Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/uRbDK03eXvXuybDY6ySDPk2j8jw.roa
File: uRbDK03eXvXuybDY6ySDPk2j8jw.roa (raw, json)
Hash identifier: B7oHGHMZn6dcANuLv7P1ig3TcmZcB2OnwrCmsBplg3A=
Subject key identifier: B9:16:C3:2B:4D:DE:5E:F5:EE:C9:B0:D8:EB:24:83:3E:4D:A3:F2:3C
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA74D77185012191AC7EF6E8E5F5BC
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/uRbDK03eXvXuybDY6ySDPk2j8jw.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61256
IP address blocks: 82.160.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:74:d7:71:85:01:21:91:ac:7e:f6:e8:e5:f5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b916c32b4dde5ef5eec9b0d8eb24833e4da3f23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:f6:ee:74:9c:42:22:c2:5a:00:4a:4e:7a:
05:fc:0c:26:69:5a:21:16:d2:8a:31:64:6f:1d:36:
26:a0:e8:2a:49:2c:a7:c8:e7:44:a2:8c:86:bf:67:
48:25:97:ab:87:2e:d2:ee:8f:71:40:09:b5:dc:4e:
da:ec:82:4d:0e:ac:4e:d9:ec:42:57:b0:f7:88:71:
4e:de:3b:17:6c:25:23:47:3c:04:7a:7b:60:53:e0:
da:88:39:30:2a:e1:0a:04:2b:38:ab:5c:c8:04:86:
ce:85:8f:3a:30:a4:f3:11:78:4c:83:c3:bf:d7:43:
3b:bc:b1:e4:10:b4:b0:f2:7d:7c:34:4e:04:65:7a:
35:1e:44:10:f9:2f:27:97:0f:6c:8e:90:35:0d:3b:
e6:24:1e:13:cb:9d:b3:9a:df:02:4a:a7:8c:4f:4e:
ab:2b:2e:78:f3:46:32:b8:cc:a5:6f:3e:c9:0f:54:
0b:ba:10:a3:73:03:d5:51:8c:a4:61:de:76:3e:35:
a1:86:ef:8c:d2:ed:22:c5:1d:7e:c4:ee:08:04:11:
09:c9:4b:f3:2e:73:89:aa:ae:94:b9:1f:96:e0:b6:
d5:1d:e0:24:1d:24:35:26:1f:7b:3e:ff:bd:ef:09:
51:53:2a:0b:95:92:ad:7e:80:b9:ff:b8:92:c4:a2:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:16:C3:2B:4D:DE:5E:F5:EE:C9:B0:D8:EB:24:83:3E:4D:A3:F2:3C
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/uRbDK03eXvXuybDY6ySDPk2j8jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.29.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f6:aa:a5:9d:85:09:0f:a1:46:0b:8d:c3:42:d6:3e:73:c4:
82:2c:18:f3:ea:6f:fc:cc:96:fe:6c:c1:02:ec:05:ad:8a:6d:
87:0c:af:76:5b:2a:0e:6e:c4:6d:8d:54:5c:7a:1c:ae:1d:d5:
06:9b:6b:c2:3f:fd:3f:f2:b1:cf:99:a5:ac:97:61:e2:6b:18:
b8:60:39:7e:ba:94:a2:43:73:7e:a5:4d:fe:1e:69:45:53:f1:
c2:93:e5:28:df:a9:46:e0:1a:a3:62:76:e6:6e:d6:d2:3d:e9:
de:01:b8:00:b2:d7:a9:33:c1:2f:b1:dc:a2:ec:c3:12:e8:a2:
eb:e6:a2:5c:59:5b:98:5e:93:91:95:f0:0d:f4:62:f1:b3:53:
ff:df:c0:75:d5:9e:af:9b:9c:05:80:a3:11:a4:75:e9:fa:ba:
72:cc:6d:2f:ac:6f:08:9e:3c:04:36:68:76:2e:66:14:32:96:
a4:bc:fe:c8:0d:9e:4c:d8:0c:79:45:d8:49:ec:23:5f:3b:b5:
d9:84:5d:db:6b:44:3b:de:98:08:98:1e:39:cd:f7:e9:12:c3:
1d:bf:a8:1b:46:39:7b:0f:b3:a7:13:12:71:c2:24:89:7e:72:
f3:63:9a:76:32:0f:73:5a:f3:7d:cb:3e:b4:ae:a8:26:8b:08:
a0:1f:8a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:20 2025 by rpki-client