Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/uECfOQT7vP0-Onmmtd55wsXs37g.roa
File: uECfOQT7vP0-Onmmtd55wsXs37g.roa (raw, json)
Hash identifier: bNLu+S3LPmz+17Zanv3WTd/nL0fDWgnXheCwrU2SuV4=
Subject key identifier: B8:40:9F:39:04:FB:BC:FD:3E:3A:79:A6:B5:DE:79:C2:C5:EC:DF:B8
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 019422FAFE931EB5414B0BAB38FC178F2CD4
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/uECfOQT7vP0-Onmmtd55wsXs37g.roa
Signing time: Wed 01 Jan 2025 17:47:42 +0000
ROA not before: Wed 01 Jan 2025 17:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47420
IP address blocks: 176.52.185.0/24 maxlen: 24
2a02:f181:3000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:fe:93:1e:b5:41:4b:0b:ab:38:fc:17:8f:2c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Jan 1 17:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8409f3904fbbcfd3e3a79a6b5de79c2c5ecdfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:93:77:df:0e:0d:4a:76:15:e3:f1:ff:e1:
1e:89:13:bc:73:72:5f:02:9b:da:06:15:b7:7b:4d:
88:a5:52:28:63:3c:71:90:77:f7:18:e5:da:d4:a6:
70:4c:79:56:cc:41:a5:e5:d7:d1:4d:55:98:7b:b6:
03:66:56:3f:58:c7:a3:7d:a5:9c:f4:36:58:12:df:
f8:f9:bf:f6:4f:78:a8:62:db:7e:45:9f:a9:68:16:
0b:c7:c5:c2:3e:46:73:ba:3f:80:6e:6e:68:89:9c:
31:f9:b4:8e:dd:a6:3a:24:48:03:c0:db:0f:4f:1e:
76:04:32:6e:9f:37:7c:59:5a:cb:87:50:70:7b:d9:
7e:ec:5d:93:fa:cd:41:b7:6f:a6:a1:8c:4a:80:2e:
9d:29:6d:ce:cd:aa:41:ed:83:b6:31:59:01:e7:d0:
0a:80:72:6c:05:77:de:ac:5b:30:17:f7:77:16:ab:
41:64:86:83:30:ba:af:3a:94:12:b6:e8:47:88:7e:
38:a0:59:35:5f:b6:5a:ea:9a:f2:a6:8a:3b:aa:48:
0e:8e:e5:6c:d0:e9:da:3b:dc:21:ba:99:a2:9c:97:
59:a7:8d:1e:6f:c3:85:6c:2d:91:60:89:97:63:bc:
b5:49:f2:1f:be:63:39:40:73:b4:fe:1e:bb:ee:45:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:40:9F:39:04:FB:BC:FD:3E:3A:79:A6:B5:DE:79:C2:C5:EC:DF:B8
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/uECfOQT7vP0-Onmmtd55wsXs37g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.185.0/24
IPv6:
2a02:f181:3000::/48
Signature Algorithm: sha256WithRSAEncryption
54:86:36:6a:89:a9:df:c0:80:26:87:71:21:91:8b:e1:39:7a:
21:3f:2c:d7:e6:e8:48:fc:6f:48:59:d4:cd:47:10:98:3d:49:
05:52:9b:84:ca:4b:8a:b6:cd:5c:d2:cb:f3:a8:ac:d4:31:a4:
fc:04:f3:d1:dd:0b:ae:a4:ca:47:2f:53:3b:89:23:54:88:a2:
e7:d1:dd:7b:66:b9:b2:03:df:59:11:4e:41:59:6c:0f:3c:cc:
0b:b9:ee:54:ff:ab:d5:4d:04:2e:1a:f4:dc:2b:18:94:cc:77:
a5:66:e7:cf:73:02:58:19:d1:db:aa:22:bf:d4:f4:d0:84:be:
d6:f7:76:a3:7b:b4:58:dc:98:d2:12:70:5b:ff:5b:0b:d9:0c:
cb:4b:c8:0b:47:ce:c9:86:b7:a1:31:4f:05:13:c8:09:92:fe:
6e:3a:6c:57:7d:d7:5b:98:58:de:6b:e5:f3:7c:3d:72:02:ed:
83:b4:03:85:d9:d9:54:36:59:20:5e:74:4f:40:c7:77:2b:4e:
f6:46:9f:5a:46:a9:e8:36:2a:4d:7d:e2:7a:0b:eb:f1:be:2c:
0f:8f:e6:37:40:24:11:df:dd:5f:1d:e6:6b:84:67:c4:0d:a8:
1b:6d:41:79:c5:a8:38:e5:c3:e2:1e:d4:c1:b1:2f:7c:03:a7:
5c:42:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:45 2025 by rpki-client