Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/im_xjRz8P6HBxQJyvuA2N4KfaPQ.roa
File: im_xjRz8P6HBxQJyvuA2N4KfaPQ.roa (raw, json)
Hash identifier: PEZegDXuxI9++oLKtHN5JJ1N3bKD7cnT7mW6YuzzJI8=
Subject key identifier: 8A:6F:F1:8D:1C:FC:3F:A1:C1:C5:02:72:BE:E0:36:37:82:9F:68:F4
Certificate issuer: /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Certificate serial: 01942826EFDFE59E1D09900590414B68DBDB
Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/im_xjRz8P6HBxQJyvuA2N4KfaPQ.roa
Signing time: Thu 02 Jan 2025 17:53:47 +0000
ROA not before: Thu 02 Jan 2025 17:53:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203687
IP address blocks: 185.167.140.0/22 maxlen: 22
185.167.140.0/23 maxlen: 23
185.167.142.0/23 maxlen: 23
2a0b:6e00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:ef:df:e5:9e:1d:09:90:05:90:41:4b:68:db:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Validity
Not Before: Jan 2 17:53:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a6ff18d1cfc3fa1c1c50272bee03637829f68f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:cc:7d:55:6a:8a:0f:a4:f6:7f:f3:d1:bd:
96:05:2b:aa:27:a1:79:9c:16:82:1f:ea:6a:af:ae:
eb:82:90:48:03:f0:19:3a:23:c5:b5:64:fa:dd:b8:
ee:62:b1:21:76:00:e6:70:e2:b6:00:6c:37:43:c7:
62:fe:6d:ab:ca:0b:e8:57:a9:b7:89:af:e9:dd:61:
ca:d8:60:6f:65:9e:31:8c:10:81:a7:5f:4c:8b:dc:
1e:3c:ca:d6:64:b1:f4:09:2f:cf:8e:a8:ec:e1:51:
1c:1c:4b:4b:46:90:62:8a:b2:0c:9f:19:a7:d4:1e:
93:5d:40:3a:2d:6e:cd:8f:f5:10:40:fc:be:d4:6c:
6a:d0:d8:15:be:55:b1:97:53:03:da:30:04:51:eb:
fd:57:d6:b3:0c:ef:9a:5e:ae:9e:40:3c:ad:b4:d1:
1b:51:26:88:4b:01:d1:6e:fb:2d:d0:62:b6:8c:8b:
5f:56:d7:24:33:d9:20:08:10:af:f8:4d:84:60:d6:
8d:08:7c:09:b6:1d:31:ac:0e:c3:4d:51:9d:75:70:
ac:97:ef:99:22:af:a1:ed:a2:7d:4b:c1:58:8b:71:
8d:74:6a:22:b8:5f:1d:ae:d1:70:ce:d8:a6:b4:b8:
de:f6:36:90:0b:a5:77:44:a4:16:eb:07:32:7a:70:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6F:F1:8D:1C:FC:3F:A1:C1:C5:02:72:BE:E0:36:37:82:9F:68:F4
X509v3 Authority Key Identifier:
keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/im_xjRz8P6HBxQJyvuA2N4KfaPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.140.0/22
IPv6:
2a0b:6e00::/32
Signature Algorithm: sha256WithRSAEncryption
7b:85:c1:6c:a6:33:eb:a2:ae:64:5f:52:30:ed:9a:7b:a8:8a:
36:e7:57:6d:1a:18:f7:07:b7:1e:cf:d2:74:a6:2e:e0:a7:3c:
0e:55:ab:51:47:e5:00:7f:6b:a9:a4:79:4a:01:4b:3e:94:37:
bc:b3:ce:eb:3a:38:96:fb:62:0e:50:67:a9:b1:ac:6e:7b:ce:
1f:a8:18:83:30:5b:41:53:f6:36:31:8e:00:a8:05:72:65:3a:
44:b4:4c:c3:58:4c:a8:2f:f0:86:38:a2:71:52:19:62:e8:15:
3a:0d:3e:85:bf:e6:89:48:bf:b5:ad:e1:15:f5:65:d4:45:12:
ca:ff:96:87:f1:86:13:86:24:87:26:e3:7a:df:c4:73:f0:96:
1e:04:8b:93:db:7d:22:ad:7a:0d:4f:39:af:01:b8:ca:d9:0e:
6a:5f:aa:35:b7:06:ce:6d:c3:97:38:8e:79:ee:aa:7f:ce:44:
02:62:8f:cd:b3:b7:00:0a:4e:e8:53:79:2f:62:7a:17:7f:7c:
77:d3:b5:3a:06:77:e7:0d:f2:bf:7d:f6:11:4d:4b:77:d9:49:
60:59:4e:eb:72:28:b3:c2:02:c4:1b:d1:0e:04:8d:b0:96:f8:
92:34:73:24:e9:7d:76:24:3e:ff:43:33:90:00:c6:29:c7:b0:
c2:8c:9a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:00:55 2025 by rpki-client