Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/UipKreH4zZ-JKObDVFkMEdQTy8E.roa
File: UipKreH4zZ-JKObDVFkMEdQTy8E.roa (raw, json)
Hash identifier: 2lFb7AbIOkpByp+mzj8V6olwzUC3cjME2INFe+siQFg=
Subject key identifier: 52:2A:4A:AD:E1:F8:CD:9F:89:28:E6:C3:54:59:0C:11:D4:13:CB:C1
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 019425FDCD65836E0EB347D5D9109B62BD37
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/UipKreH4zZ-JKObDVFkMEdQTy8E.roa
Signing time: Thu 02 Jan 2025 07:49:37 +0000
ROA not before: Thu 02 Jan 2025 07:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199278
IP address blocks: 185.17.76.0/22 maxlen: 22
185.17.76.0/24 maxlen: 24
185.17.77.0/24 maxlen: 24
185.17.77.0/28 maxlen: 28
185.17.78.0/24 maxlen: 24
185.17.79.0/24 maxlen: 24
185.17.79.0/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cd:65:83:6e:0e:b3:47:d5:d9:10:9b:62:bd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=522a4aade1f8cd9f8928e6c354590c11d413cbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:8e:d0:ad:fe:af:7c:80:d2:30:7e:88:94:
a8:d6:e4:24:99:5b:76:05:a7:86:09:65:08:05:73:
fe:c0:0c:e1:5c:c3:d2:70:de:7b:a5:0e:16:f9:0a:
55:ac:c8:84:75:e4:a7:54:cd:13:50:db:83:86:f1:
84:81:fa:b7:19:43:5e:b8:9b:0b:d0:59:0f:77:1b:
a4:06:fd:a0:97:03:b6:49:e8:21:d6:98:68:81:bf:
d0:67:eb:fb:f9:f0:47:78:da:f4:1f:d6:9e:fb:7f:
35:86:37:58:fd:6f:48:bf:00:c2:ba:d8:2a:02:c4:
8a:92:e9:e0:0b:7c:37:a9:4c:14:a1:0a:44:4c:b2:
8d:b5:56:32:eb:4a:24:3f:00:33:ed:d0:55:0c:74:
7e:dc:08:db:c4:1c:bb:fc:a4:70:3b:a9:e7:15:3b:
6f:d7:c3:20:b0:f9:f6:00:8f:9e:1c:d9:03:e0:31:
91:ed:f2:e6:24:94:05:e8:e0:03:bf:b2:bb:db:b6:
a2:11:0e:19:39:89:5a:5e:76:c6:4b:3c:73:64:cf:
c7:99:3a:6a:fb:3d:d6:fa:2d:49:e4:eb:c1:4f:66:
e0:11:97:8c:b5:96:45:12:0f:55:27:9d:44:9b:7e:
e7:73:47:d7:f8:e4:77:a7:24:fa:f2:b7:e2:d7:fd:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2A:4A:AD:E1:F8:CD:9F:89:28:E6:C3:54:59:0C:11:D4:13:CB:C1
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/UipKreH4zZ-JKObDVFkMEdQTy8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.76.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:92:fd:45:9b:05:cd:b0:42:81:d1:9b:81:01:c0:f6:64:91:
1e:e1:b8:52:a9:5c:0a:14:2a:a9:77:f9:92:fb:eb:78:e3:ac:
25:5d:bf:2f:ef:d8:73:be:1a:9e:2c:f3:ee:f0:30:be:5a:23:
6a:4d:4f:3a:c7:2b:9d:71:ec:ec:79:e9:e5:3f:fa:65:7a:52:
a8:23:e1:7b:6e:5d:80:5f:10:8d:44:eb:5b:e6:65:9d:ab:20:
58:c2:8e:34:6f:3b:c8:02:f8:65:e4:8a:8a:1c:d7:40:27:a9:
14:17:08:de:39:7c:65:f3:15:69:87:b9:91:5a:ff:09:e6:67:
7c:f2:9b:9c:dd:c9:c1:43:77:c0:b7:1c:df:c8:76:23:c1:d5:
df:90:16:a0:b0:e7:f0:ad:8e:4e:e1:e2:cc:1c:12:03:d0:2d:
d9:51:05:9a:60:a9:9b:3e:10:ae:4b:28:80:e0:42:fb:3a:97:
1f:7c:d0:cd:9a:5f:3e:c0:0f:18:32:6c:4c:66:b1:c5:90:4e:
ad:ec:e4:aa:60:02:fe:7f:39:ee:15:bc:d8:c1:99:f2:a0:c8:
ce:a0:ba:8b:b5:e1:d1:0c:28:24:44:85:06:db:fc:b7:5a:3e:
85:bd:e4:6e:0e:37:90:0d:09:b7:78:53:b5:02:05:75:35:97:
57:e5:36:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:06 2025 by rpki-client