Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/uTgF90O7aHLO_G7cSzTbj_nzdao.roa
File: uTgF90O7aHLO_G7cSzTbj_nzdao.roa (raw, json)
Hash identifier: lwZMpyCYU1xDcN6IVFSHMP6G+054GMvXirawB6lbtsU=
Subject key identifier: B9:38:05:F7:43:BB:68:72:CE:FC:6E:DC:4B:34:DB:8F:F9:F3:75:AA
Certificate issuer: /CN=f58df2c469c978895f8458024c506e801c8fb21a
Certificate serial: 01942827D8B8FC0734B44FC157781860789B
Authority key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/uTgF90O7aHLO_G7cSzTbj_nzdao.roa
Signing time: Thu 02 Jan 2025 17:54:47 +0000
ROA not before: Thu 02 Jan 2025 17:54:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201127
IP address blocks: 185.189.60.0/22 maxlen: 24
2a0b:d680::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:d8:b8:fc:07:34:b4:4f:c1:57:78:18:60:78:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58df2c469c978895f8458024c506e801c8fb21a
Validity
Not Before: Jan 2 17:54:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b93805f743bb6872cefc6edc4b34db8ff9f375aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:e0:41:f4:33:c3:eb:77:09:c5:6b:f4:b2:
5c:4b:61:77:c2:3f:3d:29:63:32:ea:ec:f4:dc:ee:
bc:22:09:ba:2c:e3:50:53:d4:9d:9b:bd:f0:83:0f:
e2:a0:86:fc:76:3d:b3:f6:5f:23:96:42:ce:7b:21:
b4:82:4e:f4:69:a1:92:98:88:83:a3:f7:d1:15:a4:
f3:d6:0e:69:1f:5a:e3:a5:70:14:92:04:c3:ad:fa:
95:43:cd:72:61:22:b6:5a:aa:a8:fe:75:33:1c:af:
02:05:92:d6:d8:67:6c:09:da:93:33:c3:f8:84:c3:
e3:9c:77:db:9f:1c:bf:eb:be:c3:7e:e6:4d:3b:4c:
3a:be:39:c0:d4:a3:e8:fc:09:16:db:cb:07:21:f3:
d5:80:c2:be:6b:5f:38:99:1e:0b:e7:ef:78:e6:28:
0d:cf:4a:8d:a6:10:4b:30:f3:68:09:ed:e2:5a:e4:
82:d7:33:04:bb:a6:5e:ef:fd:cc:a3:7f:1a:e2:40:
4c:ae:e7:94:ca:4b:6b:53:24:6e:33:9b:18:ee:4b:
70:4f:5b:55:c2:22:8a:84:7d:b5:83:48:95:7e:e8:
fd:3e:e0:00:c2:30:9d:df:6a:d2:2d:50:1d:b9:42:
a0:fb:05:80:79:bb:4b:e9:71:0f:94:43:04:aa:1e:
d0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:38:05:F7:43:BB:68:72:CE:FC:6E:DC:4B:34:DB:8F:F9:F3:75:AA
X509v3 Authority Key Identifier:
keyid:F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/uTgF90O7aHLO_G7cSzTbj_nzdao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.60.0/22
IPv6:
2a0b:d680::/32
Signature Algorithm: sha256WithRSAEncryption
0b:60:65:78:66:cc:3e:24:e2:50:8a:26:3d:4f:23:66:b6:a8:
82:47:4d:b3:1e:8c:10:04:c2:8c:8d:44:12:b9:b2:cd:e1:4d:
bb:f6:dd:0a:42:2c:5b:1c:bf:e7:bf:37:04:e1:57:1f:95:f5:
af:98:c8:ae:ba:81:93:bd:9b:7d:03:5f:6b:0c:8a:60:f5:1b:
86:63:4a:ac:0d:ce:9d:44:8a:c7:d4:af:67:d5:ed:6c:2e:20:
07:3b:49:e0:11:fd:ac:75:4f:bd:85:d7:32:87:eb:c7:03:08:
4f:55:04:6f:2b:08:ff:7b:48:ce:94:82:01:d1:c1:2e:ea:5a:
72:dd:81:40:be:50:10:08:b8:21:bc:c3:ad:b1:e9:ba:1e:1e:
37:c6:fb:9c:ea:aa:03:7c:aa:b5:26:37:28:ef:e4:46:31:60:
b1:bf:55:be:c5:58:84:a4:df:ef:bf:54:08:86:25:b7:99:50:
33:4f:c2:58:24:00:5e:8b:cc:33:97:e8:ec:57:81:82:63:0b:
b4:3c:7d:d3:c4:68:51:f5:7f:83:25:fe:88:2f:31:dd:95:10:
d4:cd:a7:c4:44:c0:02:31:c2:8e:9b:5d:4d:ed:47:74:f2:3a:
8b:c1:75:d3:c0:3b:40:f3:0f:38:b5:39:26:1f:fe:7f:fa:66:
11:e0:ba:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:58 2025 by rpki-client