Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/9U8A1KCT8rlJoIi8RO4fIEudUPM.roa
File: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (raw, json)
Hash identifier: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=
Subject key identifier: F5:4F:00:D4:A0:93:F2:B9:49:A0:88:BC:44:EE:1F:20:4B:9D:50:F3
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 019421B1B95D99D2799F043101EC6E2B0062
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/9U8A1KCT8rlJoIi8RO4fIEudUPM.roa
Signing time: Wed 01 Jan 2025 11:48:02 +0000
ROA not before: Wed 01 Jan 2025 11:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34288
IP address blocks: 46.234.32.0/19 maxlen: 19
81.94.112.0/20 maxlen: 20
85.158.24.0/21 maxlen: 21
109.233.176.0/21 maxlen: 21
2001:4b20::/29 maxlen: 29
2001:4b20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b9:5d:99:d2:79:9f:04:31:01:ec:6e:2b:00:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Jan 1 11:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f54f00d4a093f2b949a088bc44ee1f204b9d50f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:ce:8c:24:6c:fb:b1:db:1b:dc:d5:9b:18:
6e:b6:3a:01:dc:90:81:1e:58:e4:7e:77:0c:15:9f:
b3:cd:59:b3:9b:12:f3:cb:a8:5b:6f:f9:91:43:62:
8f:87:59:a6:0b:2f:26:e0:ba:d2:62:38:76:ec:97:
1d:72:a0:bf:0f:a3:03:cd:59:f6:77:11:e8:6e:33:
d1:f0:c0:e3:10:e0:c8:a8:20:94:1b:2c:ec:fb:20:
d3:05:76:76:8a:4b:af:79:22:f5:ab:43:7b:1b:6c:
98:9e:86:9f:02:cf:aa:c2:ed:98:62:b1:e0:46:64:
1a:19:fa:5a:23:cb:d2:65:f5:de:e8:82:66:af:73:
2e:60:48:59:bd:a7:99:bc:a3:ca:41:29:4b:30:e0:
98:5a:bd:10:1a:10:14:0d:7b:c8:a4:c9:df:a5:a0:
5d:12:5c:f1:73:73:4a:f0:b7:ea:95:5a:9b:9b:7b:
a8:7e:2c:6f:fd:18:44:0b:07:f1:ca:ea:31:ff:e1:
60:64:ac:29:a7:81:e9:da:0b:64:4c:08:9f:77:74:
f5:de:7a:2f:b7:25:64:5b:47:fc:a8:5a:c7:b6:39:
e2:26:b1:ac:b1:4a:47:c0:d7:67:08:73:a5:c7:15:
3c:bf:b6:66:4a:3e:01:54:20:b3:7a:41:ac:52:7d:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4F:00:D4:A0:93:F2:B9:49:A0:88:BC:44:EE:1F:20:4B:9D:50:F3
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/9U8A1KCT8rlJoIi8RO4fIEudUPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.32.0/19
81.94.112.0/20
85.158.24.0/21
109.233.176.0/21
IPv6:
2001:4b20::/29
Signature Algorithm: sha256WithRSAEncryption
3c:07:77:b8:9d:15:df:36:74:08:e7:72:31:08:13:c7:87:fd:
0b:b5:d8:1c:f7:fe:20:02:ec:22:91:f8:be:d6:a2:29:e6:3b:
f6:3b:91:e3:a2:f0:fc:a1:7e:3a:e9:92:bc:32:06:cb:ae:7e:
07:b2:ad:c1:9e:b2:59:a1:1e:9e:a5:7f:ff:9b:f9:ab:8e:2f:
be:7a:e3:41:56:d8:30:1b:e8:43:6a:93:bc:e7:17:85:2e:1a:
ec:f8:ba:5a:0d:ce:9b:71:e1:6d:51:cc:80:96:e1:8d:2d:4d:
af:63:98:90:63:74:a7:14:96:81:25:db:3d:b9:12:fc:81:a6:
64:f2:c8:47:48:67:8e:ba:14:e6:ec:fd:5f:eb:44:49:09:38:
a6:77:65:ee:4b:7d:f5:b7:0b:2c:d4:d4:ee:3d:a6:eb:b9:b7:
7e:46:60:83:c2:ea:71:08:30:85:fb:93:d9:0c:8c:c1:85:63:
9b:aa:3a:0f:2f:67:43:b5:e4:3c:30:a1:1c:a8:f4:56:a0:c7:
da:8e:7a:a5:78:cc:7b:9a:be:43:b4:77:5d:bf:51:3c:10:e6:
39:9a:1e:2f:db:ca:16:ad:1f:29:09:75:72:c0:d2:a0:78:1e:
b5:dc:b9:51:a9:ba:8b:49:7c:d9:0c:b5:c8:fe:9c:9d:29:d5:
9c:21:53:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:21 2025 by rpki-client