Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/UhbQn9r_oQ53_LBYIMOgNzp0DtY.roa
File: UhbQn9r_oQ53_LBYIMOgNzp0DtY.roa (raw, json)
Hash identifier: ybTEqIOqqJvO6vtucASlIFhPlFdQ/llKHU+qMKofdks=
Subject key identifier: 52:16:D0:9F:DA:FF:A1:0E:77:FC:B0:58:20:C3:A0:37:3A:74:0E:D6
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01960FCF5CCCADB7C3A1CC8D5C594D792290
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/UhbQn9r_oQ53_LBYIMOgNzp0DtY.roa
Signing time: Mon 07 Apr 2025 10:32:49 +0000
ROA not before: Mon 07 Apr 2025 10:32:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42568
IP address blocks: 85.120.60.0/24 maxlen: 24
85.121.180.0/23 maxlen: 23
194.153.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:cf:5c:cc:ad:b7:c3:a1:cc:8d:5c:59:4d:79:22:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 7 10:32:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5216d09fdaffa10e77fcb05820c3a0373a740ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:43:1f:ff:c5:c3:8b:dc:40:04:c5:50:e7:
98:02:cc:9f:63:82:f4:2b:0f:2e:46:6c:18:a8:2b:
1b:60:4b:e7:3a:b5:45:1e:a9:29:37:ea:53:e2:6a:
b7:9b:b8:c8:40:16:12:f1:fc:33:3d:a2:0e:e4:75:
2d:72:c4:a6:f5:e8:04:cb:21:5d:66:4a:9a:16:d5:
5f:ea:d4:ba:22:6b:a9:81:56:d6:a3:90:fc:29:63:
bc:0a:55:af:02:eb:2c:27:8c:05:96:49:45:14:6c:
3c:d7:5b:91:89:94:87:09:1f:e5:46:f7:57:40:a0:
86:96:af:0b:f9:14:28:e0:55:35:68:4a:a5:28:99:
e3:0a:d7:f3:e5:b6:fd:f3:71:30:af:b5:38:1f:4b:
19:5e:6a:9d:cd:d1:ea:96:e5:7c:b3:5b:03:17:c8:
c3:6d:bc:b1:6b:ee:ba:43:ec:8e:10:ec:dd:3e:a8:
a7:91:f8:2d:e3:d7:83:fb:eb:ef:2c:51:09:60:66:
15:7c:1c:c5:5e:ab:b9:63:02:e6:c1:62:e8:17:f7:
0d:1e:2a:d9:21:3f:c8:c7:99:39:7d:50:2b:08:29:
4d:d0:44:bb:ea:39:50:84:50:99:44:a9:5e:da:0b:
9a:f9:a4:d0:6b:1b:1e:c3:07:38:ff:02:f2:30:da:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:16:D0:9F:DA:FF:A1:0E:77:FC:B0:58:20:C3:A0:37:3A:74:0E:D6
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/UhbQn9r_oQ53_LBYIMOgNzp0DtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.60.0/24
85.121.180.0/23
194.153.249.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c7:39:d1:95:c0:f6:c2:38:1d:de:23:e7:1e:41:8a:66:76:
23:18:2e:8b:ea:be:a0:2f:cd:3b:8a:fb:05:90:c2:f6:00:90:
ba:2d:99:41:d2:f2:bd:aa:45:81:c2:80:72:20:9f:d6:a9:31:
8c:8e:54:7f:61:ab:19:53:9a:4d:95:fa:a9:db:67:8e:3c:29:
cc:aa:96:1f:2f:23:0d:f6:d7:47:df:80:85:64:69:20:63:3e:
70:42:7b:50:d8:6c:eb:0a:2f:8a:28:2f:f5:26:ff:60:bc:7f:
4d:b6:d8:34:84:ae:ba:65:18:2d:ce:a9:09:22:df:d8:29:2e:
3b:f3:56:02:40:57:16:d6:a5:d0:87:ce:4c:2c:3b:f8:5b:67:
70:4e:49:13:92:05:20:40:27:64:b6:8d:e5:b8:c0:82:a1:d2:
5e:e0:0b:21:4b:cd:71:ef:ff:c8:0e:e3:f5:a5:93:fd:79:fa:
e7:dd:45:79:00:ab:34:be:f3:37:bf:23:42:e1:33:64:11:6d:
8f:32:1e:8b:e6:3b:7e:5e:c3:f5:0d:51:e8:71:d0:0f:b3:64:
02:1e:4a:6f:77:84:b9:78:d2:68:f1:05:87:b8:af:eb:33:14:
6c:5e:19:bf:64:b1:c7:15:5a:96:dc:54:75:1b:d7:6d:98:75:
d3:d5:92:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:05 2025 by rpki-client on console.sobornost.net