Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/uNHn3nGofmcHl4lM7HkivQe_5zI.roa
File: uNHn3nGofmcHl4lM7HkivQe_5zI.roa (raw, json)
Hash identifier: P5wPJ1eLs+Pe8c3zQ6YiOWLNnnfuv2xAEXiikikIGBQ=
Subject key identifier: B8:D1:E7:DE:71:A8:7E:67:07:97:89:4C:EC:79:22:BD:07:BF:E7:32
Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial: 0194258F1EF6E07F66470C936E27B21037D9
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/uNHn3nGofmcHl4lM7HkivQe_5zI.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201014
IP address blocks: 185.88.224.0/22 maxlen: 22
2a05:cf00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:1e:f6:e0:7f:66:47:0c:93:6e:27:b2:10:37:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8d1e7de71a87e670797894cec7922bd07bfe732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:42:a7:06:e5:41:1a:1f:3b:8e:d1:f2:c0:63:
87:79:d2:89:d4:c3:8f:50:ae:0f:47:5a:dd:37:37:
1d:71:20:a2:db:85:f0:2b:85:76:0d:44:86:a0:48:
26:10:80:91:d1:cc:dc:cc:3e:24:e5:ea:6d:fa:ba:
ce:f4:28:6f:49:75:31:73:55:40:d1:fe:87:4e:82:
0a:a0:5a:b6:99:9d:79:c0:34:ee:b1:5a:42:73:45:
29:1f:c7:d3:5e:52:7e:1f:c0:b0:09:c9:85:30:b4:
fc:91:88:4f:19:61:19:19:24:eb:aa:eb:9b:b1:a4:
28:ed:19:eb:7d:4a:44:10:89:23:0c:f7:27:d7:6e:
b0:19:d3:8f:6f:08:c7:d4:0b:57:ac:5c:a2:db:04:
26:2f:d7:c6:d3:05:fc:1b:dc:d5:fb:14:94:de:b8:
a0:d1:b7:50:66:2c:bd:fa:10:d2:98:d2:45:1a:48:
98:fc:ee:7f:d7:8d:4f:26:44:d3:04:83:ad:23:1e:
e2:13:2f:1e:51:8f:fb:6d:2a:21:d6:04:0f:4d:33:
e6:74:2b:75:19:73:44:13:7e:61:12:5d:66:ce:0d:
f6:90:9e:e5:fd:e3:84:a3:c9:f8:a8:55:a6:f7:81:
6a:06:26:cb:ab:e7:90:39:ad:0d:dc:88:1e:17:34:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D1:E7:DE:71:A8:7E:67:07:97:89:4C:EC:79:22:BD:07:BF:E7:32
X509v3 Authority Key Identifier:
keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/uNHn3nGofmcHl4lM7HkivQe_5zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.224.0/22
IPv6:
2a05:cf00::/29
Signature Algorithm: sha256WithRSAEncryption
26:43:12:2f:f2:1a:b0:c4:64:2b:df:59:c4:e8:3d:70:fa:c1:
80:d4:e5:cb:fd:18:62:16:71:fa:92:f4:e2:81:d5:e1:c8:4c:
ba:dd:cd:00:f4:0b:71:b6:9a:ac:d2:44:c1:3c:72:9d:5b:ba:
e3:90:bd:d5:83:ac:bc:4a:e6:d0:26:33:e2:4d:03:cc:3e:0b:
fe:61:bc:3b:97:45:ad:65:0a:13:30:6f:44:e7:7a:bb:43:b2:
86:8d:ec:61:57:31:7e:23:df:31:f7:80:4d:56:5a:22:8c:5e:
98:27:74:79:d3:ed:7f:58:08:5f:52:15:32:a4:78:db:5f:4a:
40:e2:bd:22:75:12:53:62:46:a0:2a:bd:da:49:9e:70:ae:ff:
24:8c:6c:0a:4d:dd:66:16:97:c2:1f:c5:6d:bf:cc:b2:0b:23:
3e:9d:a7:9f:0d:53:2b:ae:df:01:a8:78:f7:a6:83:ec:d4:4a:
37:08:c6:7c:f3:f4:ed:03:9d:c9:94:33:b9:ef:0c:48:b1:ea:
13:70:ed:b8:8a:de:35:a7:c1:cc:8a:b4:87:3a:7d:82:27:b9:
6b:89:4e:5c:7d:aa:3d:ec:d4:89:59:dc:bf:33:94:8c:be:00:
c7:bd:40:c9:44:b2:2a:b3:5d:61:35:28:b8:13:df:1b:d5:10:
0c:b3:b6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:06 2025 by rpki-client