Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/UMmv-WY7B5qYJViInJvlNV476mE.roa
File: UMmv-WY7B5qYJViInJvlNV476mE.roa (raw, json)
Hash identifier: jHHOgpNZRXbrpDROEuRDFCxUXMl5uaCZV9NM+NW4eXw=
Subject key identifier: 50:C9:AF:F9:66:3B:07:9A:98:25:58:88:9C:9B:E5:35:5E:3B:EA:61
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 019422FB5D3B83DE2F82B40136C8A3EC577B
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/UMmv-WY7B5qYJViInJvlNV476mE.roa
Signing time: Wed 01 Jan 2025 17:48:06 +0000
ROA not before: Wed 01 Jan 2025 17:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56701
IP address blocks: 45.157.212.0/24 maxlen: 24
45.157.213.0/24 maxlen: 24
45.157.214.0/24 maxlen: 24
45.157.215.0/24 maxlen: 24
77.73.234.0/24 maxlen: 24
178.236.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5d:3b:83:de:2f:82:b4:01:36:c8:a3:ec:57:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Jan 1 17:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50c9aff9663b079a982558889c9be5355e3bea61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:3f:ee:e5:0c:61:0e:45:f5:fa:e6:24:b7:
00:b0:56:84:0d:d3:30:db:60:13:7e:fe:26:cf:4a:
a9:7e:ad:1a:06:0a:9d:86:81:c2:5f:15:f0:8d:c6:
e3:79:11:de:31:35:a6:4d:6e:26:60:b6:22:0c:76:
cc:d5:80:86:6a:bb:aa:d4:97:6f:85:35:a4:9d:3d:
22:3e:8c:85:80:01:1f:58:bc:00:40:2b:6a:3b:c1:
99:49:2b:ee:d1:ea:e6:df:d9:9f:13:70:16:9e:6a:
88:7a:b1:85:d1:ac:93:68:83:fc:9d:f6:0e:08:b5:
36:d1:a2:56:1a:cd:87:1a:be:f0:60:a2:bc:4a:91:
42:bc:5c:cc:18:9a:44:1d:ba:56:bf:86:db:c9:57:
9f:41:86:ff:84:2f:a1:c2:98:b7:bc:a3:54:94:de:
0c:3f:fd:08:61:be:33:8e:41:6c:ae:41:42:6e:4c:
c2:71:dc:93:9a:53:9f:48:4a:a9:a7:3c:c8:c6:c3:
49:a1:92:84:09:a4:7e:86:ff:5b:57:76:5f:83:86:
20:0b:de:23:91:44:db:3b:62:5a:68:72:7b:8f:95:
2a:b4:b9:e1:39:a6:2f:ee:ec:2d:75:12:9f:98:cb:
d4:2b:24:5c:bb:ed:ad:1a:9d:74:8a:36:6b:46:0b:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C9:AF:F9:66:3B:07:9A:98:25:58:88:9C:9B:E5:35:5E:3B:EA:61
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/UMmv-WY7B5qYJViInJvlNV476mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.212.0/22
77.73.234.0/24
178.236.29.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:9b:2f:d8:07:fb:13:4f:24:b5:ea:cf:0d:42:ab:50:42:0c:
b4:18:3a:d1:0a:d5:05:8b:33:92:29:c3:9a:ed:97:24:69:35:
45:9f:90:3b:19:1a:df:ae:20:c1:ef:a0:b8:03:0b:cf:cf:fa:
b4:07:49:a2:ce:7f:02:06:ea:d3:e4:6b:66:1f:2a:ac:01:f5:
fe:ed:ba:17:49:d0:45:76:bc:1d:8a:54:86:80:cb:77:02:74:
75:bf:5c:bb:b3:15:3e:3c:29:0d:a6:b4:78:0e:70:31:69:d9:
ca:89:54:00:08:89:60:aa:f0:ba:10:65:83:0b:a0:c9:7f:d7:
df:28:75:1a:a5:6b:ec:5e:1b:fb:48:19:80:34:b7:35:c9:d6:
9d:3b:1d:ba:fd:22:26:2b:f5:39:50:9a:80:8c:b4:1c:c4:2a:
02:65:90:60:88:a9:5e:15:23:d3:91:93:8a:d7:fc:c2:d0:3f:
31:c5:90:6a:d9:11:4f:1e:ec:d7:2d:9f:35:04:5f:19:b2:60:
34:9e:05:46:71:73:6e:39:26:30:7d:eb:27:d2:7c:ee:db:a8:
5c:bd:d2:8b:fc:66:10:31:79:2f:40:fd:e6:fc:61:3e:84:77:
23:1c:ce:6a:d4:c7:27:e6:17:24:95:02:5f:cb:7f:27:ba:de:
99:af:2f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:03 2025 by rpki-client