Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/UceenS0AW37r9tIac-IPww_60R8.roa
File: UceenS0AW37r9tIac-IPww_60R8.roa (raw, json)
Hash identifier: V8RGgQn1l8C/6JS3VLbt67ThWSSYzYF+1zDXdf2gvmc=
Subject key identifier: 51:C7:9E:9D:2D:00:5B:7E:EB:F6:D2:1A:73:E2:0F:C3:0F:FA:D1:1F
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 0194266C385DF5C52F88F2ECCAAAD61575FF
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/UceenS0AW37r9tIac-IPww_60R8.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209640
IP address blocks: 79.140.173.0/24 maxlen: 24
149.3.189.0/24 maxlen: 24
149.3.190.0/24 maxlen: 24
149.3.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:38:5d:f5:c5:2f:88:f2:ec:ca:aa:d6:15:75:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51c79e9d2d005b7eebf6d21a73e20fc30ffad11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:a7:68:a7:bc:0f:72:84:cf:71:2a:05:95:
83:8c:a6:6c:ca:95:0f:28:ee:39:93:30:9a:e5:7d:
52:0b:82:b9:c5:36:5f:11:09:bb:0e:86:2a:64:5c:
4e:a8:3d:ba:6f:29:61:1d:08:fa:8f:9b:0d:60:20:
af:db:67:7e:61:02:64:56:5b:8a:e8:8f:b5:dc:c0:
ed:28:a5:77:54:de:49:0b:71:aa:1d:31:4a:9c:8c:
ae:85:8d:d4:80:8c:5b:21:fe:85:78:ab:d0:02:fa:
c2:28:c9:32:78:6e:6a:64:5c:a4:a0:78:de:a8:15:
95:8e:5b:5b:d2:ad:77:f3:24:91:e1:46:cc:c7:c3:
6a:56:d0:4f:be:ab:d6:af:9e:ef:60:90:77:d1:d0:
34:3a:82:40:02:78:9d:77:34:61:5f:b9:2b:f7:2c:
f9:1a:35:54:f9:9b:61:14:e6:ed:67:0c:b0:dd:6f:
28:be:ff:9b:61:c7:d0:01:f4:4e:95:f6:c1:42:2c:
e5:18:d4:7f:1d:56:da:b4:69:46:e7:7b:e8:cd:db:
b5:90:19:f0:7a:72:5d:9e:f0:97:80:08:ac:b0:80:
39:5f:62:6e:ca:d6:30:64:84:f0:7f:96:4f:8e:e2:
31:13:56:1b:6e:07:a8:9b:2b:55:de:78:c8:6d:da:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C7:9E:9D:2D:00:5B:7E:EB:F6:D2:1A:73:E2:0F:C3:0F:FA:D1:1F
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/UceenS0AW37r9tIac-IPww_60R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.140.173.0/24
149.3.189.0-149.3.191.255
Signature Algorithm: sha256WithRSAEncryption
a0:60:65:75:ca:7c:c2:a4:4b:3a:99:dc:df:35:5c:c1:2d:a4:
f3:1a:1d:32:6b:e2:4f:11:12:85:b2:dc:95:14:06:a6:a8:6e:
ba:b9:7f:d9:21:57:34:05:29:4f:1b:c9:26:9e:54:8f:c7:b0:
57:55:f7:ee:29:48:ae:f0:d7:46:3b:cc:a7:d4:df:4a:b1:1a:
06:e6:66:ac:fd:30:7e:22:45:57:06:27:34:a0:9e:19:86:0e:
14:10:5a:3e:0f:a9:91:ca:5b:00:23:8b:ff:22:90:a5:91:95:
cf:b7:81:0a:ee:3c:0d:05:50:ed:da:17:a4:f3:a1:8f:e9:d3:
96:7b:65:bf:08:95:a8:df:8c:1c:b2:53:e0:05:4f:73:b3:55:
83:c2:c5:8d:67:90:73:31:96:75:a7:91:da:02:0e:50:0b:1d:
76:09:d2:96:96:20:eb:b3:b6:fb:98:02:2d:99:1b:76:89:b9:
4e:28:fc:76:be:0e:02:e1:f3:70:e5:2d:ab:b6:1a:16:bc:92:
fb:0a:0e:6e:12:9e:c4:ac:40:4b:b6:c4:67:c8:dd:d4:ad:74:
dc:68:cb:22:f9:1e:1e:ba:23:bb:ae:5b:4a:5e:0e:9c:d7:2b:
03:d0:61:8e:a7:67:dc:19:d8:eb:a5:65:36:3f:8f:5a:b6:d6:
e2:7b:82:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:25:56 2025 by rpki-client