Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/A2uDh-ZDpKG5zZjbYmYPv0BXkfs.roa
File: A2uDh-ZDpKG5zZjbYmYPv0BXkfs.roa (raw, json)
Hash identifier: YVpgdnu79jTGnOSIhM9WXwxc/TAyiy91T+UdGFojKfA=
Subject key identifier: 03:6B:83:87:E6:43:A4:A1:B9:CD:98:DB:62:66:0F:BF:40:57:91:FB
Certificate issuer: /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Certificate serial: 019424B2882469F2B129B904B41A14CD61B1
Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/A2uDh-ZDpKG5zZjbYmYPv0BXkfs.roa
Signing time: Thu 02 Jan 2025 01:47:47 +0000
ROA not before: Thu 02 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202075
IP address blocks: 185.50.172.0/22 maxlen: 22
185.50.172.0/23 maxlen: 23
185.50.174.0/23 maxlen: 23
2a04:be80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:88:24:69:f2:b1:29:b9:04:b4:1a:14:cd:61:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Validity
Not Before: Jan 2 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=036b8387e643a4a1b9cd98db62660fbf405791fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:47:bd:f2:ea:02:25:0a:30:50:26:19:2b:
e3:01:9c:6e:10:83:77:35:87:45:9a:80:06:a4:87:
11:6f:77:37:cc:f3:3a:c0:30:fd:09:e9:a4:fb:4d:
f6:35:3c:28:27:21:d4:69:3a:2e:47:5b:01:67:86:
f9:6e:0a:22:fe:cb:b2:7a:10:9f:dd:ef:69:62:71:
87:fd:e9:20:6b:3c:03:88:64:ab:6e:97:e5:6d:4a:
58:88:d9:27:ef:0f:49:3c:5a:0a:91:bd:84:bd:6a:
c1:ef:1a:c8:0e:30:9c:54:ad:18:c9:7f:01:c9:37:
57:d9:81:1a:cb:e0:c9:47:f1:c7:c8:b1:59:3c:5d:
27:e6:3a:60:b9:7f:79:f7:61:c5:ce:11:50:00:bf:
4a:72:df:07:07:ee:4f:35:a3:fd:07:24:7a:84:de:
35:03:e6:12:7c:9d:42:7b:96:8e:29:ad:3a:6b:b3:
56:56:32:07:70:2e:7f:37:44:78:a7:0a:f0:f5:f9:
08:6b:09:24:78:60:b3:9a:73:04:34:4f:62:2c:80:
2d:af:38:b2:1b:a6:13:f0:e6:24:f8:53:a0:97:e6:
58:64:9e:c7:f9:0c:55:f7:af:0e:f7:78:69:a3:82:
c6:72:99:28:e7:8c:63:18:3d:ac:8f:12:18:e2:9c:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6B:83:87:E6:43:A4:A1:B9:CD:98:DB:62:66:0F:BF:40:57:91:FB
X509v3 Authority Key Identifier:
keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/A2uDh-ZDpKG5zZjbYmYPv0BXkfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.172.0/22
IPv6:
2a04:be80::/29
Signature Algorithm: sha256WithRSAEncryption
69:35:28:34:c1:07:5e:b6:81:4a:63:04:40:ea:92:a2:63:d4:
49:87:73:1f:42:42:2f:26:08:fb:ed:56:73:40:5b:1c:7b:d2:
4e:04:b2:17:38:17:84:fe:b1:75:db:1c:ca:06:13:db:0b:f1:
4f:43:ac:34:3c:00:f3:6c:88:eb:40:1c:dc:66:29:22:33:c6:
fe:0d:16:7e:05:a6:7e:e9:79:20:41:cc:10:01:27:cb:a5:dc:
a3:15:4a:0a:43:9c:97:4b:ec:6d:a6:0b:43:88:29:a2:34:28:
3d:20:a0:73:2c:8b:c0:cd:db:90:b0:b1:ed:6d:c5:4a:cb:d2:
0b:4e:da:c1:02:1b:ba:3b:10:4a:d3:c9:78:99:18:76:e9:ad:
56:81:f2:0c:b1:31:3c:c9:ec:f3:e3:65:68:e3:db:9c:69:a7:
83:8a:27:cd:a5:94:ec:1c:ca:38:b9:16:17:93:31:13:ef:fd:
3b:a7:1b:a5:88:cf:20:5b:19:e1:d2:9f:74:02:fd:9c:39:29:
77:ef:c7:1c:78:38:d8:7c:60:46:7f:7a:cc:89:39:e3:d3:1e:
af:f3:7f:13:33:a2:57:24:2d:a5:08:e8:af:f7:2e:7a:c0:6a:
06:8d:c8:6d:9d:17:b0:84:68:9b:1d:42:ea:68:cf:51:82:a7:
bb:cb:3d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:26:41 2025 by rpki-client