Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa
File: kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa (raw, json)
Hash identifier: pWOc8zM/cAP0pnHrLKIMmGeqVgPcNsErRAC9f0Wl2a4=
Subject key identifier: 91:42:25:B4:CA:B2:24:9E:B3:FC:C7:45:04:4E:14:2B:F8:29:13:43
Certificate issuer: /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial: 0194252237ECBD6C13C229BBD04AA4B77573
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 82.112.64.0/19 maxlen: 24
94.198.48.0/23 maxlen: 24
160.20.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:37:ec:bd:6c:13:c2:29:bb:d0:4a:a4:b7:75:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=914225b4cab2249eb3fcc745044e142bf8291343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:5b:13:14:93:85:ab:b6:64:16:bf:6a:38:
f8:06:2f:dc:b3:8d:7b:88:71:77:e7:de:1b:d9:62:
b7:11:34:be:93:38:8d:2a:16:b1:75:d9:5f:6f:dd:
f9:4a:a9:2c:d9:2d:03:10:68:d6:bd:07:17:98:b7:
a2:81:c6:72:c8:24:48:a9:69:d4:8d:d9:b3:c0:51:
d5:6a:f0:2f:1b:5e:f1:71:ca:e2:d3:7d:79:15:7a:
06:26:96:a1:e5:ed:c1:3b:8b:18:df:6d:ff:9f:4b:
40:e2:c8:5e:a1:99:28:1f:a7:7b:35:64:9c:45:91:
49:40:ef:cd:9f:79:9b:99:32:19:02:11:5a:21:28:
e1:e4:05:3c:52:bf:fc:d4:1c:27:1b:f9:1b:52:a8:
37:f5:c9:25:db:f7:38:ce:08:47:20:5b:0a:bd:27:
f2:6a:e2:6a:0f:af:fc:68:19:9a:2d:dc:5b:54:a8:
ef:e6:e2:06:bd:93:ec:7d:83:33:a8:bc:2b:4e:b3:
b3:61:2d:53:e3:25:48:8a:bf:cb:6d:f6:4e:52:15:
2c:4c:70:10:82:5a:ae:0d:7a:65:0f:35:1f:ad:00:
db:9b:77:0a:bb:dd:a0:8b:98:a7:4e:78:01:e3:79:
69:cc:ad:38:43:14:ef:0d:ea:8c:ad:d2:78:d8:cd:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:42:25:B4:CA:B2:24:9E:B3:FC:C7:45:04:4E:14:2B:F8:29:13:43
X509v3 Authority Key Identifier:
keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.64.0/19
94.198.48.0/23
160.20.214.0/23
Signature Algorithm: sha256WithRSAEncryption
49:c0:3d:37:93:38:d3:51:52:15:b7:29:b4:35:27:fc:e3:8f:
a2:38:6a:f6:b7:fc:d9:a9:ca:f7:ff:f2:3d:b1:b1:27:97:cf:
da:9f:82:dd:47:57:08:a9:84:4c:ad:0f:8d:df:2a:57:47:88:
07:05:c7:fc:6a:ef:68:24:27:f5:55:0b:cc:86:6e:36:c9:34:
35:35:62:cc:09:bf:62:c5:5a:16:99:0c:2f:d3:de:3f:dd:4f:
37:37:fe:37:2c:99:e1:5e:31:4f:ab:18:2e:ab:21:87:13:14:
c2:48:3b:6a:8b:a7:c1:eb:bf:a3:12:d7:ba:3b:8c:56:82:fa:
2b:ab:a1:30:83:56:4f:17:5a:78:a9:f3:5f:3f:d0:27:5e:d2:
84:07:25:61:98:2a:86:29:df:9b:a6:1f:59:3d:91:cb:0a:6a:
c7:4f:6c:e7:05:df:9e:00:4f:97:70:2e:f5:78:c7:4f:44:ca:
9f:7c:4a:d0:8d:82:a1:38:87:e4:72:03:03:28:06:0d:03:cf:
b8:20:bd:f3:ca:5d:47:f9:ae:d4:5a:a2:2f:c3:57:2a:53:b2:
a8:56:35:df:f1:80:57:ba:8f:7e:09:bc:e7:f3:3c:f2:33:03:
40:b5:7a:96:0e:65:be:1f:49:d6:34:d1:65:a0:06:c9:d7:70:
1a:80:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:38 2025 by rpki-client