Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/u8kNkanORsDCeI7FqQBLJUQbyJw.roa
File: u8kNkanORsDCeI7FqQBLJUQbyJw.roa (raw, json)
Hash identifier: UqvKDmRhZ+jIbQfoF72uxEu+VLwPbUG7YO497EELblU=
Subject key identifier: BB:C9:0D:91:A9:CE:46:C0:C2:78:8E:C5:A9:00:4B:25:44:1B:C8:9C
Certificate issuer: /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial: 01942444A4C47946F063F4B4E2E882934288
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/u8kNkanORsDCeI7FqQBLJUQbyJw.roa
Signing time: Wed 01 Jan 2025 23:47:45 +0000
ROA not before: Wed 01 Jan 2025 23:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203039
IP address blocks: 185.153.52.0/24 maxlen: 24
213.134.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a4:c4:79:46:f0:63:f4:b4:e2:e8:82:93:42:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
Validity
Not Before: Jan 1 23:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbc90d91a9ce46c0c2788ec5a9004b25441bc89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:2b:03:da:4e:f2:d8:5a:e3:4e:21:53:28:
c6:2a:d7:34:a7:8d:40:1f:5c:8d:15:e2:47:4f:c7:
fc:e6:90:da:f0:45:8c:29:cc:2b:02:ae:39:0e:97:
3a:94:80:81:13:94:6d:a4:c0:16:e9:8a:ba:f9:0d:
78:e9:67:21:ed:64:fc:cf:94:e0:5b:83:18:9e:73:
9e:19:11:8e:49:09:d0:7c:dd:cc:b6:82:5c:58:45:
92:18:4e:c7:73:a7:52:37:da:61:ea:ac:c5:3a:28:
35:37:0d:e6:ee:af:1e:98:67:2b:5c:a2:b1:39:0c:
60:d5:cd:60:0c:93:99:37:af:ca:21:52:17:a6:a8:
39:25:18:06:6d:62:02:9b:e4:ba:19:e2:e9:c0:17:
f9:13:4e:85:f4:ca:f7:6f:fd:73:d6:cb:09:af:94:
0f:16:65:f1:78:79:bd:2d:1e:b5:1a:19:c0:46:11:
39:c3:2f:c3:1d:ac:ee:fa:38:98:cb:c3:05:91:e7:
69:28:04:54:25:6c:d4:13:1d:2c:39:5c:23:8b:62:
d2:5b:7f:60:b1:5f:e4:86:c5:af:a7:79:2e:99:d7:
5b:e7:4b:fd:60:7c:9c:be:7a:7f:97:0a:9a:e3:51:
c6:e0:96:ee:de:37:86:28:7d:6f:24:a6:0f:f6:25:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C9:0D:91:A9:CE:46:C0:C2:78:8E:C5:A9:00:4B:25:44:1B:C8:9C
X509v3 Authority Key Identifier:
keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/u8kNkanORsDCeI7FqQBLJUQbyJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.52.0/24
213.134.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7e:62:e1:5c:73:42:d8:a0:37:5d:ea:ce:18:48:6d:54:e4:
44:3b:9a:c6:03:33:87:55:a6:f2:dc:67:b9:27:39:76:9b:8a:
35:02:ff:98:18:1f:56:f2:a7:5a:9b:87:c7:f2:98:77:f0:44:
1f:d1:2c:58:31:bc:31:72:06:51:88:b7:17:69:03:0f:59:32:
48:39:df:71:77:9e:0e:a7:d6:f1:d5:38:7b:a5:d7:48:db:e4:
a4:be:82:ea:6c:a7:b0:91:df:f6:57:b7:35:53:be:2b:5e:d6:
18:21:32:ad:69:c3:a7:33:9a:91:90:b0:ef:f4:8a:d5:77:a2:
c1:93:d6:bc:a8:eb:11:75:d8:a9:ba:31:dc:eb:fc:ac:4c:f1:
e0:2b:01:4c:19:e7:85:5f:54:4c:49:bc:7a:6e:18:fe:35:93:
31:d9:08:d2:b5:bf:64:73:c6:93:e3:8e:25:6c:ca:1b:9d:81:
71:34:12:c1:6c:99:89:5f:98:2f:a3:b3:86:72:ad:81:54:e3:
35:85:24:e8:9e:8b:76:de:d0:37:7d:74:5a:0b:d3:ee:c5:d5:
92:18:0e:85:8e:17:18:3a:e9:64:f6:c9:82:15:f1:8d:1f:74:
5a:47:06:29:ef:f4:25:b4:1f:ee:9c:bc:d7:d2:24:e3:31:d0:
2c:92:70:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:30 2025 by rpki-client