Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/uzEIjlJYDDkYjDRzAf2S2_nuADQ.roa
File: uzEIjlJYDDkYjDRzAf2S2_nuADQ.roa (raw, json)
Hash identifier: jOMq+THXs6tHKVnh3usZCh/VkjmthWBocgL66TKhVMs=
Subject key identifier: BB:31:08:8E:52:58:0C:39:18:8C:34:73:01:FD:92:DB:F9:EE:00:34
Certificate issuer: /CN=a84216954915e3ceef74dbbbcfe9472009d88901
Certificate serial: 019423D716FFA847935A026256739DCB8E72
Authority key identifier: A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/uzEIjlJYDDkYjDRzAf2S2_nuADQ.roa
Signing time: Wed 01 Jan 2025 21:48:05 +0000
ROA not before: Wed 01 Jan 2025 21:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15844
IP address blocks: 46.227.128.0/21 maxlen: 21
80.72.240.0/20 maxlen: 20
185.55.180.0/22 maxlen: 22
194.45.26.0/24 maxlen: 24
217.24.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:16:ff:a8:47:93:5a:02:62:56:73:9d:cb:8e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84216954915e3ceef74dbbbcfe9472009d88901
Validity
Not Before: Jan 1 21:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb31088e52580c39188c347301fd92dbf9ee0034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4a:74:ad:61:71:9c:bd:c8:20:5e:7b:00:29:
83:62:30:b7:19:2a:3e:87:ff:66:41:72:49:11:70:
b8:71:1c:81:5d:10:e5:17:63:bb:e6:b9:a9:f2:40:
9c:e8:02:7d:8c:2d:f2:71:4b:81:9e:d3:fe:df:e6:
f6:5c:49:83:08:ba:17:89:8e:b2:e5:43:d8:68:f4:
2c:4e:b2:27:cd:98:11:0d:f1:75:87:a3:72:f9:55:
5d:50:73:af:53:ae:e6:c6:5f:2b:9e:b5:2a:ad:d4:
81:d0:a4:52:e7:90:ca:4a:d8:49:28:64:34:9f:93:
4f:f7:ae:d2:85:2d:04:7d:8c:8d:1d:68:66:e5:7f:
18:db:84:ee:f2:57:40:a7:47:e2:2b:e3:68:b9:c7:
56:1d:9a:43:ed:f8:af:b8:2d:95:68:12:88:53:13:
38:50:f1:98:8e:a4:4e:53:d1:f2:d4:c6:71:8c:e0:
62:3f:ac:1f:7b:af:30:55:63:9a:1e:d9:de:55:86:
1b:58:83:e1:fc:52:ec:90:8e:1e:47:0c:2d:3e:19:
ec:10:a2:8b:f7:46:e7:db:4a:1f:18:0e:db:24:b8:
a0:f8:47:00:5d:e9:bc:8f:d8:7a:db:49:dd:21:83:
e8:58:f3:96:53:8e:1d:7f:eb:49:15:37:a0:12:91:
ba:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:31:08:8E:52:58:0C:39:18:8C:34:73:01:FD:92:DB:F9:EE:00:34
X509v3 Authority Key Identifier:
keyid:A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/uzEIjlJYDDkYjDRzAf2S2_nuADQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.128.0/21
80.72.240.0/20
185.55.180.0/22
194.45.26.0/24
217.24.0.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:ce:0b:dd:e5:e9:0b:83:3e:c0:81:87:f7:5f:66:23:33:3f:
eb:85:c7:51:2f:ff:8b:05:95:d8:d0:db:f5:39:5e:0b:bd:6a:
37:55:00:24:86:61:b1:83:43:a6:96:34:a5:fa:3d:47:3c:d3:
cf:51:9c:31:ac:6d:ff:f1:11:01:da:34:a0:b3:92:ed:68:77:
98:67:b1:76:ff:ea:5f:b6:0a:b6:0b:f6:9f:59:6d:71:90:bb:
c4:78:19:4e:a0:12:66:a4:e8:55:44:f6:55:20:87:f6:04:cb:
e9:b8:a0:9a:97:01:2b:35:2c:1c:35:70:b0:27:60:83:ee:86:
54:18:f4:a3:ca:c7:8b:b4:c4:dd:3c:bf:86:1f:dd:b3:77:31:
98:8b:50:f8:27:02:b9:a5:c7:60:6b:ba:93:c0:80:39:89:ac:
e3:29:cc:97:ef:0e:75:c2:7c:6b:f7:06:89:6f:b3:4c:02:51:
33:92:5f:77:2a:99:86:fb:d0:58:e9:3f:a4:fa:25:17:de:d1:
97:26:be:d7:64:43:5d:e0:70:fb:f3:f9:17:1a:85:76:05:5c:
f3:f1:35:e4:c9:d4:f5:ec:56:37:b1:7e:59:72:70:0a:f8:d4:
bc:47:18:5c:6e:19:3c:5d:03:90:a5:4c:96:f4:5d:f2:eb:98:
6f:cb:4a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:42 2025 by rpki-client