Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/UrCLDO3nAF8I0xSDMnqcn_xlK2U.roa
File: UrCLDO3nAF8I0xSDMnqcn_xlK2U.roa (raw, json)
Hash identifier: OK5mjPbl72l2PgWdwDwhtTMIf2FaNZ0PySeJBnWylNM=
Subject key identifier: 52:B0:8B:0C:ED:E7:00:5F:08:D3:14:83:32:7A:9C:9F:FC:65:2B:65
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01849B26B55AD5F43857E5ED3C8F88A16F67
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/UrCLDO3nAF8I0xSDMnqcn_xlK2U.roa
Signing time: Mon 21 Nov 2022 17:05:16 +0000
ROA not before: Mon 21 Nov 2022 17:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.229.0/24 maxlen: 24
85.209.230.0/24 maxlen: 24
45.95.215.0/24 maxlen: 24
2.59.60.0/24 maxlen: 24
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9b:26:b5:5a:d5:f4:38:57:e5:ed:3c:8f:88:a1:6f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Nov 21 17:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52b08b0cede7005f08d31483327a9c9ffc652b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:22:98:84:0c:b7:c9:23:ef:e9:92:10:3e:65:
ff:dd:78:2f:a6:f9:c2:b5:a6:70:07:33:f1:8c:4b:
51:4e:b8:b5:c1:9e:77:71:a1:92:70:ac:2b:dc:23:
e5:5c:7a:4b:fd:51:b4:a6:bd:c1:06:0f:a6:52:00:
1d:4c:bc:7b:74:17:9c:51:83:41:95:e9:87:ce:5c:
d1:86:58:a8:3a:50:9e:55:14:80:a3:60:07:33:ad:
b5:40:7b:3a:05:8d:f1:cd:61:15:75:db:15:6f:b1:
e4:db:15:59:d4:52:05:16:3c:e2:d0:b3:76:c3:bc:
a7:9c:65:97:5f:96:bb:22:44:5c:d1:1e:9a:dd:48:
65:4e:dd:3a:5f:e8:af:1d:9a:68:65:2a:f7:dc:22:
46:f7:de:81:9b:fa:79:02:e3:17:e8:92:70:d8:a6:
58:96:0c:7f:13:b4:93:6c:e7:0b:71:31:2a:b6:9a:
a0:61:52:b3:a3:99:c7:38:7a:4b:17:d9:ad:ed:7e:
3b:cc:35:1e:e5:09:e5:7f:54:64:73:7c:e6:c4:75:
ea:c8:03:f5:23:2f:3a:c9:0e:cd:65:2a:87:47:f1:
10:b3:2b:8e:ab:5d:59:32:aa:fd:7b:58:82:ec:57:
bb:b9:6e:9b:bf:48:3a:17:3d:27:d2:9f:38:27:17:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B0:8B:0C:ED:E7:00:5F:08:D3:14:83:32:7A:9C:9F:FC:65:2B:65
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/UrCLDO3nAF8I0xSDMnqcn_xlK2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/24
45.95.215.0/24
85.209.229.0-85.209.230.255
194.31.196.0/23
Signature Algorithm: sha256WithRSAEncryption
64:00:72:e6:ec:63:29:38:a1:ed:b4:85:e4:24:81:94:a2:07:
6a:4e:b6:0f:87:56:40:cc:67:7f:8e:e8:a6:4e:f4:df:c8:ef:
8d:f7:33:55:fe:cc:45:60:e5:dc:23:c2:a3:0b:4c:82:6e:6a:
7a:95:fc:52:7d:98:ed:d2:47:12:b4:e4:58:48:e5:ea:b3:97:
d8:80:6a:d8:e3:a4:77:85:57:37:07:75:bd:f7:11:01:a3:87:
d1:3b:74:a7:fc:ee:29:9a:b7:6a:af:70:a6:f6:3b:e4:2e:71:
70:56:37:a6:34:3c:60:25:d7:6c:2f:b1:0f:55:8d:26:70:9e:
30:f6:8e:e9:43:63:7a:58:da:f0:5b:20:7e:33:80:4a:12:02:
1f:03:2b:9a:e9:92:6c:32:f7:ee:a7:93:b1:dc:83:bb:05:88:
8d:d2:d5:8a:a9:4d:4c:61:c2:f3:f0:77:d8:da:14:05:d3:20:
4b:d2:1e:b9:df:9f:78:f5:1a:e3:a9:83:e4:05:22:58:de:90:
09:5e:b8:1f:89:60:44:e3:e2:06:48:78:54:fb:61:69:4e:f3:
e1:2e:76:ce:90:0c:2d:a2:7f:23:51:32:34:75:19:4b:e7:0d:
3a:32:3d:47:77:2d:98:86:93:a3:9a:bb:fd:64:ef:56:35:b3:
e2:85:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:46 2025 by rpki-client