Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d8112a-788f-4805-b1e7-b722684c6a22/1/UvoB-kLxbVlg9zFFAdQj5Ue2k2E.roa
File: UvoB-kLxbVlg9zFFAdQj5Ue2k2E.roa (raw, json)
Hash identifier: ecNLc2HsDSnmokFD86WGsQHiyuinfzDPG6tvAcNckAY=
Subject key identifier: 52:FA:01:FA:42:F1:6D:59:60:F7:31:45:01:D4:23:E5:47:B6:93:61
Certificate issuer: /CN=cbc07a8aae53c641e4c5b82449dd390b08c1cd9e
Certificate serial: 187F7681
Authority key identifier: CB:C0:7A:8A:AE:53:C6:41:E4:C5:B8:24:49:DD:39:0B:08:C1:CD:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8B6iq5TxkHkxbgkSd05CwjBzZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d8112a-788f-4805-b1e7-b722684c6a22/1/UvoB-kLxbVlg9zFFAdQj5Ue2k2E.roa
Signing time: Sat 01 Jan 2022 11:58:21 +0000
ROA not before: Sat 01 Jan 2022 11:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199783
IP address blocks: 185.45.252.0/25 maxlen: 25
185.45.253.0/24 maxlen: 24
185.45.252.128/25 maxlen: 25
2a01:81e0::/48 maxlen: 48
2a01:81e0:1::/48 maxlen: 48
2a01:81e0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411006593 (0x187f7681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc07a8aae53c641e4c5b82449dd390b08c1cd9e
Validity
Not Before: Jan 1 11:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52fa01fa42f16d5960f7314501d423e547b69361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b0:fd:96:e1:75:95:6b:09:cb:97:34:e5:5d:
f4:2f:39:44:24:9f:1d:36:bd:2b:79:10:c9:ba:3d:
c5:05:a7:8e:22:d5:6a:34:de:2d:1d:ec:94:bb:c4:
b7:1e:d2:af:a7:73:a9:af:3a:36:3a:16:bc:b7:ac:
e9:0e:c2:16:30:bf:27:d8:83:cb:7f:87:b7:0b:6b:
3f:c7:07:89:25:f3:72:12:4a:34:4c:90:94:1d:9b:
5f:43:0c:24:15:9f:64:65:f4:78:7f:3c:9c:15:41:
1f:ee:2b:7b:d8:80:21:32:96:78:54:d6:39:e1:4d:
c5:26:0f:41:24:76:46:1a:e3:55:d2:7a:a6:2c:a3:
d8:1c:44:21:86:95:27:c1:56:aa:28:08:19:22:a9:
d9:e5:fc:9d:0d:b6:e5:67:8b:61:44:ac:59:3d:ac:
a5:f7:2e:6e:10:b4:20:96:24:69:a8:60:21:42:2a:
f0:01:70:b5:ef:64:a2:dc:a2:9b:82:81:68:d5:d0:
16:3c:4b:a1:5e:45:97:a8:70:8d:60:cb:c2:fa:c9:
a7:de:e4:28:b8:f0:74:28:f6:f8:d6:80:27:6d:f4:
91:36:2e:2b:eb:83:8e:04:4a:1f:f2:da:07:10:81:
e9:8d:51:d2:7c:16:f0:fb:43:41:c2:16:1f:e4:f8:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FA:01:FA:42:F1:6D:59:60:F7:31:45:01:D4:23:E5:47:B6:93:61
X509v3 Authority Key Identifier:
keyid:CB:C0:7A:8A:AE:53:C6:41:E4:C5:B8:24:49:DD:39:0B:08:C1:CD:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8B6iq5TxkHkxbgkSd05CwjBzZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d8112a-788f-4805-b1e7-b722684c6a22/1/UvoB-kLxbVlg9zFFAdQj5Ue2k2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d8112a-788f-4805-b1e7-b722684c6a22/1/y8B6iq5TxkHkxbgkSd05CwjBzZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.252.0/23
IPv6:
2a01:81e0::-2a01:81e0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:77:1c:45:f6:a5:45:78:8a:1c:b1:5d:d0:a9:a9:04:bc:d4:
5f:6e:47:48:dc:7b:61:b1:9b:f8:96:ee:24:e1:e3:af:b3:37:
11:27:df:ef:40:c4:6a:6e:d6:6a:2c:15:f3:62:e0:24:3e:48:
40:e2:43:44:85:dc:8f:a2:83:b3:52:80:13:32:61:9e:cf:d5:
02:19:17:3f:67:89:cd:d7:20:78:8f:e6:3e:9d:cd:6f:2a:23:
da:87:15:e9:f7:47:f8:b8:8c:21:94:d2:97:6f:5a:2c:c0:be:
3e:e2:64:be:1d:19:10:50:9f:a4:0d:9d:1d:05:4a:c9:13:a7:
55:fa:e2:e6:cd:9c:de:f1:d7:28:f0:bb:c1:d2:08:d7:82:f2:
98:68:97:ba:43:1d:6f:65:84:14:a2:8e:0f:61:05:90:a2:e1:
94:6c:50:e5:ed:8d:d6:63:e7:32:7c:9a:55:ca:9e:d9:4e:72:
9c:c3:f3:55:26:0f:76:5f:af:d5:b9:92:36:bb:3b:04:bd:54:
15:12:c2:7f:53:d6:bb:d6:e0:3d:4c:ba:2f:65:ce:b0:8a:a5:
26:80:4c:d8:cb:31:e5:36:4f:17:27:26:0d:03:cd:99:be:ec:
88:c6:57:d1:04:d2:57:33:c4:ef:4b:2e:ea:6d:5d:28:80:2d:
08:a5:50:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:25:18 2025 by rpki-client