Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/ubO5COeLYEj8EUH84jT31h_xw1g.roa
File: ubO5COeLYEj8EUH84jT31h_xw1g.roa (raw, json)
Hash identifier: s3liWR9u5QAr3kzTofUM8+A1nG9imw9GL31c3qivTBw=
Subject key identifier: B9:B3:B9:08:E7:8B:60:48:FC:11:41:FC:E2:34:F7:D6:1F:F1:C3:58
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 019427487C62E9EF989837E9352544A6B5DD
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/ubO5COeLYEj8EUH84jT31h_xw1g.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205585
IP address blocks: 185.143.232.0/22 maxlen: 24
185.220.226.0/24 maxlen: 24
2a0c:a7c0::/29 maxlen: 48
2a0c:a7c6:17::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7c:62:e9:ef:98:98:37:e9:35:25:44:a6:b5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9b3b908e78b6048fc1141fce234f7d61ff1c358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:c7:dc:c2:94:e2:01:c4:ce:7e:a6:85:1b:
81:cf:9e:86:9f:4f:71:42:2a:a8:41:9c:86:68:1e:
a0:b4:40:48:cf:19:2a:76:ef:68:b6:ad:63:9c:47:
02:a1:2f:b0:2f:0a:36:e4:15:9a:a7:53:af:ce:d3:
c2:bc:0f:e5:ce:6c:49:56:45:85:15:45:09:54:8f:
a5:01:ae:d2:0f:39:51:f2:9c:87:4f:5d:76:1d:8d:
ce:d9:69:36:ec:be:3f:fa:9f:33:81:24:f2:4a:ca:
10:86:17:0a:8b:78:e0:74:28:d4:a8:0b:f6:4c:7a:
fc:37:07:a5:38:0d:d4:9e:f2:d1:8e:20:af:4e:c9:
d7:c0:2e:c0:ce:41:2a:9a:27:a0:c6:35:3f:78:36:
5f:f8:df:76:58:46:dd:50:ec:42:3e:0c:fc:8e:f5:
b2:4a:50:3e:b3:85:86:b2:b8:f6:2f:76:4e:c0:69:
a6:0d:18:46:1e:54:a7:8f:de:d5:1c:4f:b1:96:01:
4b:db:b0:39:6a:1a:dd:a6:df:4a:43:1a:62:b5:47:
19:61:7f:79:8a:54:00:88:67:d3:30:2f:e3:e2:a6:
da:aa:51:06:ca:53:96:c8:30:40:74:82:db:0a:19:
e0:38:b8:aa:12:7a:bb:4a:50:f6:fc:80:03:ef:8e:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B3:B9:08:E7:8B:60:48:FC:11:41:FC:E2:34:F7:D6:1F:F1:C3:58
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/ubO5COeLYEj8EUH84jT31h_xw1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.232.0/22
185.220.226.0/24
IPv6:
2a0c:a7c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:e7:eb:00:80:c7:7e:27:ee:64:fc:c6:13:8d:01:43:59:3d:
c3:08:14:6f:06:31:f1:6f:b8:1e:b5:0e:17:a0:35:fe:3c:93:
7f:db:9a:8a:19:b1:c7:ee:dc:50:da:9a:8f:61:af:26:59:4d:
85:8d:bf:a1:65:39:d6:23:a6:0b:97:68:ab:0f:f8:fe:f0:7c:
4c:ca:82:11:58:da:91:61:ef:2e:e5:d4:3b:2f:a7:02:e3:0a:
c2:87:a9:9d:76:1e:23:68:c6:0c:c6:55:06:92:bc:82:ba:82:
fe:c9:68:9e:88:6d:2d:85:dc:25:ae:cf:99:ab:6e:3c:6d:d3:
e7:11:98:67:fd:8c:ad:b6:35:ea:e3:66:da:33:f3:ee:90:02:
51:96:bd:91:35:37:d5:9c:3b:5e:43:2a:6a:0d:e8:9f:f8:4a:
59:73:6e:aa:39:30:6f:4c:6a:5a:32:4c:ba:5f:0b:95:cb:5e:
26:16:b3:6c:bc:23:71:c2:86:81:76:d8:c5:08:4e:1d:dc:1e:
e0:9e:12:d7:0e:22:01:43:ce:f7:ae:1d:68:e4:d9:e8:94:f1:
ab:c9:a8:39:e9:84:33:12:06:69:cd:3f:50:86:79:8f:a3:02:
1b:20:de:1e:10:dc:c4:bd:3c:31:1b:f9:16:e6:54:56:76:0d:
28:92:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:56 2025 by rpki-client