Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/UJFAgsvLyykBMpj8wefBtmZOtCQ.roa
File: UJFAgsvLyykBMpj8wefBtmZOtCQ.roa (raw, json)
Hash identifier: /2RAKH3N0eJXULCFA83JlwEdcuLPU5OF6XXRncHvAOo=
Subject key identifier: 50:91:40:82:CB:CB:CB:29:01:32:98:FC:C1:E7:C1:B6:66:4E:B4:24
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018CC3B6878A7FBA03EB2C7C6A5E9869CBD6
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/UJFAgsvLyykBMpj8wefBtmZOtCQ.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133499
IP address blocks: 185.188.62.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:87:8a:7f:ba:03:eb:2c:7c:6a:5e:98:69:cb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50914082cbcbcb29013298fcc1e7c1b6664eb424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7d:2b:26:57:55:0c:a1:3b:dc:d2:67:80:e6:
a6:05:08:51:d4:97:a8:a6:28:46:3c:64:95:b3:29:
d6:fa:25:64:dd:85:7a:d7:63:76:da:1e:91:35:8b:
34:2a:7b:83:2e:f0:e7:90:43:75:32:08:09:c4:86:
fa:82:63:34:0d:5d:e8:4d:80:22:63:96:0a:d9:9e:
ac:80:a4:6d:b2:e0:40:38:2d:c8:56:85:c7:cf:90:
84:e4:1e:f3:8e:9e:86:9b:fa:b0:be:fe:5f:e9:8d:
34:e1:59:53:5b:1a:62:a9:4b:13:d9:ee:59:a3:e8:
0f:61:be:48:00:d9:e3:fa:2d:e9:45:82:3d:b1:8d:
76:ed:5f:ec:6f:6e:04:fb:b8:1d:b2:74:8e:1f:d6:
ee:2c:e5:be:68:f1:49:98:ed:ca:66:07:bb:60:3d:
ab:b7:c3:1c:f6:3c:8c:e3:8f:28:d3:b8:55:ae:b4:
6e:ec:0d:57:30:b0:84:af:f9:0b:c8:80:e6:5d:83:
9a:f8:00:8a:36:36:76:58:03:ca:78:ad:ea:12:b7:
24:3c:b2:4a:41:77:2d:17:e7:2c:5b:81:d6:00:ff:
1a:ef:87:e1:32:d8:52:5f:9e:88:e8:26:1e:f4:10:
e4:09:a4:59:fe:db:7e:c0:da:5b:aa:13:e1:3d:d9:
a7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:40:82:CB:CB:CB:29:01:32:98:FC:C1:E7:C1:B6:66:4E:B4:24
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/UJFAgsvLyykBMpj8wefBtmZOtCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.62.0/24
Signature Algorithm: sha256WithRSAEncryption
be:b6:b3:08:ba:ef:65:2d:ca:fa:17:05:03:1a:41:b2:6c:f7:
95:2d:6e:9c:27:87:75:78:e9:b1:72:01:4d:00:39:69:5d:15:
06:e6:f0:0d:42:48:bf:f4:c1:df:05:cb:a6:85:91:bc:38:66:
53:f6:52:ff:71:1f:2c:11:60:7c:15:c1:de:e2:f6:d1:12:e7:
0d:77:dd:6e:ee:5b:8c:3f:42:4d:14:8c:76:ce:2e:34:69:cb:
09:78:fa:df:fe:40:46:87:c5:6d:58:c0:4c:25:b3:1a:02:bd:
8c:c6:88:7c:b8:95:0f:8e:39:37:31:43:e3:74:e0:c9:bf:51:
1c:33:87:6e:77:ac:78:b5:0e:13:eb:66:e4:94:51:2d:e0:5e:
ea:9c:5d:9f:fc:67:b9:99:e8:10:55:ce:a0:ef:80:cc:96:b5:
e5:4e:8c:fb:36:69:a1:b1:83:20:40:b1:14:fc:f2:70:80:30:
7c:bb:7d:a3:98:c0:7e:34:6e:71:e1:49:4e:5b:1b:81:e0:1b:
ad:41:a4:f9:f2:17:14:b6:8c:d6:06:d3:ae:61:eb:2e:ce:61:
b8:9e:9e:f9:0b:71:86:e6:32:65:0d:39:36:55:5a:4e:5a:0f:
11:89:20:ce:08:35:3d:b5:c2:1a:0c:20:c9:dc:6c:2d:62:6e:
d5:46:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:42:06 2025 by rpki-client