Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/_UFtjPZkJY8PTrDfIiY7fIJkM78.roa
File: _UFtjPZkJY8PTrDfIiY7fIJkM78.roa (raw, json)
Hash identifier: 8nSnhnVWRfLLWBF2I/d3mZE5/5hk3aPfKW0pXvBb3bk=
Subject key identifier: FD:41:6D:8C:F6:64:25:8F:0F:4E:B0:DF:22:26:3B:7C:82:64:33:BF
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 019427478EF4F975E2139EDDC7280DDEBFAB
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/_UFtjPZkJY8PTrDfIiY7fIJkM78.roa
Signing time: Thu 02 Jan 2025 13:49:48 +0000
ROA not before: Thu 02 Jan 2025 13:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20612
IP address blocks: 185.222.12.0/22 maxlen: 24
194.242.34.0/24 maxlen: 24
2001:67c:20ac::/48 maxlen: 48
2a0c:d000::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:8e:f4:f9:75:e2:13:9e:dd:c7:28:0d:de:bf:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Jan 2 13:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd416d8cf664258f0f4eb0df22263b7c826433bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:85:49:09:2d:78:8a:99:ed:71:da:88:23:
49:0a:af:1b:72:d8:57:82:2a:2f:19:af:ac:5e:ee:
58:7a:55:4f:57:c7:e9:04:97:26:c4:5d:d4:85:92:
dd:70:76:8a:f6:74:de:b2:10:79:cc:c3:00:ab:be:
d2:3d:d5:41:a1:2c:aa:fc:92:cd:ec:9d:d9:59:f4:
cf:30:87:86:da:03:f6:7d:b1:66:a7:9d:7d:67:ce:
9a:d3:eb:d0:14:4f:a1:6c:eb:c1:05:ed:35:1c:bd:
fa:e3:ed:7b:dc:c3:76:85:85:f7:65:fa:eb:6b:4d:
0b:fd:c3:b5:0a:94:8e:ff:dc:58:bc:c6:c5:41:b4:
2c:4e:f0:e6:11:42:82:79:d8:41:6e:5a:68:7a:bb:
3b:5d:22:dd:04:77:c8:c8:63:ae:d8:67:7c:4b:35:
9d:47:ce:4d:82:86:9b:6a:84:e0:1a:6f:63:52:70:
ac:90:23:23:1b:d5:c3:47:c9:e5:fd:f7:a1:ff:5b:
99:0c:72:f8:f7:a7:f0:e8:06:02:97:71:9e:7b:e3:
37:c7:a6:be:6e:dc:48:be:28:d8:4e:15:8f:8b:36:
eb:31:11:c4:72:ab:38:c6:35:9c:23:92:30:48:ef:
55:eb:57:6a:17:a4:43:18:31:95:58:3a:aa:2d:e1:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:41:6D:8C:F6:64:25:8F:0F:4E:B0:DF:22:26:3B:7C:82:64:33:BF
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/_UFtjPZkJY8PTrDfIiY7fIJkM78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.12.0/22
194.242.34.0/24
IPv6:
2001:67c:20ac::/48
2a0c:d000::/29
Signature Algorithm: sha256WithRSAEncryption
86:cb:69:79:29:9e:0d:56:cd:7a:1a:47:c3:0a:ae:b5:69:f7:
76:18:58:fc:3c:a6:b8:27:1c:69:4b:75:00:74:e4:c0:b5:f2:
93:fd:c6:79:8b:84:c7:dd:aa:6c:f4:a6:bd:00:e7:ad:79:2a:
a4:24:32:30:db:8f:a6:8a:52:f9:72:b2:24:a1:2a:5b:6d:5a:
23:d5:ba:db:82:a5:b8:20:9f:78:a1:88:e7:c5:18:a8:ab:d9:
ac:7f:26:15:d2:d0:81:3a:44:a8:32:a4:b5:34:5b:58:8e:90:
b6:a4:2b:4f:95:0d:0b:4f:4b:be:e9:6a:20:2e:63:38:79:00:
ed:72:2b:6e:49:05:9e:82:b6:4c:23:95:f8:86:90:f1:54:4f:
ad:c3:e9:16:14:84:91:4a:a3:21:17:4a:71:1a:f0:7a:8c:8d:
35:81:91:10:a3:17:95:e3:25:0e:9c:03:ed:d8:7b:a2:2b:2a:
33:b8:97:5f:7f:53:51:7c:cd:52:d4:6f:7c:b9:28:78:16:5d:
8a:3f:af:d3:31:6a:79:31:d0:9e:40:18:f5:ac:88:a1:30:be:
74:6d:e4:09:47:db:6f:5a:3d:6d:20:6d:43:e0:13:fd:ce:75:
fd:81:cc:d3:0b:3c:c7:2a:93:e6:85:4b:c7:af:35:d4:87:53:
f7:29:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:48:02 2025 by rpki-client