Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/a-uHBOpyzdK3zVYDOg8UIHN03yU.roa
File: a-uHBOpyzdK3zVYDOg8UIHN03yU.roa (raw, json)
Hash identifier: H9wzL/UUxJZ81Fk0wfS9+Uygz3BeNpB4M/N5om2Y4dg=
Subject key identifier: 6B:EB:87:04:EA:72:CD:D2:B7:CD:56:03:3A:0F:14:20:73:74:DF:25
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 0194258F1A4B1105393BA5B37C727027F1FF
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/a-uHBOpyzdK3zVYDOg8UIHN03yU.roa
Signing time: Thu 02 Jan 2025 05:48:42 +0000
ROA not before: Thu 02 Jan 2025 05:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60284
IP address blocks: 178.238.0.0/22 maxlen: 24
193.9.27.0/24 maxlen: 24
193.135.96.0/22 maxlen: 24
193.135.99.0/24 maxlen: 32
193.228.197.0/24 maxlen: 24
193.228.198.0/24 maxlen: 24
2a13:a200::/29 maxlen: 48
2a13:a200::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:1a:4b:11:05:39:3b:a5:b3:7c:72:70:27:f1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Jan 2 05:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6beb8704ea72cdd2b7cd56033a0f14207374df25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:e9:15:fd:ea:13:a8:05:ee:76:a9:b0:57:
a3:92:74:1b:58:f7:a4:62:78:15:18:9f:e3:a0:c0:
d8:40:2a:b3:56:a0:4d:5a:ad:3a:a8:74:69:d4:7d:
79:0b:b9:12:bf:54:f2:ff:6f:e4:9c:09:4a:8c:86:
97:6b:7e:1e:af:12:7f:46:5f:a3:79:50:e3:0d:a4:
fd:14:ab:db:60:45:c2:a4:f9:47:cd:51:68:bf:76:
ee:9d:eb:24:d2:8f:94:8d:c9:c3:ea:3e:59:b6:12:
dc:af:0e:d1:b8:32:9d:49:18:30:53:9d:9b:08:ed:
e1:99:4b:40:9c:2d:d3:3f:66:5b:5b:a7:c8:3a:88:
0e:b7:3d:bc:45:a2:6b:bd:f7:84:17:e6:6a:1f:c4:
43:04:4b:a6:5e:63:41:5f:a4:97:7e:57:93:cf:1d:
b6:79:63:c5:56:27:ee:d6:0e:25:69:b4:8c:b6:79:
41:b6:48:5f:99:17:cd:10:8f:77:5c:75:cc:06:e7:
30:9f:05:54:a2:3b:e6:eb:a7:5c:54:fb:d9:a6:b4:
95:06:4e:a1:e5:4a:90:db:2c:9c:93:11:2d:c4:fd:
8e:23:83:63:a9:ec:54:09:cb:05:10:f6:45:e3:8f:
31:27:36:a8:eb:ac:73:d7:27:5a:01:f1:57:5f:a8:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EB:87:04:EA:72:CD:D2:B7:CD:56:03:3A:0F:14:20:73:74:DF:25
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/a-uHBOpyzdK3zVYDOg8UIHN03yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.238.0.0/22
193.9.27.0/24
193.135.96.0/22
193.228.197.0-193.228.198.255
IPv6:
2a13:a200::/29
Signature Algorithm: sha256WithRSAEncryption
39:1b:3e:1a:70:78:89:df:7f:32:70:0c:e2:dd:ae:fd:32:82:
3d:88:f5:85:83:bb:be:b3:9a:91:e7:e1:e5:43:69:2c:2f:d5:
e0:3a:29:4b:47:79:75:c2:47:c8:14:b4:b7:69:8d:b0:5a:26:
07:f1:1e:7a:4c:74:7f:00:23:5f:a0:95:f5:32:4a:a2:d2:d8:
c8:f3:07:a0:99:62:d4:b0:69:59:5b:f2:a2:30:3d:a7:cd:a3:
c2:e9:9a:d9:1b:86:d3:80:8e:3c:c0:94:08:ca:d0:9f:f4:67:
14:62:ff:77:9a:1e:63:f0:5c:a2:bf:b8:11:03:99:e5:cf:04:
d7:ac:80:66:c0:80:fa:9d:99:eb:8d:70:56:5d:15:42:e7:0d:
bb:3e:8b:93:b3:93:51:51:6e:a7:8f:77:7b:41:9f:58:b3:b3:
82:3b:d2:ec:97:b0:d0:96:da:a8:b8:6a:c8:e7:55:91:c0:b1:
05:6b:4c:e0:10:91:c6:82:a5:8c:dd:e1:5e:9f:63:f8:a7:82:
f5:ef:b6:2b:6a:26:9f:f4:f4:ee:ba:63:98:8a:78:9c:08:e2:
c3:4b:53:23:fe:fe:4a:da:15:43:4f:11:96:2f:bf:da:cc:2f:
af:08:30:f4:50:3c:1c:27:08:43:00:c8:28:d2:b3:d3:c1:e4:
96:af:6f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:33 2025 by rpki-client