Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/uVDY6PyUuy1nXZci6asUkfr791g.roa
File: uVDY6PyUuy1nXZci6asUkfr791g.roa (raw, json)
Hash identifier: souJp5O+Y8ld96qNW2UmMguzsgXAcLNBUoBdApPqkIw=
Subject key identifier: B9:50:D8:E8:FC:94:BB:2D:67:5D:97:22:E9:AB:14:91:FA:FB:F7:58
Certificate issuer: /CN=e1e8b7cab521e88e8022a36424544185538a7b33
Certificate serial: 01949A318F21A64B957F63A567F7A37244AC
Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/uVDY6PyUuy1nXZci6asUkfr791g.roa
Signing time: Fri 24 Jan 2025 21:22:06 +0000
ROA not before: Fri 24 Jan 2025 21:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44947
IP address blocks: 185.154.190.0/24 maxlen: 24
2a13:1640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9a:31:8f:21:a6:4b:95:7f:63:a5:67:f7:a3:72:44:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33
Validity
Not Before: Jan 24 21:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b950d8e8fc94bb2d675d9722e9ab1491fafbf758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:1d:a5:d9:69:35:4d:1d:02:0f:60:d3:e3:
bf:07:ae:1e:90:fa:f4:52:10:f1:8e:76:a0:8c:85:
5f:2a:dd:43:a9:c4:2f:ad:8a:b6:7e:c3:ef:37:6c:
2d:7e:40:13:82:d2:5d:70:a3:26:85:b3:67:71:b9:
d8:5c:22:ed:98:f5:a4:d4:55:71:d3:f5:4f:f5:47:
a3:c2:9a:aa:31:e4:dd:b2:cb:29:45:80:fe:d4:64:
8e:70:53:e1:e8:52:40:3f:94:cb:1f:16:12:d5:02:
e3:a5:d0:ce:9a:71:fa:62:59:87:6d:8e:73:d3:59:
7f:a6:d6:b1:3e:4b:cc:f8:a9:53:c7:52:4d:9c:c2:
75:d6:8b:8d:6f:44:36:e8:ff:a3:3d:9f:98:27:6d:
a1:4d:52:8f:ad:fd:7d:39:4b:e9:d6:ef:6f:f2:20:
29:ab:3a:3f:28:fa:ff:d1:a0:77:d2:0b:50:be:8d:
66:3d:7e:24:b6:c9:7c:00:9a:d6:c3:47:92:54:37:
30:c1:2f:2a:7e:c8:49:eb:8f:83:57:b1:7e:f2:52:
7b:36:52:7f:ef:53:89:a4:13:e0:49:10:6c:4a:8a:
03:f8:75:07:8f:ea:bf:95:e3:6a:f0:d0:da:a2:00:
fc:71:ad:82:6a:66:29:8e:87:80:f4:b8:58:01:31:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:50:D8:E8:FC:94:BB:2D:67:5D:97:22:E9:AB:14:91:FA:FB:F7:58
X509v3 Authority Key Identifier:
keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/uVDY6PyUuy1nXZci6asUkfr791g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.190.0/24
IPv6:
2a13:1640::/29
Signature Algorithm: sha256WithRSAEncryption
02:0b:6a:99:4b:93:f4:c5:0b:ee:f2:42:36:61:d0:63:f0:94:
13:cb:77:9b:71:ae:94:0f:00:5a:98:72:f5:25:c3:69:cf:1a:
f5:36:7a:39:99:c3:e3:b4:b0:2e:5b:34:bd:d6:24:31:11:e2:
d8:0c:bb:c5:b7:e4:dc:aa:99:9d:0f:82:8d:98:c4:df:40:51:
2c:7f:55:78:92:c5:06:64:d4:e7:ac:5e:4f:68:62:bd:b6:2a:
07:74:66:cb:42:52:3f:a6:2d:ec:da:25:cd:45:16:29:63:56:
c4:55:fe:5a:d7:7b:be:8b:71:3b:29:ea:9f:92:40:da:ac:a8:
b7:80:54:85:fb:0d:95:7d:17:51:8f:53:3a:f9:b3:b4:19:f4:
87:5a:95:78:1f:b0:c4:28:0f:db:6d:80:b1:ce:ea:29:d3:47:
43:a8:ee:f1:59:6d:9b:69:6d:a8:59:62:47:44:fe:49:0b:30:
12:8f:69:05:f7:98:19:0e:9f:29:a0:f7:ed:87:4c:77:07:61:
23:ad:59:0d:2d:26:74:00:c6:82:cf:f9:eb:04:b0:34:12:c7:
ff:81:93:31:8a:76:96:9d:85:82:2b:0e:34:6a:47:dc:f1:a6:
56:43:c5:14:9e:0b:24:48:49:a7:54:7f:45:69:70:f5:b0:4a:
f3:fb:5d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:08:29 2025 by rpki-client