Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/UwUESHieH5BIS8uK530R-UtQndQ.roa
File: UwUESHieH5BIS8uK530R-UtQndQ.roa (raw, json)
Hash identifier: PzJcIDDTUJTOJuHw+/hYvMewqZC3K+De7WCHfRwBdCw=
Subject key identifier: 53:05:04:48:78:9E:1F:90:48:4B:CB:8A:E7:7D:11:F9:4B:50:9D:D4
Certificate issuer: /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial: 0194206818E9C63BE464EB9DB76AD038F5B5
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/UwUESHieH5BIS8uK530R-UtQndQ.roa
Signing time: Wed 01 Jan 2025 05:48:00 +0000
ROA not before: Wed 01 Jan 2025 05:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25353
IP address blocks: 46.235.56.0/21 maxlen: 21
81.201.192.0/20 maxlen: 20
185.183.188.0/22 maxlen: 22
2a03:2600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:18:e9:c6:3b:e4:64:eb:9d:b7:6a:d0:38:f5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Validity
Not Before: Jan 1 05:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53050448789e1f90484bcb8ae77d11f94b509dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:0b:b9:b8:95:00:ee:ea:e6:31:64:17:d6:
57:e1:35:05:01:8f:e4:9b:3c:0a:b8:42:ea:21:48:
d4:3a:4f:8f:77:78:ff:e5:f7:bd:50:c0:23:da:0a:
d6:02:a2:d3:19:c3:78:7f:ed:53:f8:83:37:a6:7d:
df:d9:97:5c:3d:c4:ab:30:b8:30:e1:79:b4:15:67:
9d:1a:61:73:90:86:31:d6:bc:16:85:ed:bf:25:7e:
3e:fe:6f:f5:15:38:05:82:d7:64:8d:5f:c5:cf:05:
f8:08:38:83:d6:93:c7:69:b3:f4:f7:a5:6b:51:7b:
36:aa:76:b0:35:22:95:99:b8:fd:f9:cc:52:80:18:
b7:f3:d5:b4:ce:65:d9:ec:f0:bc:9b:7e:dd:a9:d0:
dc:3f:e4:ff:3d:ec:08:1b:08:ba:78:1c:2f:68:87:
1f:6e:f5:f9:3d:b4:c6:89:4f:74:59:66:0e:52:f6:
74:b8:6a:fa:d9:74:ca:ea:fc:83:96:f8:34:c9:3a:
18:c6:0a:9b:5f:f7:9f:6d:cd:ed:42:b9:c0:b5:f6:
99:a3:bb:aa:55:f7:02:7c:54:52:fe:b1:98:78:20:
48:20:4a:a0:0f:6d:e6:40:d8:d7:ea:59:83:82:a9:
00:87:6c:be:cd:75:0d:a1:1d:f0:1c:1d:b4:37:4f:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:05:04:48:78:9E:1F:90:48:4B:CB:8A:E7:7D:11:F9:4B:50:9D:D4
X509v3 Authority Key Identifier:
keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/UwUESHieH5BIS8uK530R-UtQndQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.56.0/21
81.201.192.0/20
185.183.188.0/22
IPv6:
2a03:2600::/32
Signature Algorithm: sha256WithRSAEncryption
bf:df:4a:5e:64:ce:ee:7d:a4:ec:30:bb:16:dd:7b:76:d6:9a:
d7:a4:cf:6c:6b:01:cb:45:dc:a7:49:dd:bb:a2:44:5d:5e:73:
8b:e3:27:ac:6a:27:1b:e9:d6:72:88:80:26:e5:8e:9a:58:ce:
04:55:46:93:fa:77:d9:6c:01:49:cd:e3:ad:56:3c:3c:d4:db:
7b:9d:ee:60:95:b5:e7:b1:e8:11:41:e1:ba:0e:02:cb:8b:60:
ba:2e:ea:7f:32:af:2f:c0:a6:44:f8:6e:03:2a:fd:cb:67:e9:
f7:25:7e:6b:34:b0:13:87:d9:c6:af:55:b6:04:89:84:5e:03:
ae:78:76:92:8a:4a:c6:7d:e2:7f:65:3b:9a:46:e0:18:4d:77:
dc:48:a6:eb:59:e6:19:ab:ad:55:80:fd:d4:3e:8f:bb:ef:16:
cb:6a:be:3a:34:9a:dd:5d:2d:a0:87:22:1e:13:d8:dc:5d:97:
d1:55:4f:f4:98:e4:5b:b2:44:33:cd:c9:bb:49:76:84:84:3f:
8b:c3:ad:c0:3f:aa:70:42:ca:0c:80:cf:76:26:60:b2:c7:b0:
56:c5:be:4e:80:f5:6c:fe:a3:64:10:e8:c3:73:78:9e:c8:69:
17:4c:e8:2f:56:a4:78:5e:a4:1e:c6:dd:87:50:d3:fb:38:c3:
da:fe:f5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:11 2025 by rpki-client