Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/udb2liD_hmmSjMQHfxOs3ILFeak.roa
File: udb2liD_hmmSjMQHfxOs3ILFeak.roa (raw, json)
Hash identifier: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=
Subject key identifier: B9:D6:F6:96:20:FF:86:69:92:8C:C4:07:7F:13:AC:DC:82:C5:79:A9
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019423D6FCB66E3259A31EB81021AFB52E24
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/udb2liD_hmmSjMQHfxOs3ILFeak.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 185.110.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fc:b6:6e:32:59:a3:1e:b8:10:21:af:b5:2e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9d6f69620ff8669928cc4077f13acdc82c579a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:39:06:1a:e1:5f:bb:db:73:ad:66:f6:68:
cc:a9:1f:d0:42:87:72:b4:37:e4:66:ea:39:1f:17:
70:3d:2a:a9:69:c2:47:da:0b:f6:39:c5:b9:60:80:
fa:d8:40:83:cc:9e:0e:2b:65:1e:21:f4:81:7a:7f:
22:1b:34:8a:c7:11:1d:23:f9:c7:3a:18:4e:a1:ec:
de:d9:99:d1:02:e0:d2:ec:e5:1b:92:b9:4c:94:32:
36:7f:97:36:2f:de:b7:61:f8:b6:f7:ae:d8:16:1c:
6d:e2:ee:d0:40:9c:6b:a4:76:0b:57:83:0e:0e:cd:
65:9c:53:87:96:77:54:1f:02:7e:62:09:3e:3d:cc:
d4:d5:8f:df:03:d5:c1:e9:58:7a:05:4f:2d:cc:9b:
86:e7:d8:54:51:76:cb:54:c8:6a:d5:a3:da:d6:fb:
d6:c7:2f:ab:56:31:f2:1d:5c:88:8c:07:0d:37:f4:
b6:a7:7f:da:8b:d4:24:24:64:8b:97:7f:22:17:e0:
24:fd:5f:9d:0d:cb:c5:b1:12:f5:50:72:57:ed:8a:
82:58:a5:88:1a:58:86:59:ad:b7:1d:b4:08:c9:9b:
47:63:0c:1a:4e:65:8e:cf:09:5c:ca:5b:a3:9a:e2:
21:8f:75:90:e3:f1:92:56:1d:78:fc:bb:3c:a8:02:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D6:F6:96:20:FF:86:69:92:8C:C4:07:7F:13:AC:DC:82:C5:79:A9
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/udb2liD_hmmSjMQHfxOs3ILFeak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.28.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:04:26:4d:5e:2f:18:8c:5e:2a:58:f4:03:70:ae:f5:41:c6:
d7:45:5e:dc:b3:90:b0:70:e5:24:55:7e:b2:8a:68:ae:25:5c:
11:6b:9f:14:0a:48:5c:bd:88:52:37:33:95:59:9b:1c:8b:cc:
3f:61:30:34:15:03:a9:dd:72:f1:38:9c:04:f9:01:74:f9:ed:
b5:a3:a1:a0:72:55:c0:2e:d6:2c:98:56:88:b0:6e:b2:e6:11:
85:e7:d3:46:62:b7:1e:58:8f:c6:8f:13:5a:c7:3a:a2:9f:d2:
f7:fd:eb:1d:4d:b5:ab:c5:37:e4:29:23:51:94:ad:de:fe:fd:
ee:8a:92:93:86:d8:e5:76:7b:c2:e8:cb:ea:2c:5f:3c:51:cc:
a8:c7:ee:99:41:52:55:4e:38:08:2c:a1:92:67:e8:c1:95:cb:
59:b9:c8:8b:41:5b:31:41:18:11:71:1c:7d:fd:2b:cf:16:c8:
75:d4:b8:6b:55:58:f5:72:4e:39:5b:30:80:6d:9d:f5:49:86:
e0:a2:44:02:7f:cb:e1:5f:04:4b:cb:f3:2e:a2:4b:fd:aa:61:
95:1e:d7:a4:4f:70:2a:4b:8a:3c:3c:be:85:08:69:fc:ec:96:
b0:6a:8a:0c:ed:6e:5e:63:1f:c3:d9:83:dd:8b:71:29:38:7e:
12:29:f7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:50:46 2025 by rpki-client