Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/UobB1JoTOzUGFpCCZFbxasjgqAA.roa
File: UobB1JoTOzUGFpCCZFbxasjgqAA.roa (raw, json)
Hash identifier: ms0cbPIRl6WuE78I/a1I+geJkM+CYYhZiVIqQ6+fwVY=
Subject key identifier: 52:86:C1:D4:9A:13:3B:35:06:16:90:82:64:56:F1:6A:C8:E0:A8:00
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 019423D75D121AFC7CB309BF58266EE97E8E
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/UobB1JoTOzUGFpCCZFbxasjgqAA.roa
Signing time: Wed 01 Jan 2025 21:48:24 +0000
ROA not before: Wed 01 Jan 2025 21:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31708
IP address blocks: 185.42.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5d:12:1a:fc:7c:b3:09:bf:58:26:6e:e9:7e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 21:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5286c1d49a133b35061690826456f16ac8e0a800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:8d:ab:58:9b:12:1c:a0:87:c9:f7:ed:e3:
1f:61:9c:d4:73:2a:64:9c:f3:fd:21:a2:a9:7d:12:
8c:e1:51:2f:d8:38:de:67:23:6b:25:cc:7f:c8:37:
fa:eb:e7:56:3b:93:ec:0b:cc:a3:29:9c:d7:00:28:
6c:18:d6:7c:79:5f:34:0b:7f:6c:ce:9c:54:01:3e:
59:b7:d7:33:62:99:fc:2f:dd:eb:2b:eb:1a:31:09:
5f:fb:d9:45:27:18:c8:2c:9e:91:51:38:32:c7:91:
cf:17:b9:8b:a0:c8:81:86:07:84:23:3e:be:05:a6:
6e:a3:0a:84:10:9c:97:6b:88:b6:9e:f1:b1:e3:9d:
26:6b:27:89:ba:d1:7f:62:6c:19:2a:79:ff:75:a1:
b2:db:6f:d4:33:7b:71:4f:ef:bd:72:28:9b:03:06:
5b:42:51:23:3a:8d:8f:e3:a9:45:00:00:ef:b8:d9:
50:09:b0:03:a9:e8:b0:e0:50:51:78:84:e4:97:d5:
d0:3e:d9:83:12:5a:9b:16:02:89:89:3c:4e:13:75:
22:e1:6d:8a:9e:a9:70:d9:fa:d7:c3:fb:b7:f5:6e:
65:a9:b1:a9:49:14:e6:c6:32:f0:4d:8b:84:49:08:
c8:1a:ed:2c:6a:c1:96:0a:03:7e:cd:57:5c:c4:a0:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:C1:D4:9A:13:3B:35:06:16:90:82:64:56:F1:6A:C8:E0:A8:00
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/UobB1JoTOzUGFpCCZFbxasjgqAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.220.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:7e:74:15:78:5e:9d:4b:ec:98:90:37:11:9c:4f:d8:ac:df:
37:53:62:49:b2:20:66:12:fb:1f:59:70:ef:56:26:0f:bd:43:
e8:a2:58:40:67:08:73:83:54:68:c1:bc:88:d0:f4:d0:1e:73:
69:f5:64:71:da:45:70:cc:73:7d:10:7b:f5:43:a1:9c:62:47:
4d:33:d5:64:89:47:a7:29:9b:f6:85:67:38:72:11:1f:6f:50:
3c:b8:72:6a:0a:2a:17:ae:60:8c:84:5d:f5:19:48:70:b1:98:
a6:45:ea:31:c8:83:09:81:3b:17:b0:63:3e:19:bd:41:3b:62:
25:bd:b1:3a:82:9a:84:87:50:8c:7d:46:77:91:0f:3a:a9:fa:
64:08:76:cb:e0:78:d9:6b:80:5f:52:7e:49:de:88:bb:54:2c:
f2:08:97:22:f2:07:1e:fa:86:5a:94:d3:2a:e2:1f:4c:44:cf:
d7:04:5c:c0:ed:6f:1d:30:61:cc:94:10:8c:a8:51:b2:0d:e8:
6b:76:b2:74:20:86:7a:69:bc:fb:f5:c0:94:58:1f:e3:89:0d:
06:2e:e7:57:3a:9d:5b:21:79:5a:63:46:51:a9:72:b0:c9:db:
25:7d:fc:3a:eb:40:c9:f3:8b:db:0f:ba:7c:16:b2:61:e9:db:
e3:00:50:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:36:16 2025 by rpki-client