Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/uS0SeGXmcphPOWGVZoktWV7dNKw.roa
File: uS0SeGXmcphPOWGVZoktWV7dNKw.roa (raw, json)
Hash identifier: AZFBcssR8DoMY9+hyN6TieAv8Uqe/8Tr4aG4FVSDtEc=
Subject key identifier: B9:2D:12:78:65:E6:72:98:4F:39:61:95:66:89:2D:59:5E:DD:34:AC
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018BCB07F24BDFF8C93FC9DAED34D0D6597B
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/uS0SeGXmcphPOWGVZoktWV7dNKw.roa
Signing time: Mon 13 Nov 2023 23:32:57 +0000
ROA not before: Mon 13 Nov 2023 23:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 94.190.248.0/22 maxlen: 24
185.172.20.0/22 maxlen: 24
185.64.100.0/22 maxlen: 24
188.211.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cb:07:f2:4b:df:f8:c9:3f:c9:da:ed:34:d0:d6:59:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Nov 13 23:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b92d127865e672984f39619566892d595edd34ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:54:24:4f:11:ca:3e:8c:b9:c9:2c:d2:b7:
7d:8f:56:8b:cf:39:de:60:0a:09:82:7c:4d:e0:16:
46:87:cf:5b:5c:56:0e:7e:c6:fe:6b:e3:4e:5a:12:
7e:c8:cd:69:f4:0b:db:17:90:75:95:bd:57:66:12:
4a:aa:05:dd:96:ae:2b:62:76:16:fe:3f:48:09:ec:
42:d9:da:54:fa:3f:bc:dc:63:4d:ea:c5:0a:cc:c8:
1c:2b:8a:f4:94:f7:40:b4:ab:c0:f7:c8:ed:ce:ce:
b0:f0:fe:48:36:e7:46:33:71:3b:41:30:ef:ed:c0:
89:f8:36:65:67:32:4c:6e:1c:ad:39:10:6a:22:a7:
91:90:58:6a:79:6b:8c:1e:fb:61:83:ee:e0:d7:bd:
f0:d6:91:4e:6e:c4:4b:7f:8d:20:9e:f5:5c:e5:08:
9d:ef:7c:9c:00:73:a7:64:e8:9c:b3:c3:31:4b:ac:
d8:76:d6:cf:0a:1c:0c:6e:7d:7f:22:86:ba:f2:fa:
e1:b2:58:ca:d4:91:0d:f4:73:94:1c:ce:d6:a8:00:
c7:f0:21:ec:06:8f:8f:3a:36:c2:c1:0e:96:19:39:
ea:e7:f4:62:ac:73:c9:bf:a4:d8:54:ef:ed:6c:d7:
1f:14:9b:06:46:ee:86:af:4c:4a:87:84:13:2a:d8:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2D:12:78:65:E6:72:98:4F:39:61:95:66:89:2D:59:5E:DD:34:AC
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/uS0SeGXmcphPOWGVZoktWV7dNKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.248.0/22
185.64.100.0/22
185.172.20.0/22
188.211.252.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:41:5b:c8:a5:63:d1:46:e6:9c:af:62:d0:c6:a8:4f:05:8b:
93:fc:de:b8:8c:40:a6:2e:ec:9d:ca:bf:07:61:c7:7f:07:c1:
ca:23:67:49:f4:42:27:f7:c3:48:33:3d:be:a6:8e:fc:4e:d6:
1b:77:b9:27:c7:be:29:08:54:01:2f:cc:93:80:2f:e8:ca:f4:
fc:02:60:19:95:a4:90:af:a5:0e:f4:66:51:09:0c:77:6c:c4:
4a:a5:88:25:7d:5b:72:ac:36:2d:a7:d6:39:88:78:ec:8b:9f:
3a:aa:5a:e7:56:83:c4:5c:0a:b8:41:7a:2d:c6:c3:29:ae:2d:
74:6c:c4:58:8c:2b:39:b3:42:59:76:bf:7a:00:c7:3f:6d:72:
b6:03:68:11:6b:81:e3:1a:bf:69:b9:dd:7b:9c:b3:42:4f:5f:
58:50:2f:32:e1:dd:8b:fd:01:ab:f2:0b:8f:1f:c0:6d:c5:43:
ac:30:ba:fc:7f:c9:2f:25:fc:4b:8a:f0:31:71:89:10:af:8c:
2a:c9:b9:d1:20:e9:dc:6e:4f:bc:2f:cb:75:48:fb:ed:27:32:
1d:92:56:ca:23:0b:8b:ce:88:72:45:15:e9:19:4d:0d:21:e4:
fb:70:15:db:65:90:4f:45:b9:d1:38:6e:f0:d3:5c:4f:3e:99:
a0:2f:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:37:19 2025 by rpki-client