Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa
File: U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa (raw, json)
Hash identifier: CneTmiRYnA+2gIbWw8P2gftXT9GSMXZurQf8UEQYJtM=
Subject key identifier: 53:60:6F:13:8C:DB:CC:52:53:1C:B2:73:4A:66:75:5B:DC:7E:90:23
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 01942068267AD2A90C0E4022F80941505332
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa
Signing time: Wed 01 Jan 2025 05:48:03 +0000
ROA not before: Wed 01 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50819
IP address blocks: 185.18.226.0/23 maxlen: 23
185.102.88.0/22 maxlen: 22
2a0c:eec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:26:7a:d2:a9:0c:0e:40:22:f8:09:41:50:53:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53606f138cdbcc52531cb2734a66755bdc7e9023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:30:b0:17:4a:2a:36:1f:fe:88:2b:95:d5:
4b:e7:1a:49:2a:73:4b:a2:76:90:3a:d7:05:e9:84:
63:a8:d9:dd:6b:90:43:db:d2:87:16:a7:52:60:60:
4d:23:6a:80:87:0b:d4:8c:32:fc:1e:8d:f1:49:6e:
a4:be:f9:61:89:e7:15:b8:7c:66:32:a0:5f:51:20:
88:d8:77:c6:43:80:50:92:85:a4:4d:14:67:7f:83:
06:6c:3a:a1:ff:24:cb:5a:ec:e5:12:f0:b7:4c:d3:
a9:37:3a:85:c4:95:fb:33:c4:99:30:a4:4f:77:2f:
24:d1:46:81:53:44:7b:b8:05:cc:bd:cd:3f:05:f5:
2f:c3:f3:b1:f3:46:fc:3f:dc:fa:1d:16:40:c2:b3:
fe:0f:29:1e:9c:e9:08:e0:1f:ca:60:48:b7:1c:72:
c6:18:8c:77:ab:3e:2f:a8:a1:44:d4:be:d8:08:67:
4b:82:67:f5:58:21:fd:8a:c6:02:6a:b8:b2:2c:f6:
38:ac:c8:ff:8d:d8:53:6d:5b:cf:1c:45:4c:0d:ba:
a5:f0:32:20:ba:1c:f2:06:0f:69:e9:e2:06:7e:79:
36:42:ba:bc:c2:64:a3:66:43:8e:47:e2:94:bf:61:
a4:90:a5:5e:ae:84:de:d4:0a:24:a5:54:77:83:da:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:60:6F:13:8C:DB:CC:52:53:1C:B2:73:4A:66:75:5B:DC:7E:90:23
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.226.0/23
185.102.88.0/22
IPv6:
2a0c:eec0::/29
Signature Algorithm: sha256WithRSAEncryption
ba:2b:a5:80:e0:bb:45:3f:66:12:36:fd:12:fd:9a:0d:2e:6f:
bc:dc:7b:64:d9:f0:cb:f0:0f:11:46:36:b4:99:88:93:68:78:
90:b0:93:02:09:75:47:2e:d2:15:77:71:bc:3d:02:89:10:9e:
89:91:aa:06:5f:23:c2:c4:83:96:66:a0:65:3c:2b:c2:10:27:
c8:ad:93:9e:8b:8c:9f:e5:a7:86:38:d1:ef:85:3f:91:dc:d8:
c5:4f:ba:52:47:6f:67:e5:1c:07:1c:cc:37:6d:ab:1b:23:2c:
12:78:42:21:a2:10:31:a4:b0:2c:c6:08:0c:62:81:0c:c1:38:
3a:c8:e3:06:3a:8a:74:88:c3:e7:76:44:03:c4:61:27:5d:03:
7b:c6:3d:da:1b:27:21:c5:2c:5d:59:12:2b:71:7d:ab:f7:8b:
70:38:51:4e:ee:9d:73:65:15:fb:b8:82:31:25:35:38:34:2d:
8e:42:fa:8b:1e:39:97:4a:19:d0:6e:ee:76:ab:6c:bb:cb:54:
34:1b:ae:36:be:b9:5f:35:ae:f5:21:58:bd:bc:ce:17:e2:4b:
41:88:b4:fd:08:73:a4:93:83:45:24:68:b0:f3:58:84:bd:c2:
98:5a:40:a3:f5:94:1e:ff:ae:a3:49:bb:a1:1c:2c:3d:1f:c7:
51:4e:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:39:52 2025 by rpki-client