Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/ucXy2KSNHkyj0NVTw1_Sgr3N0zY.roa
File: ucXy2KSNHkyj0NVTw1_Sgr3N0zY.roa (raw, json)
Hash identifier: rz/2Fi1HgmzQcvvjW5gJ3z/pWlF+IsIu5pUPW6A7j2U=
Subject key identifier: B9:C5:F2:D8:A4:8D:1E:4C:A3:D0:D5:53:C3:5F:D2:82:BD:CD:D3:36
Certificate issuer: /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Certificate serial: 01942747F48B067A4EB09D3915B432B77683
Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/ucXy2KSNHkyj0NVTw1_Sgr3N0zY.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48602
IP address blocks: 185.140.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f4:8b:06:7a:4e:b0:9d:39:15:b4:32:b7:76:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9c5f2d8a48d1e4ca3d0d553c35fd282bdcdd336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:a9:f0:0f:a7:da:a2:6b:b2:1b:e4:79:8f:
11:f7:41:79:cd:61:b0:25:06:d0:db:f9:9d:3d:c6:
86:c1:aa:4e:42:4e:f0:56:44:37:09:75:3c:2e:d4:
c9:4e:c5:ca:14:1a:bc:d0:a6:bd:e0:95:6d:97:f2:
a8:66:c1:4d:b6:b7:88:c1:af:af:1c:4f:8e:45:9b:
f4:6e:76:ed:56:88:73:27:bd:a7:ba:48:14:18:bc:
04:d4:cb:ba:23:84:19:de:fb:d9:4d:34:d3:b9:b3:
19:02:8f:c3:d7:35:1b:0a:52:c1:aa:be:77:04:fe:
27:7d:3e:1a:09:85:43:60:e8:04:51:70:8e:42:85:
59:2c:85:ce:dd:8b:6b:2f:de:d6:31:12:73:fb:5e:
0d:20:d9:03:5b:2a:dd:dc:72:45:a0:db:89:02:97:
9b:7f:c2:4d:d7:6a:7b:58:c7:cd:fb:03:e4:68:9b:
fd:54:f5:4d:9f:ac:4e:a8:3b:c0:fa:57:6a:a4:c4:
e7:91:12:d4:a3:17:ba:bf:f3:51:e2:a5:42:8a:dc:
1f:3e:ab:95:e7:b6:2a:15:01:92:d4:30:f0:8e:4e:
b3:a1:a9:0b:19:91:ec:c5:58:f0:1a:92:97:5e:0c:
7a:c0:aa:94:6c:f7:1c:d4:06:41:d6:f6:f6:66:3f:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C5:F2:D8:A4:8D:1E:4C:A3:D0:D5:53:C3:5F:D2:82:BD:CD:D3:36
X509v3 Authority Key Identifier:
keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/ucXy2KSNHkyj0NVTw1_Sgr3N0zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.244.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:80:6f:ad:45:4e:1f:1b:6d:9e:96:82:8d:fb:17:30:c0:04:
dc:9b:d0:08:7a:79:25:88:a8:c1:be:64:cd:38:9c:60:dd:c0:
de:e7:1a:19:3b:2c:42:ee:18:61:4c:38:79:91:11:5c:01:58:
7c:04:b2:70:14:dd:ce:06:e1:fe:e7:2b:9e:f9:aa:de:e7:30:
5e:6a:36:69:02:e7:07:ad:c4:56:75:76:a3:a9:cb:3c:d7:6a:
a8:06:f4:14:1a:79:00:ce:c4:5a:6d:de:42:87:e4:82:81:8d:
55:01:75:9e:b6:2d:f2:e5:a8:33:14:de:9c:40:e3:8e:78:74:
2d:67:eb:03:bf:7c:3e:92:e2:18:61:1a:61:7d:7b:eb:0d:0a:
27:d0:cb:80:86:0e:45:a4:c4:68:30:24:8d:5f:bd:53:b1:55:
7d:62:ac:9e:5b:d7:29:d9:9e:9a:5a:d9:6f:5b:b1:b7:2d:d8:
46:a2:9b:e7:b6:24:c6:13:90:50:6d:5a:89:5f:3e:24:52:47:
c6:de:44:fc:c1:cc:6b:a6:f7:37:e7:16:1c:a7:0c:cd:b7:d1:
ce:5f:1b:4f:79:f0:ed:94:49:35:72:00:c5:a1:39:bc:4d:41:
7c:7d:8c:4f:2e:4a:e7:5f:b2:df:1e:c9:99:cd:2f:3c:fe:67:
eb:a9:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:47 2025 by rpki-client