Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/UITBZGotoEJu7VXUeHnQEpzUh80.roa
File: UITBZGotoEJu7VXUeHnQEpzUh80.roa (raw, json)
Hash identifier: +4A8vS2ImMKHLoBNzMFALbXMy6VYqIeTofj/Zphvx9I=
Subject key identifier: 50:84:C1:64:6A:2D:A0:42:6E:ED:55:D4:78:79:D0:12:9C:D4:87:CD
Certificate issuer: /CN=68bd39d793125c684dff272f88622bac432180f0
Certificate serial: 01942143E97B83AB681E6EBEF22129E36E72
Authority key identifier: 68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/UITBZGotoEJu7VXUeHnQEpzUh80.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197650
IP address blocks: 62.102.152.0/21 maxlen: 21
185.30.112.0/24 maxlen: 24
185.30.113.0/24 maxlen: 24
185.30.114.0/24 maxlen: 24
185.30.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e9:7b:83:ab:68:1e:6e:be:f2:21:29:e3:6e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd39d793125c684dff272f88622bac432180f0
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5084c1646a2da0426eed55d47879d0129cd487cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:0e:1f:69:0f:48:9f:b3:44:50:cf:cf:04:
2d:3a:54:de:5c:56:61:9d:a6:85:9c:d0:12:60:1e:
1c:67:87:ac:bb:a7:0b:a5:6d:c9:31:f0:67:98:c7:
b4:fd:c5:bf:1a:f6:90:9d:6a:5b:b3:ff:4b:ef:ea:
d3:14:78:bc:85:48:e6:34:02:46:6e:b2:09:a8:b6:
bc:8c:35:1d:f4:16:e4:4a:70:10:a1:57:82:1d:31:
3c:1a:03:82:1e:d8:c9:44:cf:74:24:8a:f9:8b:ee:
43:47:20:8d:f9:ea:9f:d8:96:91:5b:6e:f9:44:2b:
b2:ba:12:2f:e2:25:b3:3a:63:8a:d9:c8:ad:d7:fd:
84:97:52:6b:5d:bc:ed:9b:46:d7:c4:7b:0b:8c:0a:
86:ea:2e:e9:40:65:c1:76:92:77:ff:0f:4c:41:36:
4a:60:ae:eb:6c:fa:1c:33:a7:2b:20:45:cf:8b:ee:
06:2e:1d:37:66:f5:fe:df:6e:06:e8:46:aa:16:c1:
44:3b:82:19:b6:e3:00:ba:7e:96:38:6a:d6:70:e2:
c5:1b:03:12:1b:0e:20:5d:f5:4a:5c:95:8f:f5:f8:
5f:63:2e:a1:07:f0:2a:cf:25:a5:2c:97:d8:76:70:
ca:48:5f:e2:9f:b3:a3:d1:77:ec:42:56:0e:5f:60:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:84:C1:64:6A:2D:A0:42:6E:ED:55:D4:78:79:D0:12:9C:D4:87:CD
X509v3 Authority Key Identifier:
keyid:68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/UITBZGotoEJu7VXUeHnQEpzUh80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.152.0/21
185.30.112.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:c3:20:2e:e7:1e:28:28:70:48:c1:92:1d:27:0c:cd:a9:b1:
b8:99:7f:d4:bf:fc:f0:6f:c0:62:2f:21:b6:7e:e3:8f:b9:41:
4f:45:c5:68:06:00:98:e9:b8:78:0e:05:1d:ea:e9:33:e7:d3:
7e:37:5c:fe:97:9b:4a:b9:2d:fe:e8:79:85:1d:5f:0b:a5:c0:
5c:1f:a1:1d:39:50:4e:6a:6c:c3:f2:00:b0:47:6b:07:d8:9e:
78:49:1a:90:19:d4:74:d1:cf:40:08:c5:1c:2a:c7:cf:c4:88:
81:e5:66:6a:9f:ef:7e:31:be:94:e6:d9:2b:51:ee:95:05:ae:
6f:d2:6c:1e:02:9e:cd:ed:4d:da:38:34:f1:19:08:64:38:20:
30:df:14:4b:83:80:23:af:d6:21:b4:ab:78:02:29:59:24:25:
8b:ab:1d:af:ad:be:25:16:b6:47:6d:54:c0:d7:ab:8e:69:9f:
78:cf:dc:29:e1:b6:c4:c8:ac:cd:3a:15:ea:e1:a9:85:14:f3:
cf:e7:19:f4:31:e3:71:6f:78:50:f8:2a:a1:e7:b9:4c:57:55:
0c:98:5d:b2:42:4c:45:29:29:a5:91:2b:fa:57:15:b0:e3:9f:
9f:b5:91:fd:8a:bc:26:82:24:c4:37:73:40:13:ca:5f:c1:a1:
58:47:4a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:39 2025 by rpki-client