Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/UacNCcU_KJUFuUVDMacLGTYRt1Y.roa
File: UacNCcU_KJUFuUVDMacLGTYRt1Y.roa (raw, json)
Hash identifier: UmEeKvj5iTGiHz9n8Csi6f4hgPZD+m1pw3SMg/RgUMU=
Subject key identifier: 51:A7:0D:09:C5:3F:28:95:05:B9:45:43:31:A7:0B:19:36:11:B7:56
Certificate issuer: /CN=014efdfd0647ccba734b2a05660124eb8c067567
Certificate serial: 019426D99CD321E2E4A915536C30EA3D61F1
Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/UacNCcU_KJUFuUVDMacLGTYRt1Y.roa
Signing time: Thu 02 Jan 2025 11:49:43 +0000
ROA not before: Thu 02 Jan 2025 11:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48940
IP address blocks: 46.148.96.0/20 maxlen: 20
46.148.96.0/21 maxlen: 21
46.148.104.0/21 maxlen: 21
62.122.96.0/21 maxlen: 21
62.122.96.0/22 maxlen: 22
62.122.100.0/22 maxlen: 22
94.231.160.0/20 maxlen: 20
94.231.160.0/21 maxlen: 21
94.231.168.0/21 maxlen: 21
176.115.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9c:d3:21:e2:e4:a9:15:53:6c:30:ea:3d:61:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567
Validity
Not Before: Jan 2 11:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51a70d09c53f289505b9454331a70b193611b756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:bb:fe:65:8d:3b:9b:5b:67:9a:93:62:ee:
68:c3:64:d1:21:11:04:41:94:59:ca:07:54:7f:49:
cb:41:50:2d:fb:2c:b3:72:be:3d:25:a7:94:6c:e0:
a5:e1:b4:ea:68:07:4c:62:6d:f9:59:f4:6c:05:b6:
e1:01:1d:54:58:e5:8b:77:30:93:3b:00:d1:13:5e:
07:cc:d7:0d:07:38:ad:f6:12:2a:2b:bd:ea:54:6f:
f1:1b:61:2e:14:3c:0d:f1:88:29:99:a8:bf:e2:cd:
75:2a:b5:f8:ef:4b:a9:f4:2c:6b:54:4c:9f:b0:a6:
b9:e9:5a:a8:24:72:06:b4:15:2a:c5:9f:ac:db:f4:
c3:f3:e7:57:2b:24:fc:13:a3:26:33:3a:25:ed:d2:
49:02:ce:4f:af:8a:9c:f7:2a:58:60:41:41:ba:04:
bc:62:15:65:ba:58:3c:8c:2c:23:1e:bd:ff:b8:ef:
3f:18:7c:f2:50:1f:b9:8f:5e:ca:6a:39:8e:1a:72:
a1:56:35:b4:42:87:9e:ed:c2:d7:29:07:b5:db:ac:
ae:93:ac:33:ed:9d:25:d3:17:37:2d:88:9a:da:80:
85:ef:6f:fc:7d:04:43:e9:07:d9:46:44:1f:d4:a2:
84:a3:1d:6d:8f:22:a5:38:e6:18:9f:6d:b2:ff:ab:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A7:0D:09:C5:3F:28:95:05:B9:45:43:31:A7:0B:19:36:11:B7:56
X509v3 Authority Key Identifier:
keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/UacNCcU_KJUFuUVDMacLGTYRt1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.96.0/20
62.122.96.0/21
94.231.160.0/20
176.115.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:ba:48:b9:e3:25:ac:f8:41:07:d9:04:69:a0:84:2e:e1:1f:
a3:00:d5:9c:b8:ba:65:e0:59:02:f8:3d:1d:9a:97:00:ec:0f:
ee:7a:d7:ed:4e:ca:97:eb:cc:95:f4:6c:2a:99:55:e8:92:c0:
d5:a9:d5:2e:c9:0b:29:05:12:4c:97:43:53:4d:1e:41:25:dd:
01:2c:c9:6f:d6:9d:a6:5c:8e:60:14:df:6c:bc:c7:9b:d9:1f:
b8:cf:fc:2e:1e:13:27:65:b4:0f:23:e0:d9:68:40:7e:90:92:
6a:bb:2a:f0:a9:ae:1c:43:a5:3c:3e:e0:c9:68:25:9b:48:0e:
03:ad:05:95:2e:8f:57:b4:d8:a6:89:d3:e0:3f:f3:b3:77:c3:
1e:5b:86:3f:41:10:9f:17:99:85:76:23:0a:da:14:35:52:e6:
57:2a:8d:57:52:22:91:e7:98:2c:dc:70:46:ab:c4:4c:5f:0d:
b8:8a:a0:15:62:83:60:1b:af:f2:2e:b2:ed:cc:0e:fe:2b:cb:
6b:f5:b4:ed:df:5e:66:6e:a8:f3:79:30:95:c4:6f:b5:3d:e4:
53:e7:1e:cd:e5:e5:65:01:2f:ed:a0:ea:8f:e3:7f:cd:f9:9c:
9b:c4:04:30:0f:0a:a2:0f:a1:e2:df:bf:ab:d5:51:4e:5d:b2:
ad:a8:eb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:53:19 2025 by rpki-client