Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/UCOQjmQUUOgrTdTJgotuOqOo8tE.roa
File: UCOQjmQUUOgrTdTJgotuOqOo8tE.roa (raw, json)
Hash identifier: LKSVHd9tPQynvxDd2UN8Jk/eJK88GQBFqDbfRDHvZ3g=
Subject key identifier: 50:23:90:8E:64:14:50:E8:2B:4D:D4:C9:82:8B:6E:3A:A3:A8:F2:D1
Certificate issuer: /CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Certificate serial: 019424B3D6663C5A0D3204E6971E43E80851
Authority key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/UCOQjmQUUOgrTdTJgotuOqOo8tE.roa
Signing time: Thu 02 Jan 2025 01:49:13 +0000
ROA not before: Thu 02 Jan 2025 01:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50473
IP address blocks: 46.151.152.0/21 maxlen: 21
46.151.155.0/24 maxlen: 24
80.251.224.0/20 maxlen: 20
91.214.240.0/22 maxlen: 22
185.21.156.0/22 maxlen: 22
185.42.124.0/23 maxlen: 23
185.42.126.0/23 maxlen: 23
185.61.76.0/22 maxlen: 22
188.64.165.0/24 maxlen: 24
188.64.166.0/23 maxlen: 23
193.105.59.0/24 maxlen: 24
195.216.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d6:66:3c:5a:0d:32:04:e6:97:1e:43:e8:08:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Validity
Not Before: Jan 2 01:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5023908e641450e82b4dd4c9828b6e3aa3a8f2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:e8:44:25:8c:24:ba:50:6d:c9:88:94:4c:
08:cb:a8:6a:7b:bb:3c:70:bd:2f:ff:28:f0:59:e3:
3f:fa:7a:5a:24:8f:83:b5:25:f7:8f:d8:8e:85:ed:
d1:ca:48:4d:f1:96:f7:90:4c:e9:a9:fb:8f:f9:1f:
0a:6d:13:b5:57:6f:db:90:8d:ed:bd:0e:87:6c:63:
f5:7b:94:47:e2:b2:6d:fd:51:90:ab:a1:82:30:51:
8d:c9:c1:e6:7e:fe:db:31:7f:32:0e:c2:eb:d0:b6:
e1:7b:2b:e7:c5:63:18:1b:3b:f2:1b:f3:ca:ea:ad:
46:94:47:3e:e8:b6:3f:a4:76:1b:19:fb:a8:d3:79:
f0:b5:d8:71:08:f1:33:a1:1d:94:bb:e3:2f:c3:82:
23:7a:00:7b:e1:1f:c7:06:62:24:20:0e:bf:53:4f:
6e:f4:11:a7:00:1a:33:12:4c:27:5c:22:30:fd:a8:
ae:e5:bb:b1:f8:0e:b8:29:b6:c3:0e:8e:a9:5c:19:
01:99:bd:18:78:71:13:92:e6:f7:98:26:64:94:7f:
f6:b7:8e:6a:7d:18:16:b9:77:95:9b:51:b8:ce:74:
11:41:a1:70:67:55:93:2d:2d:a2:ec:bc:b3:ee:69:
78:38:f6:06:69:52:a4:37:5e:b6:5a:a4:a1:ca:c4:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:23:90:8E:64:14:50:E8:2B:4D:D4:C9:82:8B:6E:3A:A3:A8:F2:D1
X509v3 Authority Key Identifier:
keyid:8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/UCOQjmQUUOgrTdTJgotuOqOo8tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.152.0/21
80.251.224.0/20
91.214.240.0/22
185.21.156.0/22
185.42.124.0/22
185.61.76.0/22
188.64.165.0-188.64.167.255
193.105.59.0/24
195.216.241.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d7:48:44:73:7b:2b:f8:1d:f5:7b:c1:48:04:de:cb:12:7b:
56:7c:6a:c0:0d:d5:26:ec:c0:69:33:a1:a5:cf:b0:8f:9a:5a:
25:f6:74:cd:e4:6c:89:fc:43:18:a7:98:02:31:c5:2e:8b:d7:
fc:61:a6:12:d0:02:d0:d6:63:f7:95:3a:95:8c:73:77:41:48:
8f:e4:fd:1a:d0:ce:0f:1e:44:7e:2a:bc:9d:a5:92:11:d1:cd:
8c:74:d2:f0:46:bf:1c:d1:06:89:70:97:ef:cc:22:64:e4:22:
a5:dc:49:f0:6e:cd:d3:ff:93:30:89:13:ec:e9:57:35:5d:de:
8f:56:b8:12:3a:9c:9b:eb:3b:38:f3:0c:0b:a5:78:d2:21:34:
4e:58:50:34:0b:1b:2f:f9:d6:5f:0f:e5:12:a2:c9:e3:7b:ec:
34:21:7c:75:14:c7:e3:33:14:4d:7d:81:65:43:1a:0c:1f:f8:
2b:a1:8e:46:0c:10:8a:74:eb:4f:56:7b:e6:6c:28:df:2c:9f:
d9:d2:16:30:3c:dd:b7:b6:dc:8b:4f:a9:0c:d8:b7:31:98:bc:
7f:86:54:92:75:b3:dc:c3:da:3f:fb:3f:5d:98:4a:f9:e1:e4:
ba:18:35:64:ee:c2:8b:3f:d2:6c:ba:93:1d:22:9b:68:a4:9f:
29:f8:44:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:43 2025 by rpki-client