Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/Ujha7XxP98D3xulcV7MFKJ2FUK0.roa
File: Ujha7XxP98D3xulcV7MFKJ2FUK0.roa (raw, json)
Hash identifier: fQlcIKdy/eaJbe/2M1GqCZ9CE3CRZB+bKoGJevwXPtw=
Subject key identifier: 52:38:5A:ED:7C:4F:F7:C0:F7:C6:E9:5C:57:B3:05:28:9D:85:50:AD
Certificate issuer: /CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
Certificate serial: 019423D770E1E740389AF0187B61AEE32666
Authority key identifier: B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/Ujha7XxP98D3xulcV7MFKJ2FUK0.roa
Signing time: Wed 01 Jan 2025 21:48:29 +0000
ROA not before: Wed 01 Jan 2025 21:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20900
IP address blocks: 176.111.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:70:e1:e7:40:38:9a:f0:18:7b:61:ae:e3:26:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
Validity
Not Before: Jan 1 21:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52385aed7c4ff7c0f7c6e95c57b305289d8550ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:3f:fe:b5:e1:71:af:11:77:3e:e0:78:30:
fe:2e:a6:95:c8:ad:e3:23:7a:64:d3:0e:b7:5a:d6:
cf:ea:19:64:96:c0:62:a8:cb:6d:8a:01:a5:4e:9b:
fb:ab:0f:ae:ee:af:88:4f:49:48:0f:43:a2:4c:fd:
41:5e:fc:8e:d6:1d:55:e4:1c:60:00:d9:7e:70:5c:
c2:a2:e5:d2:fd:7a:e3:6a:ea:6d:0f:a7:70:6d:0d:
5c:eb:67:57:15:fb:6d:0e:21:9b:f8:8a:ad:73:0e:
a0:1b:53:55:df:5e:d1:d4:1e:b4:18:0b:34:de:0e:
40:b0:1e:c0:3a:9b:31:1c:02:b8:36:de:49:c4:c3:
74:78:b3:ba:b2:35:5c:fa:de:fb:4a:19:ec:5c:b2:
f9:25:2d:64:3d:c4:fc:96:ec:38:de:76:58:97:c3:
7f:58:42:58:f6:d6:a1:75:be:47:3e:12:5d:60:81:
c2:07:e6:51:60:30:2e:a1:5f:c0:10:71:0c:4f:0d:
e2:55:12:ee:8c:11:6d:ae:f5:bb:a8:12:10:10:30:
4b:ab:b6:ea:82:85:8e:82:27:52:a5:1e:c6:07:51:
02:52:c7:1a:bc:67:86:8e:07:ae:f3:a9:b8:bc:69:
6a:61:85:f7:f8:0b:04:94:25:c8:7c:07:c0:57:cf:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:38:5A:ED:7C:4F:F7:C0:F7:C6:E9:5C:57:B3:05:28:9D:85:50:AD
X509v3 Authority Key Identifier:
keyid:B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/Ujha7XxP98D3xulcV7MFKJ2FUK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.246.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ad:70:dc:66:17:34:93:89:f1:9f:4b:25:20:99:8d:00:69:
66:b5:04:e4:e9:37:0a:90:fe:91:c1:3c:2d:2d:ae:1e:d3:53:
2c:6d:82:4b:0a:ed:80:7d:ef:0d:07:78:4a:ca:ca:1c:e5:fa:
23:13:f1:ea:dc:05:5b:eb:99:ad:44:43:9d:55:9c:3e:40:d9:
17:4d:1a:bb:b4:45:e1:66:e7:4f:09:e5:32:e3:28:14:60:4d:
36:76:13:87:a8:82:37:fe:d5:17:e5:36:d9:88:40:27:5c:12:
ae:5a:d3:b9:aa:00:e2:a4:5e:d6:15:01:63:36:d5:57:d2:ef:
4f:f3:ce:49:09:ec:4f:e7:58:55:18:3f:48:66:23:6f:f9:41:
c0:c6:88:59:42:6d:49:67:e7:c3:b2:01:e5:04:7b:bd:51:d4:
b7:02:e2:61:67:06:d7:92:25:ae:9d:66:92:a3:19:6c:4f:60:
ef:e0:52:4e:68:3a:3e:21:8a:7d:b7:15:31:8c:38:41:85:de:
fe:aa:06:47:4a:f5:78:42:51:dc:8a:94:42:4c:1a:0d:92:4a:
eb:bd:28:4c:80:ae:87:71:a7:ea:fb:ce:49:9b:1f:f3:fc:68:
ad:5b:1c:c9:9e:85:a2:af:1e:f4:14:32:31:b9:1d:52:62:71:
5c:2f:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net