Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/uhCkTjed1Otbl84zKJAXa3t70aA.roa
File: uhCkTjed1Otbl84zKJAXa3t70aA.roa (raw, json)
Hash identifier: cZYpuZx9ZnpX3epsbIvoPloPaPVgbUbl6mh5Fr2F3pw=
Subject key identifier: BA:10:A4:4E:37:9D:D4:EB:5B:97:CE:33:28:90:17:6B:7B:7B:D1:A0
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 019425FDD1E1902905667FA753E12FD0E056
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/uhCkTjed1Otbl84zKJAXa3t70aA.roa
Signing time: Thu 02 Jan 2025 07:49:38 +0000
ROA not before: Thu 02 Jan 2025 07:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21060
IP address blocks: 80.82.96.0/20 maxlen: 20
80.89.16.0/20 maxlen: 20
80.89.18.0/23 maxlen: 23
80.89.30.0/24 maxlen: 24
91.195.58.0/23 maxlen: 23
91.213.70.0/24 maxlen: 24
92.43.232.0/21 maxlen: 21
185.134.252.0/22 maxlen: 22
185.155.36.0/22 maxlen: 22
188.244.64.0/20 maxlen: 20
194.8.244.0/23 maxlen: 23
2a02:7c00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d1:e1:90:29:05:66:7f:a7:53:e1:2f:d0:e0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba10a44e379dd4eb5b97ce332890176b7b7bd1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6c:9e:05:20:8c:0d:22:f5:9b:e0:75:ba:e7:
7e:dd:2f:f3:d3:43:b3:7e:9b:7e:5b:ea:e6:3e:d3:
1b:43:f1:44:c1:d5:f3:a9:ed:96:72:c3:d8:10:db:
a3:d9:db:a7:de:22:38:9e:f0:6b:b5:52:b6:25:71:
50:a7:56:a2:fb:a3:72:2a:7b:19:b8:a2:df:e3:1a:
4b:05:5c:62:e1:14:45:29:8b:f5:7c:58:c5:bb:79:
06:99:64:e5:d3:6f:30:08:f0:db:d7:d0:8f:3a:eb:
6c:7c:49:21:f7:50:04:79:b5:35:2c:06:b5:e1:0a:
2e:22:46:be:90:30:25:a6:35:d1:36:e7:5e:13:35:
9b:26:5a:18:04:a1:e9:a1:85:c6:d7:2d:66:b0:f5:
b0:84:a1:c6:67:02:18:a9:6b:0f:71:05:f2:c8:77:
a1:0c:bd:5e:df:09:37:c1:90:5b:7f:f0:51:b9:c3:
58:58:1e:58:11:a2:b0:f1:ef:22:72:11:29:30:ae:
d8:e0:24:1a:af:63:b2:58:14:d0:8f:e7:be:db:5a:
9b:2a:d1:4e:5d:b2:26:ec:42:f3:e0:6c:53:64:64:
2d:01:5f:ed:82:9c:33:cb:e0:8e:9f:4b:e7:79:b1:
22:d4:5a:9a:15:48:e0:3f:56:e0:f0:b1:6b:eb:b5:
c3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:10:A4:4E:37:9D:D4:EB:5B:97:CE:33:28:90:17:6B:7B:7B:D1:A0
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/uhCkTjed1Otbl84zKJAXa3t70aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.96.0/20
80.89.16.0/20
91.195.58.0/23
91.213.70.0/24
92.43.232.0/21
185.134.252.0/22
185.155.36.0/22
188.244.64.0/20
194.8.244.0/23
IPv6:
2a02:7c00::/32
Signature Algorithm: sha256WithRSAEncryption
90:c4:f7:2e:a8:bd:d5:c1:a2:0e:fc:2c:a3:40:9e:d6:33:7f:
d7:e1:9a:a7:4e:ef:3c:9a:d8:ba:86:10:5a:9c:47:e1:04:0e:
8e:6b:05:e0:3d:19:33:0e:77:b0:1d:29:62:92:e5:4c:93:33:
46:bc:2b:b6:d0:2e:e2:b5:d9:68:66:a4:13:34:14:e7:0d:14:
cf:a7:0e:b6:d7:9d:e3:69:ea:cd:3a:b7:0b:66:fd:c2:b9:ef:
dd:2f:a2:d9:f6:10:90:76:6c:55:e3:d6:d8:58:9e:13:bc:b8:
3b:ba:94:e2:6c:30:97:9d:c6:c2:1c:91:d0:b1:e2:13:81:16:
a2:ab:e8:9f:1a:d6:e4:16:d9:e2:d5:96:2b:74:ea:1c:6b:d8:
36:bf:85:7d:71:65:da:e0:bd:d4:ff:bc:68:32:e6:05:f3:3b:
2b:3e:24:28:23:0f:f8:3c:3a:40:39:da:4f:54:50:df:c2:4d:
73:31:08:9d:fb:0b:44:cb:46:c8:c5:d0:13:27:fc:38:5c:97:
69:84:ee:28:ff:96:68:d6:a1:76:17:fd:69:1c:97:72:a5:9d:
c3:b8:00:29:8f:b1:2d:3e:b6:d8:4c:2d:44:02:8d:96:59:a7:
ae:3a:5e:7b:34:72:b7:e8:f2:62:b4:3a:f4:c6:ac:38:d1:b4:
8a:a6:31:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:14 2025 by rpki-client