Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/UVlXhuX0bvgC_P179eV7Q7dV3kQ.roa
File: UVlXhuX0bvgC_P179eV7Q7dV3kQ.roa (raw, json)
Hash identifier: cem7+lm0BpjpPBzCYfd6RxOq5JUr1ids+UD9/WCyjSE=
Subject key identifier: 51:59:57:86:E5:F4:6E:F8:02:FC:FD:7B:F5:E5:7B:43:B7:55:DE:44
Certificate issuer: /CN=7da31ee9c989a6311a08ff232289978401415e91
Certificate serial: 019422FB9EA5DFD7DE03A69C85C0B9ACFDE4
Authority key identifier: 7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/UVlXhuX0bvgC_P179eV7Q7dV3kQ.roa
Signing time: Wed 01 Jan 2025 17:48:23 +0000
ROA not before: Wed 01 Jan 2025 17:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57778
IP address blocks: 185.126.44.0/24 maxlen: 24
185.126.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9e:a5:df:d7:de:03:a6:9c:85:c0:b9:ac:fd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da31ee9c989a6311a08ff232289978401415e91
Validity
Not Before: Jan 1 17:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51595786e5f46ef802fcfd7bf5e57b43b755de44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:df:ad:37:cc:1d:4c:a6:28:b2:b7:94:16:
c9:7b:1a:e8:41:90:b9:d0:9c:77:79:00:96:ff:14:
99:f2:32:05:ed:18:c2:4f:8a:fc:39:7e:2e:40:5c:
19:a7:84:d0:a6:b5:99:f9:e2:bb:b2:c2:cf:3c:0a:
ad:d0:1c:07:6f:3b:73:68:ba:d3:f6:79:6a:21:2b:
c2:83:e1:ac:0d:4a:8f:b8:32:3f:5d:12:9d:91:bb:
10:b3:8e:6a:13:6e:06:e8:01:fc:ab:9f:bc:b1:48:
77:0f:53:59:92:8e:6c:de:c7:2e:16:4b:3a:b1:25:
2b:7b:b9:d3:e2:8f:d0:2a:fa:05:4d:86:61:72:2e:
ac:94:79:73:f6:0d:5a:af:50:9b:7f:f3:8c:3d:5e:
ba:49:49:57:65:bf:32:bd:f4:81:fc:b9:20:5b:b8:
aa:bc:6e:02:ff:62:47:0b:be:5a:4b:ed:39:a2:0e:
ce:44:99:5e:ef:8f:b4:3e:7a:8f:b9:13:37:9c:be:
44:10:0d:93:59:57:80:88:cd:95:40:cb:8a:2f:c6:
5a:16:f4:45:6d:5f:a0:c4:12:ad:8c:77:66:07:83:
0c:7b:2d:1f:cd:91:3e:14:2d:f0:1c:76:dc:99:9d:
56:d1:02:36:c6:d2:59:b4:2b:10:c9:0d:13:71:26:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:59:57:86:E5:F4:6E:F8:02:FC:FD:7B:F5:E5:7B:43:B7:55:DE:44
X509v3 Authority Key Identifier:
keyid:7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/UVlXhuX0bvgC_P179eV7Q7dV3kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.44.0/23
Signature Algorithm: sha256WithRSAEncryption
33:07:d0:dc:0f:93:0c:3f:1b:36:e8:11:08:e7:1c:ba:18:91:
47:d2:c6:e5:76:cc:46:66:af:44:90:f5:e8:c2:41:8e:b5:35:
ca:91:60:cb:96:be:32:93:59:c2:11:2b:15:25:94:f6:7c:75:
d3:1c:32:d1:47:3e:a8:fc:b8:42:14:bf:60:69:91:64:86:1a:
c9:d2:2e:ae:db:f4:5c:c4:80:77:c4:90:47:35:1d:ac:57:ab:
91:46:09:16:f1:bb:53:7d:66:06:33:f4:c1:ab:5a:c2:a9:38:
40:58:12:14:d4:21:bf:0a:5a:c5:94:02:17:80:b2:97:44:a3:
52:07:fd:4c:48:c8:8c:e5:00:1f:ba:85:22:8c:7e:74:be:e4:
6b:8a:63:02:56:a0:0b:82:c0:21:97:5a:7d:b7:23:a3:75:ae:
0e:e7:44:e7:aa:37:b4:a8:b6:3c:b6:af:b9:8e:d9:74:47:85:
ac:cb:1a:ba:96:9b:a1:79:ea:f1:66:8a:b3:5c:77:4f:f5:34:
5d:ad:c7:38:20:2b:f4:93:de:ae:ae:94:2a:a8:65:8f:aa:da:
24:d6:73:a6:b3:a2:f3:f3:15:e4:8e:d7:4d:aa:13:b0:c7:2f:
65:b2:75:f1:6a:9d:0d:23:63:fb:7c:f6:82:4e:af:f2:14:31:
7c:96:23:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:02 2025 by rpki-client