Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/uipqeN76722FPmspleIyOjfn3Zk.roa
File: uipqeN76722FPmspleIyOjfn3Zk.roa (raw, json)
Hash identifier: gwJEBBmEVVFOjb4Xj28XR2GIE/hpooHskPB8J+P99Gs=
Subject key identifier: BA:2A:6A:78:DE:FA:EF:6D:85:3E:6B:29:95:E2:32:3A:37:E7:DD:99
Certificate issuer: /CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
Certificate serial: 019424B3A96FAD13E9611BD3E9ABC89761CA
Authority key identifier: 6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/uipqeN76722FPmspleIyOjfn3Zk.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197296
IP address blocks: 45.139.88.0/22 maxlen: 22
46.23.48.0/20 maxlen: 32
185.17.100.0/22 maxlen: 32
185.74.62.0/23 maxlen: 32
2a02:d280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a9:6f:ad:13:e9:61:1b:d3:e9:ab:c8:97:61:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba2a6a78defaef6d853e6b2995e2323a37e7dd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:2d:65:b9:46:d1:ef:29:dd:57:be:f8:7f:
bb:8c:c0:ad:66:44:0b:4a:a9:ae:0c:bf:73:ee:4c:
cb:76:5a:43:90:43:16:0d:b5:b9:e7:63:56:a5:56:
4c:1d:7f:9e:68:4f:7a:2c:bd:9c:ec:70:38:f9:6a:
c0:43:8d:f9:6b:1c:71:63:44:f9:94:db:8b:6e:8f:
6c:06:22:ef:05:76:7b:49:eb:5d:4a:b1:c9:99:e2:
64:4a:69:08:97:58:f7:05:43:3e:16:a4:60:a6:b8:
f6:96:df:89:01:15:4f:98:a5:c9:9b:f4:1b:90:dc:
7b:b3:74:76:3c:b7:b6:06:56:0b:20:f0:b8:b1:19:
b5:a9:c1:b4:ab:18:a8:ca:67:fe:0d:21:b3:fb:70:
88:50:b7:ac:83:1c:bf:ff:ca:ce:57:b3:4f:57:bb:
29:3d:0d:46:d5:ed:23:ce:42:4d:6d:4e:78:f3:ca:
15:6b:98:98:70:60:2e:32:0c:18:5a:b2:e0:05:9c:
c8:fd:16:6d:ae:86:80:e3:48:a3:0e:d4:1e:49:cb:
8a:87:bb:28:45:7c:51:03:a2:f0:5b:61:a6:a6:b9:
94:f6:15:7d:90:b6:24:29:42:3f:e2:75:20:3c:ac:
cc:63:3e:c8:f4:06:a0:3b:30:28:4c:de:c8:73:9e:
11:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2A:6A:78:DE:FA:EF:6D:85:3E:6B:29:95:E2:32:3A:37:E7:DD:99
X509v3 Authority Key Identifier:
keyid:6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/uipqeN76722FPmspleIyOjfn3Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.88.0/22
46.23.48.0/20
185.17.100.0/22
185.74.62.0/23
IPv6:
2a02:d280::/29
Signature Algorithm: sha256WithRSAEncryption
3f:34:f4:41:bb:ad:c8:98:60:59:86:7c:d7:dc:e1:cf:84:d9:
c7:6e:4f:54:e7:f2:6d:5f:fb:51:c6:6b:10:95:da:98:9c:ae:
e8:77:06:bd:23:27:e2:e5:b6:4e:35:0f:51:90:0f:6b:eb:0e:
9e:8f:9b:b4:99:4a:e5:df:bf:47:77:2e:90:75:9c:2f:23:0f:
87:12:0e:aa:1b:cd:36:74:d9:ad:f3:e4:db:d2:12:ae:28:ec:
68:60:ea:27:c1:dc:3a:2e:15:bc:5c:b5:21:1b:9b:5d:40:87:
34:71:6e:af:20:95:ab:d8:da:9f:e8:d5:ea:58:61:dd:dd:4d:
74:9d:2a:86:ff:98:78:b1:e4:4c:3c:d4:2c:8e:5b:54:bd:2a:
32:13:69:d3:ad:80:31:3b:d0:6d:c9:4f:3f:6c:26:83:be:63:
94:eb:8f:04:20:f7:31:22:41:87:f4:44:90:eb:77:ee:b1:e8:
06:0e:8b:c8:14:fd:4c:a3:76:9b:1d:62:7b:9f:79:ef:25:aa:
40:1e:5b:5c:21:ba:fb:5b:04:54:d0:ac:90:ad:32:ec:1d:c8:
a3:2d:80:02:31:9d:a1:eb:36:e0:b4:84:0c:3a:fb:1c:7f:b8:
36:e8:d9:b5:14:7e:de:ee:a3:bb:47:0c:22:26:48:f8:65:45:
ba:90:69:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:41 2025 by rpki-client