Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/u16TB_X_VEL7--qGdSVXn8Zs3wY.roa
File: u16TB_X_VEL7--qGdSVXn8Zs3wY.roa (raw, json)
Hash identifier: m8sRTErDjjsLnDtgYn9w7y6plArnvxsTKmxxZwh54Fs=
Subject key identifier: BB:5E:93:07:F5:FF:54:42:FB:FB:EA:86:75:25:57:9F:C6:6C:DF:06
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 0194266BB64ADC884694999CFB6A739133A9
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/u16TB_X_VEL7--qGdSVXn8Zs3wY.roa
Signing time: Thu 02 Jan 2025 09:49:40 +0000
ROA not before: Thu 02 Jan 2025 09:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203939
IP address blocks: 185.125.184.0/22 maxlen: 22
2a06:bc40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b6:4a:dc:88:46:94:99:9c:fb:6a:73:91:33:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb5e9307f5ff5442fbfbea867525579fc66cdf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b8:93:5a:29:26:ba:8a:47:1e:ad:5c:37:72:
78:08:72:9d:c7:26:1e:f3:7c:1b:16:fc:5d:c6:4c:
4e:f2:70:5c:35:73:d8:a6:d4:70:82:8c:6e:67:e8:
8b:0f:f0:1d:c7:74:34:95:ba:67:05:b1:e2:0d:6d:
32:e4:35:10:9a:76:ec:38:76:08:dd:a6:28:ac:d9:
15:f8:f2:fe:6c:55:6d:90:98:35:a6:ef:d7:40:c8:
05:8d:2d:76:c6:cf:8e:bc:ae:ba:c0:10:59:51:ae:
14:09:8e:9f:29:4d:5d:e0:07:26:c0:96:69:50:43:
67:55:39:83:05:5d:9f:c6:ba:0c:7a:d7:16:6e:c6:
af:6f:cd:f6:20:9c:5d:5c:34:c5:1e:c0:d3:eb:d0:
4d:d4:79:18:b5:ed:a5:a3:eb:d9:02:85:4f:dd:5b:
e9:31:0d:b0:a3:fa:ea:6e:8d:ba:46:a4:73:5d:99:
a7:77:04:a3:c4:45:29:de:3f:84:4c:43:f3:07:79:
63:5e:c3:85:2e:78:f2:a1:5a:a5:77:79:40:0c:69:
dd:e2:c3:b7:7b:23:f4:05:ac:b4:4f:e2:bd:e9:b2:
e3:18:c8:c8:c2:05:77:44:b7:36:29:67:3b:b1:dd:
8a:45:8e:d5:85:6e:2a:f2:b4:d2:6e:6a:79:d0:d0:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5E:93:07:F5:FF:54:42:FB:FB:EA:86:75:25:57:9F:C6:6C:DF:06
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/u16TB_X_VEL7--qGdSVXn8Zs3wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.184.0/22
IPv6:
2a06:bc40::/29
Signature Algorithm: sha256WithRSAEncryption
8c:4a:3c:33:af:7e:8c:2a:97:df:77:75:fb:6e:e2:47:5e:24:
aa:c2:91:10:e0:be:59:91:db:46:81:b5:23:29:98:68:f4:45:
9a:1f:a2:d2:72:37:10:47:aa:d3:78:5d:7a:e7:b3:e9:aa:fc:
f7:71:b5:15:8e:69:c8:06:69:3d:4e:f9:ad:03:4b:e1:ec:f4:
a0:3c:95:cc:b2:cc:e2:2b:26:d5:43:34:d8:fd:21:b1:2d:82:
22:74:24:e1:69:d8:a4:47:94:9f:1d:49:a7:8c:f4:da:04:e8:
f6:44:8b:26:30:e6:66:93:60:ba:d7:92:00:8e:a7:8c:44:4c:
44:d6:b3:fe:de:01:44:83:bc:09:33:a2:f3:d9:0c:31:82:43:
4d:07:e3:86:22:5f:74:a3:54:db:10:c3:66:8d:b3:f0:8e:c2:
e0:2a:bd:15:f0:d5:ab:85:5a:55:5a:15:84:97:a7:8f:3c:c5:
20:ae:14:1a:67:d6:97:9c:0c:49:63:20:43:7a:04:cc:c9:a8:
99:5c:7b:56:1c:07:7b:1e:b2:b1:bc:9d:39:70:49:b7:f7:85:
db:3d:f5:f0:e4:11:01:be:26:7b:da:78:21:01:b6:32:44:3f:
c4:41:12:18:a0:77:5b:8e:c9:dd:80:d2:d4:6b:82:77:35:fe:
d8:34:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:25 2025 by rpki-client