Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/uldn70CmsoO8mEjXDA2qsH171BM.roa
File: uldn70CmsoO8mEjXDA2qsH171BM.roa (raw, json)
Hash identifier: sF3Le5y5D/xahF9JJgZ52rEEuG9V89PoQt2h37YZGwE=
Subject key identifier: BA:57:67:EF:40:A6:B2:83:BC:98:48:D7:0C:0D:AA:B0:7D:7B:D4:13
Certificate issuer: /CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Certificate serial: 01942745CAA4345E7314DF933D238577638D
Authority key identifier: 53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/uldn70CmsoO8mEjXDA2qsH171BM.roa
Signing time: Thu 02 Jan 2025 13:47:52 +0000
ROA not before: Thu 02 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 185.221.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:ca:a4:34:5e:73:14:df:93:3d:23:85:77:63:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Validity
Not Before: Jan 2 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba5767ef40a6b283bc9848d70c0daab07d7bd413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:43:f9:4d:f0:94:24:ef:f4:fc:f3:ea:9c:
0d:2b:d9:1a:23:7c:fa:f5:b5:bf:91:49:f4:b0:1e:
9a:69:9f:19:cd:a6:9b:63:43:3e:29:6d:3a:ea:ed:
24:bd:0e:e4:5f:cd:be:a2:f8:cd:8a:3f:0e:6c:44:
79:ce:40:a3:52:06:9d:5c:5a:e0:2a:b3:d8:20:45:
67:90:a8:81:a2:32:c1:4f:07:e4:29:91:21:db:a9:
bd:fc:73:4e:a5:42:aa:1a:02:ef:7c:33:ee:05:f1:
94:d6:34:c6:c9:96:26:d6:56:9b:d4:b4:ef:da:d2:
5a:39:9e:d5:55:63:2e:81:61:a8:6f:dd:1d:a9:95:
60:82:38:3d:be:b0:f9:df:db:fa:3a:60:f7:a2:c3:
e7:3b:d1:dc:bb:59:51:2e:6d:c8:ca:fc:aa:fc:8f:
91:f5:34:f9:72:aa:f7:0c:91:fc:b6:d0:d4:02:b9:
0e:af:64:39:8b:21:b1:cc:51:37:04:b6:68:0e:a4:
ab:dd:b1:c6:3b:b7:e1:49:e1:5e:21:cb:ca:17:d8:
19:2f:de:bc:8d:9e:36:c9:64:07:7a:40:ef:ff:92:
be:58:56:ea:cb:3a:5e:7a:13:62:93:6b:1e:5e:0c:
67:4d:b1:05:41:88:d5:55:17:1a:56:ca:a5:5f:ea:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:57:67:EF:40:A6:B2:83:BC:98:48:D7:0C:0D:AA:B0:7D:7B:D4:13
X509v3 Authority Key Identifier:
keyid:53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/uldn70CmsoO8mEjXDA2qsH171BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.63.0/24
Signature Algorithm: sha256WithRSAEncryption
84:38:fe:10:72:f0:3f:e1:49:56:86:c7:03:60:3c:19:6f:27:
61:97:b0:8b:f6:d4:95:22:40:99:61:1a:6c:02:70:5e:06:de:
51:6e:49:b9:a5:e9:5a:43:3c:b4:b3:48:b2:90:e1:ba:25:37:
5e:c9:7a:19:42:14:2c:6a:02:1b:c5:73:a1:59:2c:76:f3:53:
ea:71:3c:b3:f4:5f:5f:d2:78:be:be:2f:eb:27:c3:47:3e:41:
de:42:8c:76:79:6d:c8:2a:1e:c6:49:14:f6:a6:f7:9b:01:31:
9b:cf:8a:a1:86:0f:b2:14:e2:c9:13:23:94:4b:6f:2c:2b:c7:
af:b9:12:7a:17:6a:bc:98:22:e4:fb:c9:d2:0e:cd:f7:8d:ca:
d6:84:df:ad:22:ed:2d:8a:64:c5:35:3c:62:1a:0e:3e:79:d9:
2e:78:c3:58:de:f0:87:60:b2:2e:28:64:e5:75:2a:05:16:b4:
3b:5b:63:f3:ad:5c:f6:af:0b:d5:ff:e4:57:2d:41:58:00:04:
0f:65:74:d5:2e:a3:cb:86:32:97:0c:d4:51:34:ce:32:e2:c8:
37:f7:84:ab:f9:a6:e9:48:a9:d3:0d:6b:1a:9e:88:9b:ad:c8:
38:73:ad:de:33:dc:11:b8:e9:8f:43:ae:31:7e:ae:84:93:aa:
65:02:27:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:29:56 2025 by rpki-client