:40:
17:89:26:11:34:81:eb:35:f9:23:f1:90:90:db:a2:1b:36:33:
24:7b:cd:88:4e:7d:ad:3f:4f:b5:70:e7:c7:a8:a6:3f:0f:be:
9a:2b:75:0e:9e:d3:2e:a7:4c:9a:26:14:93:d9:b6:48:1d:82:
0b:54:3c:a6:db:9c:da:70:a4:2e:ca:b7:9e:19:85:c3:e7:3b:
27:41:9f:ca:ff:55:31:60:7f:55:e7:de:ac:2a:f0:0d:ab:da:
42:69:cf:ed:5d:f6:e0:e8:cb:e3:84:8f:97:83:b5:fe:12:42:
33:cf:38:9c:d5:0a:dc:78:49:d9:4c:d7:51:27:88:ce:b8:e6:
0f:eb:38:d3:93:2d:50:cf:42:f7:b3:47:87:d7:c3:f6:24:52:
81:34:dc:79:e5:da:8f:e4:b5:5d:6d:f0:e0:6c:63:27:70:c0:
59:15:9c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:02:39 2025 by rpki-client