Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/UvEQh_w3pDpxL5Zm-5aViUxyqU0.roa
File: UvEQh_w3pDpxL5Zm-5aViUxyqU0.roa (raw, json)
Hash identifier: 1pbBgB/1Q5Ec8C6USLAWvrMVYcZC0MxJ5lbRr8Zsraw=
Subject key identifier: 52:F1:10:87:FC:37:A4:3A:71:2F:96:66:FB:96:95:89:4C:72:A9:4D
Certificate issuer: /CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
Certificate serial: 019420D5AE062C8C315F24B7198D77C66BE6
Authority key identifier: 9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/UvEQh_w3pDpxL5Zm-5aViUxyqU0.roa
Signing time: Wed 01 Jan 2025 07:47:42 +0000
ROA not before: Wed 01 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201600
IP address blocks: 46.227.220.0/24 maxlen: 24
93.159.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ae:06:2c:8c:31:5f:24:b7:19:8d:77:c6:6b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52f11087fc37a43a712f9666fb9695894c72a94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:76:63:44:81:fb:ce:c4:5e:08:11:e9:93:
38:c3:b1:1f:73:ac:65:f2:61:c2:99:fc:31:3a:71:
2f:d3:6c:a2:44:0d:f7:56:95:3f:04:47:17:0a:4f:
f6:d0:53:0e:e3:9c:d9:30:b2:4e:c3:ac:b0:2f:77:
21:b5:da:76:9c:8c:09:58:f3:d9:f3:00:d5:c0:83:
7e:97:49:47:79:5d:07:dc:64:b5:97:c1:81:c1:fc:
33:06:1f:72:f8:0c:1b:22:b4:33:23:ac:cb:cd:83:
b9:9e:3d:15:9e:d4:7f:ed:53:c7:65:9f:88:14:70:
e9:a1:9c:39:e0:a3:a4:ed:16:65:d1:4f:dc:7c:21:
8a:51:a4:a2:31:68:9b:99:ff:0c:a6:af:ae:de:ab:
4f:0b:78:c0:ec:ab:49:3d:6a:04:f7:d1:da:f6:de:
2c:db:71:a7:4e:d4:d0:e8:c0:f2:f9:37:bb:07:d0:
a3:7c:1e:ef:32:8f:45:9b:99:42:ce:4d:fe:bb:2d:
74:b9:ee:05:62:d3:27:ca:35:55:e9:67:18:8c:b3:
2f:30:7b:b0:54:4b:94:f9:78:46:42:c4:66:12:62:
a4:de:e8:66:a9:ae:27:13:c3:a7:1e:92:2f:81:93:
24:05:6c:3a:25:e4:9d:aa:43:74:9f:13:39:30:c9:
47:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F1:10:87:FC:37:A4:3A:71:2F:96:66:FB:96:95:89:4C:72:A9:4D
X509v3 Authority Key Identifier:
keyid:9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/UvEQh_w3pDpxL5Zm-5aViUxyqU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.220.0/24
93.159.115.0/24
Signature Algorithm: sha256WithRSAEncryption
83:34:28:e6:d6:f7:f3:c8:8b:c8:5e:e0:51:a7:a5:85:1c:99:
b2:a9:fc:6f:d8:4f:48:87:7d:e2:75:66:6b:02:6f:64:d4:d5:
ec:f4:3a:74:9a:87:c3:5c:9b:ce:20:0c:f7:3d:0b:90:15:8a:
61:db:8c:32:f3:1a:30:98:01:2b:04:30:c5:6e:87:fc:53:8c:
ab:eb:1c:52:25:00:5a:5a:b6:a4:04:cc:3f:72:b7:ee:38:da:
24:36:df:0c:60:d6:20:f2:a7:f6:4b:84:d8:54:86:1e:5e:c5:
0c:97:72:c1:b8:9f:43:2d:c6:16:e9:a1:78:df:ec:8b:af:86:
75:7e:50:af:b4:a3:81:54:9b:ad:71:8c:fd:23:1e:52:25:11:
87:2f:a0:e1:72:e5:bd:3e:7c:05:6d:8a:cc:e4:34:53:01:4f:
30:54:7f:7e:3d:4e:8d:5b:89:c8:a1:c7:13:47:38:68:5b:92:
5b:b0:99:76:51:f0:c0:6a:a2:20:1f:1d:2e:cb:02:cb:a9:34:
e1:dc:91:08:45:65:4f:a3:5b:c0:86:2b:4e:80:3c:c5:74:19:
d0:5d:f1:6f:2c:97:cd:2a:7c:dd:3d:90:01:50:a3:3b:86:df:
5e:a3:9f:35:14:e2:8e:ab:3c:76:ea:7f:a4:27:9a:50:cc:aa:
cc:ce:98:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:00:49 2025 by rpki-client