Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UipUtARcsaTQh491U-fbzL9FCPE.roa
File: UipUtARcsaTQh491U-fbzL9FCPE.roa (raw, json)
Hash identifier: 25S/OAZnugG8P7CvRhpT4FOe67+PM7nVGA00wLCV1SY=
Subject key identifier: 52:2A:54:B4:04:5C:B1:A4:D0:87:8F:75:53:E7:DB:CC:BF:45:08:F1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222031A393332228E70DAA5DE2A6DDE8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UipUtARcsaTQh491U-fbzL9FCPE.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 185.225.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:31:a3:93:33:22:28:e7:0d:aa:5d:e2:a6:dd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=522a54b4045cb1a4d0878f7553e7dbccbf4508f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:9a:90:c7:a1:63:b9:5b:38:bd:e0:8a:3e:
d7:ab:64:5e:86:8b:b9:3b:20:64:e1:48:ce:04:5d:
d1:d9:2f:cc:b5:e9:93:72:8f:65:18:af:8b:be:a8:
7c:14:78:88:35:d8:44:14:97:ba:1d:3a:8b:7a:64:
56:c2:24:c1:5b:ae:c6:f2:54:4a:4b:c3:86:0b:25:
66:f8:1b:38:f0:2b:7b:d2:2d:af:bb:0c:4a:d9:cf:
8e:0a:c9:97:4a:4f:54:c5:c9:d0:af:e9:22:e0:7d:
6e:ff:74:f1:3e:2a:f3:d3:91:46:f4:67:5e:fe:41:
94:42:72:8e:40:75:6e:13:59:f7:ba:f9:fc:d4:23:
4c:d3:e3:b0:09:01:31:fd:ef:4d:cd:2f:fa:85:9d:
8c:3e:7c:c8:54:39:65:18:e2:c3:c0:b8:67:37:37:
0f:d8:8b:0b:82:e0:dc:ce:5c:bb:d5:1f:b3:03:29:
fd:94:26:37:a2:c7:62:81:b6:37:93:2a:a3:d9:1c:
b1:8d:1b:c3:dd:19:3b:3f:85:37:43:ce:ed:f0:16:
a5:53:6a:0f:9c:e5:b1:a4:45:e4:13:08:87:e6:7a:
65:f0:7b:94:44:98:52:d3:f6:d9:18:f6:a5:64:20:
f8:1b:7b:87:02:38:ba:75:63:fe:54:75:7a:6b:c8:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2A:54:B4:04:5C:B1:A4:D0:87:8F:75:53:E7:DB:CC:BF:45:08:F1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UipUtARcsaTQh491U-fbzL9FCPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.1.0/24
Signature Algorithm: sha256WithRSAEncryption
92:04:93:45:fe:89:3b:26:27:bc:c5:c4:ee:2b:90:e0:9a:f6:
30:f4:57:e4:9a:98:37:f5:99:2f:de:42:5a:06:99:fc:c9:87:
12:d8:ed:88:1d:b4:52:65:2b:80:02:07:8c:b2:66:0e:90:9a:
a3:77:6b:3f:bd:fc:d4:1d:23:21:28:9c:39:7a:bb:61:1c:72:
37:fa:d6:e0:86:20:e1:fb:d2:c3:c2:80:c5:97:32:ec:71:aa:
f4:cf:69:9c:c2:48:d5:1e:7d:c3:cf:d8:24:d1:d2:6b:de:8e:
93:54:95:40:70:13:f2:03:fe:2e:fb:e1:b0:59:c8:a9:93:70:
e8:d4:41:93:59:7f:13:ee:d9:c8:57:bf:d2:ce:67:9c:c1:16:
89:d4:ed:74:ef:5a:c9:d6:e5:60:b2:53:9e:85:38:a6:40:05:
57:f1:87:69:bc:01:4d:64:9b:0d:4f:67:43:b3:12:5e:11:9b:
6b:a7:94:9b:ea:22:d0:1e:d1:17:89:cd:d8:4b:f6:19:70:cd:
8a:40:67:7a:f3:87:55:2d:12:76:71:21:05:63:b6:f9:98:3f:
8e:40:9a:11:5a:bd:96:00:4f:ab:0b:3e:05:27:04:0c:24:8f:
12:15:08:6c:54:5e:1e:9b:f1:a4:06:2e:02:96:d7:78:c7:80:
ea:2a:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:36 2025 by rpki-client