Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/UUrExGIUuYmvJrzFIhPpcC26aCI.roa
File: UUrExGIUuYmvJrzFIhPpcC26aCI.roa (raw, json)
Hash identifier: 5oxwYt4KRXP54+h592JN5Pg7aFrlsSfI2urY+v1pF/M=
Subject key identifier: 51:4A:C4:C4:62:14:B9:89:AF:26:BC:C5:22:13:E9:70:2D:BA:68:22
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019424455E280B9287FA87FF7800ADC7906E
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/UUrExGIUuYmvJrzFIhPpcC26aCI.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202334
IP address blocks: 185.85.255.0/24 maxlen: 24
185.243.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5e:28:0b:92:87:fa:87:ff:78:00:ad:c7:90:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=514ac4c46214b989af26bcc52213e9702dba6822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:17:d2:9c:33:0c:92:7d:c6:bd:ac:26:65:59:
1e:59:36:17:d6:7b:3d:3c:7a:29:60:97:e8:a3:06:
4c:b5:3a:3c:1b:7b:42:e2:9a:e7:a9:bc:d3:42:88:
12:17:f9:78:e6:a3:19:fc:ef:26:7b:a5:3b:4f:af:
cb:6c:3d:25:39:44:5f:fc:11:67:55:61:2b:71:bb:
94:85:ea:1b:9c:6e:48:53:6d:59:fe:1f:51:5d:f5:
89:16:fc:d6:99:0a:cb:a9:75:00:97:3b:23:1c:ac:
e8:47:b1:f1:13:fd:ba:37:73:53:da:a7:41:61:9d:
89:a5:46:d6:3d:10:cb:d4:be:f6:52:fd:4d:ad:3a:
aa:36:0f:e4:e1:1b:26:14:f6:ac:84:e0:4b:d8:a6:
dd:5c:7f:5c:4a:69:ba:db:f1:2c:69:18:48:d1:91:
da:02:04:75:0a:b7:7a:6d:9c:54:d3:8a:d1:49:5e:
a7:bf:e7:ce:99:61:17:64:f5:c3:21:01:46:ab:96:
73:6a:67:bd:2d:c3:03:a8:26:31:dc:d2:e8:23:d0:
64:08:24:b5:ad:bb:06:73:47:6e:23:65:61:0e:5b:
bb:ca:52:97:42:3a:f6:5f:0a:96:31:d1:e2:4e:c2:
12:8b:f2:e6:8f:0a:80:f6:47:54:88:29:3e:65:f7:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4A:C4:C4:62:14:B9:89:AF:26:BC:C5:22:13:E9:70:2D:BA:68:22
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/UUrExGIUuYmvJrzFIhPpcC26aCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.255.0/24
185.243.136.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:e8:ea:5f:b8:61:5d:ac:b3:52:43:8f:74:f4:de:3e:d0:5a:
20:d9:1f:08:c7:71:ad:fd:f6:af:2e:5c:ea:61:9d:ed:ea:50:
07:2e:4a:8d:92:d2:24:a6:e0:27:a5:27:d2:b9:72:ca:9c:9b:
10:69:fe:87:ac:cc:21:04:73:bc:2f:0b:9c:17:1d:94:8c:51:
24:da:c4:81:8c:9d:73:7b:43:24:63:c6:9e:d3:8c:4f:5f:5e:
ee:f8:a2:62:74:f8:09:61:64:b2:a5:2e:bd:c8:24:c5:f0:cb:
8c:b1:5a:11:16:72:e8:e6:02:3f:05:86:76:18:ab:1d:1f:81:
a8:9d:6c:35:7a:fc:f1:fd:df:71:3c:44:b1:8a:63:21:c4:9e:
57:d2:9d:a8:99:4e:cd:ec:36:73:74:87:ab:c8:21:4c:f7:ad:
d7:af:e3:2a:53:11:51:27:bb:85:ad:7e:1e:07:91:09:34:c0:
eb:82:47:cc:1f:ff:37:ef:e1:cb:bb:38:21:88:ea:3b:90:0d:
00:7a:02:79:24:7f:e1:90:ef:e1:0a:96:75:09:6d:c7:1d:a3:
e6:89:fe:ed:08:33:b7:30:33:a2:3f:a2:21:a4:61:9a:7e:95:
0e:fa:51:81:d8:a0:61:ec:43:08:97:9a:6d:55:ad:00:df:79:
74:69:65:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:09 2025 by rpki-client on console.sobornost.net