Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/ughB2qwCJjXq23HnnasoQDdXgE8.roa
File: ughB2qwCJjXq23HnnasoQDdXgE8.roa (raw, json)
Hash identifier: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=
Subject key identifier: BA:08:41:DA:AC:02:26:35:EA:DB:71:E7:9D:AB:28:40:37:57:80:4F
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 01941F8C98FBA1A1DD5AE0724DF307C69D6D
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/ughB2qwCJjXq23HnnasoQDdXgE8.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49769
IP address blocks: 185.153.156.0/23 maxlen: 23
185.153.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:98:fb:a1:a1:dd:5a:e0:72:4d:f3:07:c6:9d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba0841daac022635eadb71e79dab28403757804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:4a:ad:0c:97:08:05:c3:c4:31:06:bd:19:
49:da:59:7d:98:f9:f6:c3:e3:89:f0:03:5d:a4:06:
43:ae:0b:ef:7c:31:ae:26:03:a9:3e:7f:a4:7f:78:
c3:8e:60:19:8f:1e:e1:be:b3:54:d7:66:1f:cd:c7:
55:98:4b:2b:8f:e9:17:46:32:d8:7c:48:81:db:0f:
41:cd:f4:39:03:f7:fe:21:73:44:02:1d:8b:9c:56:
1f:ef:74:57:f7:9f:43:c0:3a:f9:7c:d7:e8:b6:63:
b1:5a:5f:0b:a7:a4:9d:3e:61:95:6f:e0:12:c5:67:
f5:5a:6b:9e:e3:5f:9b:75:36:77:74:54:45:6f:58:
17:0d:ac:35:8c:2a:5a:7f:3e:2f:68:9e:83:14:5e:
ae:08:f2:4e:14:ea:f6:95:85:49:b9:68:a6:96:0f:
8a:aa:64:74:ee:e0:eb:8c:da:b6:e2:b0:6a:91:d1:
44:57:08:96:c9:97:a8:63:ff:8b:74:8e:11:36:62:
b4:95:eb:49:85:d8:91:c7:7c:fd:75:80:1a:70:e8:
33:21:f1:d3:59:4a:e9:e8:86:4a:91:19:a0:f8:05:
20:a0:7d:b5:37:29:ed:3b:9d:6e:4a:b9:2f:c7:20:
91:a1:bf:c9:fb:f2:d1:0c:ca:f2:b1:19:a5:83:e2:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:08:41:DA:AC:02:26:35:EA:DB:71:E7:9D:AB:28:40:37:57:80:4F
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/ughB2qwCJjXq23HnnasoQDdXgE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.156.0-185.153.158.255
Signature Algorithm: sha256WithRSAEncryption
58:1c:9e:50:9d:3d:c6:8c:7f:48:3a:72:fb:3e:01:7b:d1:9d:
43:4e:e1:19:21:b8:d2:0e:7f:25:c0:81:cb:49:a0:e5:f5:a8:
36:98:6c:85:8c:5e:82:2a:ac:55:5e:bb:4b:89:61:ab:19:91:
3e:a8:37:ee:d9:71:75:03:53:db:23:3e:2a:73:14:d2:47:c7:
4e:ff:62:0a:84:2c:3f:28:24:c9:de:5e:4e:49:3f:fe:3b:6f:
b9:bc:3f:7b:38:cd:ba:12:39:21:2b:f5:90:e0:d5:d0:6e:80:
38:07:64:2b:dd:05:bd:ca:f5:46:43:32:7f:c5:18:a8:de:bb:
90:ee:c5:d7:44:9a:3a:a7:cd:47:c6:5b:9d:85:c1:eb:af:e8:
a0:e6:23:fc:d5:2f:b3:42:cb:f0:85:86:03:8c:aa:e3:7d:a7:
4e:a2:75:86:84:31:32:b7:22:ee:ac:c7:9d:e1:1c:4f:a3:21:
86:f0:7f:05:a4:6c:72:37:8e:d8:c5:5d:43:42:dd:6f:5a:d9:
fc:7d:82:3e:c8:96:20:4a:6a:82:50:6d:46:e5:c5:93:f7:39:
5e:ed:59:68:fc:b8:de:1d:23:b0:60:c8:1f:1f:3f:4c:89:1c:
57:63:14:ac:d1:9d:60:57:63:d1:bd:75:39:ce:0c:3d:63:e3:
36:6d:3d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:59 2025 by rpki-client