Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/Ulk603SVbOQAiKSzR_IZBatvpSU.roa
File: Ulk603SVbOQAiKSzR_IZBatvpSU.roa (raw, json)
Hash identifier: 1Gak7FJcv6XeZUXfgmGsLnHftg1ktwdBLJgL9CPQ7IA=
Subject key identifier: 52:59:3A:D3:74:95:6C:E4:00:88:A4:B3:47:F2:19:05:AB:6F:A5:25
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 01942747F1FFB5DB5EE32D5C63376CA4453A
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/Ulk603SVbOQAiKSzR_IZBatvpSU.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198102
IP address blocks: 185.211.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f1:ff:b5:db:5e:e3:2d:5c:63:37:6c:a4:45:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52593ad374956ce40088a4b347f21905ab6fa525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:fb:7c:08:e7:9f:71:5a:bc:31:6e:fc:8f:
62:35:81:28:b0:ff:8b:c3:21:bd:04:8c:9c:c7:63:
3c:af:eb:3c:1a:78:7a:18:76:fc:15:a6:34:e3:dc:
40:b2:ff:15:6d:f0:ac:20:1e:97:1d:57:e2:b1:bf:
0a:2b:a2:0a:db:9c:3a:0d:06:85:2f:71:4e:69:82:
ea:66:d2:df:56:15:95:28:d1:d3:5b:2a:2a:ab:4f:
b5:93:70:0b:dd:e7:89:60:86:3f:10:1c:3c:f7:93:
df:e3:f5:d9:16:b7:27:b8:a5:8a:c4:73:1b:7d:49:
01:3e:43:ab:f9:a8:30:c2:4a:5c:7d:5b:fa:58:01:
07:b5:c5:5d:02:28:b9:3d:27:65:91:1c:89:5c:9f:
da:59:c8:81:99:e3:9a:9b:2b:b4:09:3d:64:c4:49:
02:ee:c0:a0:03:7c:21:46:86:e6:3e:0d:4b:12:57:
16:ad:83:18:25:6a:fe:44:0d:20:59:fe:3e:0a:2e:
5f:f3:e6:f2:a1:cc:14:a4:ac:e1:d8:2e:46:fd:6a:
3b:b1:af:0b:98:dd:85:02:e2:5a:c3:94:f9:61:9d:
a6:cf:19:3f:d1:7a:9d:10:a9:4a:e8:bc:6f:da:c0:
6f:40:bb:28:d8:85:9e:84:9c:8e:9f:47:ce:88:b3:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:59:3A:D3:74:95:6C:E4:00:88:A4:B3:47:F2:19:05:AB:6F:A5:25
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/Ulk603SVbOQAiKSzR_IZBatvpSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.14.0/24
Signature Algorithm: sha256WithRSAEncryption
43:34:24:b7:88:41:1d:73:9b:0a:b9:dd:51:0b:11:6b:1f:89:
37:e7:0c:80:8a:9e:46:3b:45:ca:44:25:72:d9:da:fc:bf:4f:
60:e8:1f:5b:a7:64:c2:b4:6b:63:31:fb:3a:11:bb:23:4b:03:
90:a7:d6:5c:c9:31:a7:e1:2b:11:c2:37:43:7f:bd:5f:05:ca:
47:56:51:a4:06:39:90:98:60:ce:90:4b:54:fd:e0:e2:55:b4:
20:88:6f:6d:e5:6c:ac:e4:8e:1c:e9:f6:56:10:02:59:1a:96:
46:49:bb:f1:5a:8a:ac:b3:a4:5d:a5:5c:9f:f1:5f:6e:2e:6d:
21:d8:5e:64:b2:72:ca:a2:5a:76:80:19:b3:5a:97:7c:86:ab:
52:0b:96:5a:cf:e9:eb:a6:86:c3:76:ed:e7:dc:64:5c:ac:76:
9b:2c:49:ca:1c:a5:6d:0b:41:c5:6b:af:b5:8e:8d:11:c5:87:
c4:eb:63:69:0a:26:9c:c8:6a:d8:97:00:44:33:74:40:46:9a:
76:13:f5:3f:e9:30:1d:18:90:73:18:7f:27:15:04:bf:81:c9:
9f:cd:15:aa:80:0f:49:12:69:24:1a:13:b7:37:f1:4b:c9:1a:
6f:09:b0:99:d3:8a:83:01:ec:ba:e0:79:d1:0d:5b:37:b7:02:
76:7b:fb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:55:31 2025 by rpki-client