Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/Uv3JwVQ6qmZXz-KzsQGMat5fy64.roa
File: Uv3JwVQ6qmZXz-KzsQGMat5fy64.roa (raw, json)
Hash identifier: KmeqC7qJ5pr9JdG5IMPDKnlb1123tAE+TD1n+lvaaWk=
Subject key identifier: 52:FD:C9:C1:54:3A:AA:66:57:CF:E2:B3:B1:01:8C:6A:DE:5F:CB:AE
Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial: 019427B5D0E43BCF6BE3BEAD54790C5AAA2A
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/Uv3JwVQ6qmZXz-KzsQGMat5fy64.roa
Signing time: Thu 02 Jan 2025 15:50:14 +0000
ROA not before: Thu 02 Jan 2025 15:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39563
IP address blocks: 85.8.131.0/24 maxlen: 24
185.80.8.0/22 maxlen: 24
185.231.16.0/24 maxlen: 24
185.231.17.0/24 maxlen: 24
185.231.18.0/24 maxlen: 24
185.231.19.0/24 maxlen: 24
2a0c:3900::/29 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d0:e4:3b:cf:6b:e3:be:ad:54:79:0c:5a:aa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Validity
Not Before: Jan 2 15:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52fdc9c1543aaa6657cfe2b3b1018c6ade5fcbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:a6:fb:67:04:d0:0b:b9:bf:c4:53:7b:66:
f6:d4:e3:f2:43:97:3d:d3:b7:2c:b5:53:7b:dc:1f:
61:cc:88:69:2f:f5:5b:c2:36:a7:ad:1a:ca:0c:87:
ac:1e:73:d0:04:3e:9f:cf:8f:ec:1e:8a:9c:55:ed:
ef:75:84:e0:ca:1a:53:c3:ce:f8:fa:3d:0e:25:a6:
58:88:db:82:24:20:c9:98:27:d8:86:bd:5f:3c:3b:
ee:3c:d5:3e:f7:a8:81:ed:e9:9a:b5:fa:00:74:40:
1f:09:60:3c:0f:bb:85:53:c8:39:6e:58:46:f2:f1:
58:43:ee:dc:54:6e:65:91:93:6c:48:59:3b:c8:91:
05:0f:1b:ce:d3:19:31:26:1d:2b:05:6f:73:bf:3b:
71:2d:41:9b:2f:80:ee:2c:14:68:25:62:76:a8:52:
aa:e2:d5:7b:ce:f3:f2:81:9b:b1:e0:3e:c5:37:65:
8d:b2:c0:30:bd:8d:c6:43:c9:93:d8:73:58:58:92:
d2:2b:8a:a8:56:ef:fe:33:fc:ad:fa:4e:89:69:cd:
b4:6b:1f:ea:71:9f:0f:1f:16:e3:45:a6:62:e2:22:
47:72:0d:c6:8c:ee:05:88:a2:6d:26:c7:88:42:c0:
6e:05:b8:a6:f2:0e:12:45:9d:6a:44:0c:99:43:a7:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FD:C9:C1:54:3A:AA:66:57:CF:E2:B3:B1:01:8C:6A:DE:5F:CB:AE
X509v3 Authority Key Identifier:
keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/Uv3JwVQ6qmZXz-KzsQGMat5fy64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.131.0/24
185.80.8.0/22
185.231.16.0/22
IPv6:
2a0c:3900::/29
Signature Algorithm: sha256WithRSAEncryption
6e:de:de:d9:aa:d2:d6:17:cc:e4:86:4c:3a:b5:95:eb:3d:1c:
de:d3:b2:04:f7:48:23:75:b6:97:a4:35:d8:67:99:f8:ff:14:
e5:98:b8:2b:a8:ca:9c:91:62:74:68:3b:d3:3e:dd:40:c9:78:
72:74:5a:b3:e4:b0:4e:cd:a5:4a:ac:9a:6a:8e:f6:5b:9c:59:
c6:9f:a1:fe:40:00:fa:c3:2c:88:d5:11:bc:c0:30:fd:7c:2c:
aa:6b:a1:22:24:1a:4a:c9:02:49:9c:e5:b6:a4:9c:bc:78:94:
3c:7e:e7:4a:38:87:64:59:31:e9:fa:2f:f7:37:e8:ee:28:b7:
55:b6:fa:4d:5e:63:14:4b:62:ef:2e:c5:2b:f7:3a:7d:ad:9c:
50:49:97:0e:1a:fd:ab:08:dc:2d:2e:a4:dc:f1:f6:4b:94:60:
30:53:4b:64:59:f8:ca:3a:23:96:29:24:10:35:02:d5:1c:cf:
4f:7c:7f:0c:49:9f:6f:75:88:a5:11:c5:69:9f:35:dc:a6:b7:
50:87:d6:e9:a8:20:07:ca:c4:bd:cb:10:3f:46:e8:2b:f2:3a:
c8:68:83:b7:75:54:4f:00:95:26:ac:08:eb:4c:d4:9f:a1:c3:
af:95:d0:a0:6d:9d:c5:95:61:d0:5f:c1:4f:96:7b:26:85:6c:
02:f9:ae:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:38 2025 by rpki-client