Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa
File: 5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa (raw, json)
Hash identifier: ZuCvDvn0y3TKVlnUg7+MwjLLh4Hpu3o4dv6iNubePz8=
Subject key identifier: E6:EC:EE:FE:FE:60:4B:7B:A0:D2:83:2F:19:49:BC:FA:FE:CA:63:91
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 019424B28178472ABE2C303AEE820A25390A
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa
Signing time: Thu 02 Jan 2025 01:47:45 +0000
ROA not before: Thu 02 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9051
IP address blocks: 185.217.184.0/24 maxlen: 24
185.217.185.0/24 maxlen: 24
185.217.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:81:78:47:2a:be:2c:30:3a:ee:82:0a:25:39:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Jan 2 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6eceefefe604b7ba0d2832f1949bcfafeca6391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:3e:34:38:89:8b:d4:be:ee:13:da:28:f7:
1d:06:ec:7d:b8:b6:3e:e0:9e:d4:7d:7e:78:7b:80:
57:be:ba:74:16:24:52:ba:8b:20:e1:bf:1b:e8:86:
40:8d:0a:8c:a0:6f:df:66:a3:1b:d9:5d:e3:65:25:
52:f9:74:41:09:e7:bc:6f:60:5a:c9:a0:0d:52:8b:
46:0b:f4:8a:a5:e0:3b:d0:55:79:97:7f:25:2a:79:
b5:db:23:91:7e:00:5a:13:4b:e2:af:29:b0:d0:ed:
31:e0:3e:39:65:29:3e:24:52:0f:47:72:d6:91:4a:
97:bd:bf:4b:10:3d:23:9a:ac:3c:11:84:ad:fb:4f:
7b:58:8d:1f:16:24:ff:38:de:ab:b3:e1:8c:8e:4d:
ba:af:6d:7f:e8:b8:fc:bf:2d:14:36:d5:49:06:1a:
19:3b:b0:c1:f8:62:f3:7d:d2:f0:26:c5:0c:ff:11:
1f:12:38:f0:0c:ac:44:ce:36:d4:fc:64:2c:e1:f4:
2a:e8:63:2c:e3:48:2c:86:1c:61:ba:04:1b:70:8e:
f3:0d:31:b0:44:c6:ec:ca:c6:bb:c8:a0:0e:03:f1:
e8:83:23:7d:d3:55:f5:80:56:85:ef:ed:ac:7f:5e:
9e:49:70:ab:cc:fc:c7:1a:46:80:d3:1b:b6:1c:e0:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EC:EE:FE:FE:60:4B:7B:A0:D2:83:2F:19:49:BC:FA:FE:CA:63:91
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.184.0-185.217.186.255
Signature Algorithm: sha256WithRSAEncryption
42:da:46:00:c9:27:e9:e4:cb:30:83:8a:47:31:98:0d:45:e2:
6b:e4:75:8c:56:90:e1:3f:59:2b:a4:58:7f:8e:6d:09:5e:ad:
b3:de:79:61:1f:4b:d9:1c:27:04:11:db:0f:59:e8:6d:13:d2:
7c:83:e4:ec:2f:31:75:95:b9:de:36:1b:ff:87:d5:83:12:51:
4a:26:22:7f:0f:a6:e3:e7:95:ef:79:de:86:95:16:c9:a5:5f:
93:11:83:c0:1a:df:ee:93:78:b1:f6:85:4a:49:f5:b3:16:63:
9a:c4:15:e1:ed:45:bd:1b:56:a4:37:27:8d:4e:a6:bd:f4:6e:
30:86:e3:a4:d3:7d:32:c9:13:2a:38:2c:39:95:5f:0c:f5:aa:
4b:25:f9:61:09:da:71:e8:ee:1f:75:0a:df:6d:b3:3b:95:d1:
28:5d:6d:cd:4d:0a:44:97:06:d5:02:e4:16:db:45:09:bb:75:
02:ee:3c:aa:20:94:49:49:c3:ff:a1:32:2f:3f:9a:b4:53:5e:
3f:27:27:9f:71:f7:e3:81:2c:b7:78:01:f2:16:20:d5:57:3b:
b6:a8:88:4f:17:47:7a:5a:6b:ee:51:39:b6:63:26:ce:a9:b8:
78:14:4d:ad:3f:b9:9f:50:bd:00:08:5b:c7:20:64:2c:cd:d7:
cc:70:41:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:05:41 2025 by rpki-client