Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/uvLPoehLu5sKEGb3gSAhp-mzyUo.roa
File: uvLPoehLu5sKEGb3gSAhp-mzyUo.roa (raw, json)
Hash identifier: 8iCA5Oe/Tes/3XOm7JiOZmVvlS84ZIc2xOFrZRLKZmo=
Subject key identifier: BA:F2:CF:A1:E8:4B:BB:9B:0A:10:66:F7:81:20:21:A7:E9:B3:C9:4A
Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial: 08C3A085
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/uvLPoehLu5sKEGb3gSAhp-mzyUo.roa
Signing time: Sat 01 Jan 2022 14:55:50 +0000
ROA not before: Sat 01 Jan 2022 14:55:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50056
IP address blocks: 82.192.106.0/23 maxlen: 23
82.192.108.0/23 maxlen: 23
82.192.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147038341 (0x8c3a085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Validity
Not Before: Jan 1 14:55:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=baf2cfa1e84bbb9b0a1066f7812021a7e9b3c94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:08:c5:42:c5:70:12:71:a8:f5:3a:4e:2c:
6b:cb:f4:f8:92:54:72:9e:3a:01:42:a7:a6:ac:c1:
85:e7:7a:4e:d7:71:5c:29:3d:a5:d6:db:21:84:c7:
4d:71:42:2f:51:9f:1f:88:55:28:8d:63:f1:be:34:
04:88:16:07:eb:89:2d:f5:f1:72:60:f3:39:3e:28:
ca:8b:f3:b6:d8:6a:54:5a:23:bd:7c:12:ec:76:d8:
ba:97:4a:0c:e0:d1:78:16:f0:49:30:d2:80:f4:05:
a5:a6:a1:04:ad:1e:aa:32:14:59:a3:ff:ee:92:c5:
c9:68:f9:c2:d3:b0:5a:7c:54:4b:5e:e0:33:9e:17:
91:df:ea:09:fe:6b:fd:20:cb:43:bf:41:98:75:32:
e7:6d:86:cf:51:74:db:91:6f:20:b8:ea:ee:5b:a8:
f4:31:61:bd:c2:c9:91:32:e9:3f:38:45:ac:ef:5e:
35:2e:53:e7:de:a7:65:26:65:e1:d3:ac:bd:1b:a9:
43:23:41:a2:0f:c8:09:35:f0:2d:18:2a:b1:87:0d:
4e:f6:05:a1:9b:6a:19:0b:65:52:b2:1b:29:9b:46:
b1:93:0c:06:45:d8:ac:97:6c:c4:23:c6:58:93:42:
65:f2:52:19:c0:78:b2:78:bf:88:c3:71:62:c7:ab:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F2:CF:A1:E8:4B:BB:9B:0A:10:66:F7:81:20:21:A7:E9:B3:C9:4A
X509v3 Authority Key Identifier:
keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/uvLPoehLu5sKEGb3gSAhp-mzyUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.192.106.0-82.192.111.255
Signature Algorithm: sha256WithRSAEncryption
23:83:e4:c8:62:8f:39:40:8a:c6:31:ec:3c:b9:39:47:33:e1:
19:fd:63:65:1a:f0:85:15:60:01:d8:75:e7:ee:3c:cc:99:42:
4c:04:ba:51:62:41:ca:c6:f4:3a:e7:c8:26:fc:0e:cf:51:26:
00:93:f7:16:44:9d:86:fe:2f:23:f2:9b:5b:5d:c5:1e:a6:41:
5e:f1:8d:74:21:e9:74:d7:d5:9c:50:5e:07:17:13:6f:6d:17:
2e:73:e3:62:aa:ca:04:ed:dd:22:ab:97:46:47:ff:7a:3b:9c:
29:ed:17:22:f6:ba:d6:e9:fd:91:0f:ac:04:89:20:31:75:84:
17:9d:97:19:ed:4b:b3:84:55:ac:55:5d:23:79:7a:97:af:16:
9c:5a:5a:b5:f3:09:f4:63:e3:df:5c:be:da:3a:6c:59:7a:a4:
f2:57:b7:0b:3c:da:a6:63:b2:52:40:8b:77:0f:c7:dc:38:a3:
3c:18:6b:a9:44:5d:97:3f:e8:87:6a:1b:05:a9:91:33:3b:c0:
8f:e4:85:06:37:38:a3:16:5b:a7:00:7d:5f:ba:f8:b7:90:36:
55:65:02:5b:f4:b4:c7:8a:dc:e8:c2:03:75:9f:71:d6:f4:1d:
a3:71:a3:88:57:95:69:38:ad:b0:6f:28:55:e4:19:ed:c8:cc:
ed:f2:fd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:17 2025 by rpki-client