Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/uhgMFZw8rs0tJvJzvMK6WeU68F0.roa
File: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (raw, json)
Hash identifier: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=
Subject key identifier: BA:18:0C:15:9C:3C:AE:CD:2D:26:F2:73:BC:C2:BA:59:E5:3A:F0:5D
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 01941FFA7189565748F34A294F052385EDA8
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/uhgMFZw8rs0tJvJzvMK6WeU68F0.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2043
IP address blocks: 185.2.172.0/22 maxlen: 22
185.2.174.0/23 maxlen: 23
2a02:80c0::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:71:89:56:57:48:f3:4a:29:4f:05:23:85:ed:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba180c159c3caecd2d26f273bcc2ba59e53af05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:de:a1:1f:85:ba:b7:f2:c2:f3:6b:40:1e:
0c:a0:e4:3e:27:5f:2d:fd:4f:5b:cd:4b:eb:2f:07:
69:dc:e6:81:f4:de:fe:c9:7e:55:5c:0a:87:f9:d3:
94:90:bf:e9:02:0d:57:b9:e4:37:7e:c0:b5:d9:b9:
45:da:c9:31:b5:85:48:21:5e:14:cc:f4:4d:e4:ba:
8d:8e:a2:54:e8:43:ad:29:17:9f:21:15:d6:6b:e8:
58:2c:27:37:6e:f4:21:bc:b7:2d:43:86:1d:df:12:
58:d4:31:56:1c:f6:f9:c8:0f:73:e3:7d:e5:a1:d1:
94:e7:b4:c7:f2:e3:ae:09:99:a5:7c:69:fc:15:17:
9c:ac:08:b7:4c:a0:8c:16:fc:f9:cf:03:20:b7:f0:
c4:19:7f:ce:12:2e:68:a7:b7:ea:62:a8:f9:c0:5c:
a0:fc:70:12:32:05:86:93:14:9a:e3:35:2d:17:15:
e8:a5:b4:ce:f8:b0:f6:fa:39:2b:a7:82:76:0d:82:
ae:5d:7c:ff:e3:fc:74:ce:fb:8c:1f:ee:90:2b:f2:
f4:51:86:39:d8:7a:d6:34:14:c7:7a:15:f1:cb:4b:
cd:6b:14:8a:50:71:b5:6b:06:fc:65:cf:3f:da:ef:
2b:f8:50:f6:b2:75:4f:5c:70:98:0e:bc:fd:45:19:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:18:0C:15:9C:3C:AE:CD:2D:26:F2:73:BC:C2:BA:59:E5:3A:F0:5D
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/uhgMFZw8rs0tJvJzvMK6WeU68F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.172.0/22
IPv6:
2a02:80c0::/30
Signature Algorithm: sha256WithRSAEncryption
7b:f4:d2:fd:49:c5:bf:37:f6:bb:b2:c1:2c:0d:40:6d:75:8e:
4a:83:fc:63:1e:89:90:3a:68:91:86:d6:95:02:e7:ee:7d:b8:
0b:03:30:e4:89:26:9d:30:3c:b5:a3:32:38:87:df:ba:5d:c7:
4e:01:1d:ac:7a:5e:1d:49:29:1e:b1:93:4a:34:cc:5a:2f:05:
20:01:5e:06:85:bf:a8:5c:a0:7a:e7:52:31:28:43:4c:11:92:
51:63:0a:53:c1:3e:cd:54:e9:b2:02:36:10:26:35:1b:0a:c7:
8b:f0:cd:35:c3:64:22:15:7f:14:cb:23:5a:8b:d4:1f:40:69:
85:2b:d1:44:9b:81:70:a8:f4:ef:5e:f0:0d:2e:4e:90:92:70:
a4:41:f0:be:c7:65:a6:82:2b:4e:17:45:95:14:e2:0c:cb:25:
1b:55:94:87:b6:14:a0:c5:03:90:d0:d1:39:19:f7:a6:19:6c:
25:d5:45:f3:8a:b0:a1:96:16:5e:9a:af:76:1c:67:d9:6b:ea:
f8:55:85:0b:1e:20:ba:5e:2d:93:de:12:c2:a0:70:f3:a0:cc:
73:46:26:d7:bf:85:ca:df:c7:c7:11:18:3d:a5:13:b8:02:ec:
d2:09:b6:52:2c:78:12:18:f5:f5:02:3a:0a:a0:d2:4e:c5:a9:
90:44:b8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net