Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/usukqM3IhyDYNnttlGzr4GMalbM.roa
File: usukqM3IhyDYNnttlGzr4GMalbM.roa (raw, json)
Hash identifier: AmN91z8j0spH0QCHEMiU2dfIQz38pEXTN+9Bqls+dfE=
Subject key identifier: BA:CB:A4:A8:CD:C8:87:20:D8:36:7B:6D:94:6C:EB:E0:63:1A:95:B3
Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial: 019422FB134E8DA129D11D514AC43731AF86
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/usukqM3IhyDYNnttlGzr4GMalbM.roa
Signing time: Wed 01 Jan 2025 17:47:47 +0000
ROA not before: Wed 01 Jan 2025 17:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.109.96.0/22 maxlen: 24
2a04:a0c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:13:4e:8d:a1:29:d1:1d:51:4a:c4:37:31:af:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Validity
Not Before: Jan 1 17:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bacba4a8cdc88720d8367b6d946cebe0631a95b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:b7:72:be:4f:df:49:ba:49:af:62:7b:ca:
80:b4:ce:27:3f:a9:50:f4:bb:eb:fc:b5:b8:0a:8d:
50:0b:bf:3c:fc:85:5d:f9:0e:05:66:1b:24:62:73:
27:2d:56:bb:1b:37:8e:db:e0:33:3a:90:bc:f4:f9:
c8:d9:6c:46:45:64:c5:57:16:f5:e0:3e:92:86:f8:
23:de:3a:12:90:1c:26:94:5c:3e:e3:6a:0e:57:90:
17:c5:44:ab:55:dc:32:22:19:0a:2e:7b:7e:f3:4f:
e0:57:3b:fd:35:e9:30:4b:3e:ef:e2:1e:fe:c9:c4:
da:0f:9c:e1:b1:16:52:d6:5f:9e:6d:2f:5b:1c:91:
ae:5c:2f:90:df:47:cc:55:77:6e:26:40:de:9f:9b:
ff:bc:0d:07:08:3a:bc:fe:28:b2:08:24:28:10:b1:
c7:de:b3:4a:c3:5f:41:32:fe:3d:b1:27:1e:11:68:
94:8c:d9:59:72:33:24:44:b4:c5:c0:b8:d1:50:2c:
52:78:63:ea:e8:80:2f:49:10:0f:9e:33:84:fd:7c:
53:ca:47:dd:60:09:9f:76:dc:80:98:54:b4:bb:44:
66:f1:fc:85:54:9f:7f:52:35:de:ab:db:70:2e:b5:
a6:77:3a:07:4b:91:5b:a0:88:5c:ff:8e:db:9b:11:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CB:A4:A8:CD:C8:87:20:D8:36:7B:6D:94:6C:EB:E0:63:1A:95:B3
X509v3 Authority Key Identifier:
keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/usukqM3IhyDYNnttlGzr4GMalbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.96.0/22
IPv6:
2a04:a0c0::/29
Signature Algorithm: sha256WithRSAEncryption
01:c2:44:f7:f5:20:65:d0:dc:70:32:48:35:bc:95:36:2a:2d:
08:5f:0d:9b:c9:21:3e:ce:9b:68:cf:aa:5f:b8:e3:1f:55:3b:
e1:06:2e:30:02:a2:5d:4b:d3:71:eb:a9:af:ff:4e:28:9a:5d:
51:31:af:04:28:3e:ce:1f:df:0a:ff:6e:db:a2:2b:58:86:6b:
78:be:e1:38:96:19:e0:ce:64:03:92:6b:cc:2e:5f:e2:dd:a2:
8e:3d:84:26:0b:ad:4c:41:18:85:84:83:41:cf:a9:aa:3d:5a:
cc:dd:e9:ba:4c:d8:4c:0e:94:68:ae:6a:df:f5:ae:10:fc:ac:
9e:cd:43:69:86:2e:6e:35:a8:91:b8:3f:80:4d:50:ab:00:5a:
58:13:89:95:d2:bc:35:e5:aa:6e:6d:5c:aa:eb:ca:c5:7f:30:
83:27:1e:91:b0:a6:70:a3:c8:86:89:8b:03:b9:74:d8:53:6c:
84:1a:a7:93:6a:63:ed:e8:b5:a5:a9:45:79:0e:fe:e7:90:e3:
df:a4:01:26:85:8f:9f:8d:34:0f:08:4a:85:56:b0:7d:d4:1a:
6d:a6:0b:63:d2:82:28:af:19:e3:4d:2b:1e:91:63:44:61:a4:
cb:45:fd:f6:f2:c6:15:a7:1e:e7:18:a1:ed:d1:df:e4:fd:26:
43:ed:74:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:21 2025 by rpki-client