Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/umrbROcVD8F_XU1iMMOs7YeDor4.roa
File: umrbROcVD8F_XU1iMMOs7YeDor4.roa (raw, json)
Hash identifier: OZEW+D1b6/plYCkSsv4RF+haf9Cmn+tdLrcmbAbfFig=
Subject key identifier: BA:6A:DB:44:E7:15:0F:C1:7F:5D:4D:62:30:C3:AC:ED:87:83:A2:BE
Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial: 019427486783D3C1A85E6AC56844FED30D7A
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/umrbROcVD8F_XU1iMMOs7YeDor4.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39010
IP address blocks: 185.142.40.0/24 maxlen: 24
185.142.42.0/24 maxlen: 24
185.142.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:67:83:d3:c1:a8:5e:6a:c5:68:44:fe:d3:0d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba6adb44e7150fc17f5d4d6230c3aced8783a2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ea:6f:1a:7a:dc:b4:35:d4:cd:a5:53:d8:2c:
39:d0:5c:e6:73:bd:4c:b0:2a:c7:9b:72:3b:4c:c1:
4f:c9:0a:72:4d:a2:b2:31:75:5d:40:d1:22:95:65:
e4:5e:a0:bd:71:43:1b:cf:9d:a1:c6:c9:13:90:f3:
d0:8b:7d:d5:ee:df:c1:25:62:b4:a8:a6:3f:8b:e8:
a9:2b:3b:65:76:a5:b2:52:93:8c:1a:da:3b:2c:08:
54:6e:5a:48:7c:75:75:3a:80:71:aa:e9:2f:25:80:
33:cb:29:3e:cc:ba:a3:81:fa:b9:49:8b:e0:ea:84:
60:07:9a:4e:5f:da:63:f8:f7:0d:4e:a0:e1:b3:22:
7d:e7:36:e2:16:17:a4:72:1e:0c:38:57:b2:b6:e9:
9c:97:9d:9e:38:74:96:23:a9:a6:74:70:63:c8:31:
63:ff:e0:c2:90:07:f2:31:58:f4:20:50:e2:c1:1f:
a1:74:6f:ff:d5:07:01:38:95:96:d9:5e:0a:1c:bb:
95:f1:19:fb:04:d8:c1:d6:ee:69:91:7e:6e:7e:ac:
31:ed:3a:d2:ad:98:31:63:2d:47:43:f3:7b:75:1d:
f4:46:b5:9d:09:b0:f9:8d:74:b7:c1:cf:02:45:71:
38:45:5c:a5:8b:c8:f0:ed:1a:15:9d:c8:d3:90:8b:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6A:DB:44:E7:15:0F:C1:7F:5D:4D:62:30:C3:AC:ED:87:83:A2:BE
X509v3 Authority Key Identifier:
keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/umrbROcVD8F_XU1iMMOs7YeDor4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.40.0/24
185.142.42.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:89:f8:0a:12:46:0d:d4:71:cf:46:44:04:b8:9b:52:b7:a0:
e3:22:9e:3e:6a:26:a1:c9:91:67:6b:32:2e:51:a7:a9:39:93:
78:b2:ce:73:e1:5f:56:ec:5f:f9:6b:01:17:fd:b4:f2:cf:31:
5c:0d:a9:52:bd:39:96:b8:d0:55:26:2f:27:d4:4a:8d:77:74:
59:7a:fc:c5:a1:9a:d0:5a:50:a6:92:02:68:6a:64:91:8b:ce:
d4:9c:59:2a:32:08:3e:c6:fd:65:20:e0:c4:5f:10:2c:5b:d9:
86:60:6e:cc:2c:27:c7:3b:f8:f3:d5:d1:29:b0:9e:f4:f4:e3:
c8:ca:57:a0:6f:15:46:76:5c:3a:be:0d:b9:a3:be:f6:7b:0f:
94:bb:71:4e:90:00:97:4b:2d:e9:90:19:c5:6e:85:e0:df:d2:
b3:a3:76:c1:e7:d5:cd:13:0a:ac:71:74:87:07:37:af:11:d8:
13:ff:cc:c2:59:8e:28:f7:c7:16:3b:8e:8b:3e:fa:77:8a:0d:
68:8d:8b:d9:e8:4a:44:5c:95:c8:98:40:e3:b0:fb:4d:1c:b6:
f0:e7:67:c9:b8:84:15:68:2a:fb:64:08:45:6e:45:11:90:9f:
76:9d:65:07:8f:27:dd:e6:c9:77:51:54:44:6d:d0:71:9c:90:
b9:e0:53:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:07 2025 by rpki-client