Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/UZv1ymCovb-i08X3fkZv3jT2Y3I.roa
File: UZv1ymCovb-i08X3fkZv3jT2Y3I.roa (raw, json)
Hash identifier: Ngck0j9G5utiQaFVWOCDxHnx1F9yWaCjfOLfVg8Hhxk=
Subject key identifier: 51:9B:F5:CA:60:A8:BD:BF:A2:D3:C5:F7:7E:46:6F:DE:34:F6:63:72
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 01941F8C5ABB451FD52EE58AFEBAF4D939F8
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/UZv1ymCovb-i08X3fkZv3jT2Y3I.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35574
IP address blocks: 93.101.0.0/20 maxlen: 24
185.40.12.0/22 maxlen: 24
2a04:a9c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5a:bb:45:1f:d5:2e:e5:8a:fe:ba:f4:d9:39:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=519bf5ca60a8bdbfa2d3c5f77e466fde34f66372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:b1:3d:0d:c7:78:64:4f:f9:81:ec:32:87:
5a:f8:c7:23:ce:e0:d3:f6:8b:90:d5:0d:86:32:88:
24:da:ef:06:c8:8c:ac:15:1a:c0:f8:73:70:1c:fd:
65:4d:86:7b:d2:e4:bf:15:62:7b:7b:a0:7a:0e:b3:
8b:ec:2f:f8:46:62:ce:25:5a:e4:0f:61:58:6e:a4:
6e:5e:e6:38:c3:ef:10:f7:c5:cb:68:e0:b8:cd:f2:
7e:f8:2b:eb:c6:37:c2:f3:b8:d7:7f:70:9f:83:7d:
f1:e3:24:f9:41:5c:5d:25:9f:61:55:3a:33:b6:40:
dc:0b:45:15:5e:2b:a0:9c:6d:00:31:07:a8:09:33:
19:04:08:1b:34:c9:6f:f7:81:71:91:c1:f1:d0:11:
fc:48:3e:00:b8:3d:76:01:6c:b6:04:8d:eb:c6:20:
86:a8:db:84:03:c8:50:db:6d:4a:d2:01:76:1c:15:
a9:b4:fc:41:83:b6:8c:6d:24:05:c4:79:86:ee:23:
e5:d3:6e:08:45:c8:a9:10:e6:83:44:93:88:3f:69:
4d:76:d2:3e:f3:6f:52:e1:ca:8b:ca:f6:3a:c1:63:
95:48:ff:1e:7a:27:18:88:24:82:d1:3b:1e:f6:1a:
b2:40:51:c3:0e:f4:9e:d0:b3:ef:7e:e8:e4:41:00:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9B:F5:CA:60:A8:BD:BF:A2:D3:C5:F7:7E:46:6F:DE:34:F6:63:72
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/UZv1ymCovb-i08X3fkZv3jT2Y3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.101.0.0/20
185.40.12.0/22
IPv6:
2a04:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
76:2f:30:ad:b3:3c:70:63:ca:49:02:d4:01:06:6c:77:34:59:
95:e3:e4:3d:36:d1:e7:29:33:6b:8c:d1:d9:95:28:0d:8f:18:
9e:86:6e:de:7f:a9:c9:60:33:59:e5:26:4c:3b:ee:d1:f9:28:
63:e3:14:f8:64:55:17:ce:39:1e:eb:d4:5a:78:5e:d7:c2:f2:
31:9c:0e:32:05:4f:ae:14:e6:92:48:12:07:e3:4b:1d:e6:85:
ea:61:03:dc:96:69:dd:b5:96:e9:bf:a8:e7:ea:28:4b:4a:7a:
08:86:3a:95:b5:86:a3:fa:21:af:b5:9b:a6:cc:40:f4:c3:d9:
02:15:a4:5b:d3:44:7d:14:9a:59:02:5f:72:27:58:a3:9b:ae:
bd:e1:ea:50:af:2a:52:5e:1a:96:f0:93:62:4a:65:57:4b:cf:
dd:e4:74:f6:c5:41:b6:1d:88:6c:5e:a5:0f:c5:1f:70:4d:ec:
72:68:d9:65:2d:ba:b3:89:ac:18:62:05:6e:6e:e4:0a:ed:70:
e2:67:19:8b:47:30:d0:6c:94:21:d5:a6:fd:58:d8:12:e9:32:
34:e4:08:e5:0e:96:64:e1:32:4e:02:a9:4e:93:64:01:23:70:
08:69:2b:c3:b3:0c:7d:ca:aa:85:ff:fa:34:6c:c1:31:2f:57:
dd:b6:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:42 2025 by rpki-client on console.sobornost.net