Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/uOmu1u-0cx95qJdb2F6OqNW0AyI.roa
File: uOmu1u-0cx95qJdb2F6OqNW0AyI.roa (raw, json)
Hash identifier: T1ZCPSydqXCfxYKH+M6++cGYvIdpSTMuo8K8u6PSUYU=
Subject key identifier: B8:E9:AE:D6:EF:B4:73:1F:79:A8:97:5B:D8:5E:8E:A8:D5:B4:03:22
Certificate issuer: /CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Certificate serial: 019427B6897321076E7FFED480955C1B99AD
Authority key identifier: C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/uOmu1u-0cx95qJdb2F6OqNW0AyI.roa
Signing time: Thu 02 Jan 2025 15:51:01 +0000
ROA not before: Thu 02 Jan 2025 15:51:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210026
IP address blocks: 151.90.0.0/16 maxlen: 24
185.86.84.0/22 maxlen: 24
2a05:b740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:89:73:21:07:6e:7f:fe:d4:80:95:5c:1b:99:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Validity
Not Before: Jan 2 15:51:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8e9aed6efb4731f79a8975bd85e8ea8d5b40322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:c7:f3:b1:cb:d2:fb:6b:e3:9e:42:24:56:
35:49:c2:c1:6f:39:1c:8a:7d:fb:72:08:e3:1d:0e:
5a:46:fc:8a:62:09:af:dc:54:92:b0:5f:a4:3d:30:
b5:61:0b:83:69:31:55:21:ed:d8:34:c4:34:f7:1d:
70:8c:c0:ba:b5:e1:b3:73:ff:dc:91:f0:3b:cf:5e:
0b:63:0f:f9:16:30:43:9b:34:27:8a:b6:bc:d0:ae:
89:f1:94:f6:6c:be:94:ec:47:61:93:93:75:6b:24:
4c:5b:80:4a:68:38:18:24:79:dc:a4:d2:6b:28:00:
ed:a1:76:d1:6f:9c:bc:5c:67:79:4e:67:d4:de:ce:
1d:13:6b:07:9f:71:4f:35:f6:bc:21:85:8d:4f:23:
98:19:73:9a:51:26:94:c7:c6:26:46:38:74:4c:bd:
91:c4:cc:3f:45:5a:91:72:02:30:e2:04:5b:36:ad:
09:34:77:cd:3a:c4:49:76:26:6b:65:cc:8c:eb:09:
7c:7c:2b:6e:87:04:22:59:df:ee:e2:27:93:d4:b1:
35:73:1c:76:82:a2:f5:b6:78:b8:cf:08:94:08:92:
dc:68:b5:dd:a0:66:4c:97:a7:ce:2f:36:6c:64:04:
bf:be:86:ca:4a:2b:b2:80:3d:7f:cb:43:81:ef:34:
19:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E9:AE:D6:EF:B4:73:1F:79:A8:97:5B:D8:5E:8E:A8:D5:B4:03:22
X509v3 Authority Key Identifier:
keyid:C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/uOmu1u-0cx95qJdb2F6OqNW0AyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.90.0.0/16
185.86.84.0/22
IPv6:
2a05:b740::/29
Signature Algorithm: sha256WithRSAEncryption
18:f2:f7:0f:db:44:55:84:e5:49:50:f6:57:8c:32:00:f5:83:
a6:d5:80:c6:e0:39:f6:5e:3b:9e:88:29:28:52:d8:83:c9:95:
5d:ec:a9:21:29:14:22:40:f5:03:b9:85:bc:1f:af:7f:06:ee:
90:c4:0c:8e:35:46:7e:7e:ff:8d:98:25:c5:f9:d1:01:e8:a5:
cb:4f:7e:ea:67:4a:61:a9:46:c9:f4:08:aa:6d:3a:c6:a1:e0:
fe:e5:6d:03:6d:f3:c8:c8:92:9f:55:f3:b9:b4:13:51:56:97:
ce:80:95:6f:85:08:31:42:a3:f0:64:db:f5:8a:8f:d5:5d:fd:
b7:42:47:1f:77:ac:aa:85:d8:b5:9a:0d:07:ec:4d:e9:a8:5b:
91:0e:24:af:68:0b:11:93:86:34:4a:c9:92:80:f9:1d:bb:e9:
b4:62:ed:7a:f1:33:47:76:88:6f:cd:11:11:d7:e1:4f:83:a4:
90:95:8e:e1:0b:c0:fc:ba:a0:5d:c2:e3:d9:79:92:13:34:37:
92:8a:9f:e2:c5:d6:84:3d:fc:13:c6:0d:e2:10:08:98:7c:e3:
18:88:0b:a4:10:c3:d4:dc:63:2f:00:b5:bc:51:7e:29:27:8b:
60:10:ec:9d:ca:22:f9:f5:62:d4:8d:8f:24:65:cb:d4:6f:e9:
a8:8d:0d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net