Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/Uga7lkbHD-v-uh8A_8oHbgCwXjA.roa
File: Uga7lkbHD-v-uh8A_8oHbgCwXjA.roa (raw, json)
Hash identifier: hmv7UPLFFmBr0e3HMje4/dQjNiIYMBPVXNKj9SALCsg=
Subject key identifier: 52:06:BB:96:46:C7:0F:EB:FE:BA:1F:00:FF:CA:07:6E:00:B0:5E:30
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 019422200181E7C9185C736356647B3F3F5B
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/Uga7lkbHD-v-uh8A_8oHbgCwXjA.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31059
IP address blocks: 46.227.165.0/24 maxlen: 24
91.200.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:01:81:e7:c9:18:5c:73:63:56:64:7b:3f:3f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5206bb9646c70febfeba1f00ffca076e00b05e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:46:6b:5c:3c:fd:6e:e3:11:4c:97:59:90:
a0:7c:18:1e:56:46:03:13:a9:7b:35:33:c1:70:a7:
ab:4d:20:f9:16:e8:0b:f6:6e:10:62:35:df:9d:a5:
86:e3:2a:9b:a4:dc:a1:8b:f0:a1:e2:d8:11:b8:9b:
ed:0d:05:52:8d:76:ad:f7:68:34:59:fd:17:17:9f:
b0:ae:10:0f:78:03:06:19:1d:c1:e7:7f:bc:4f:ac:
7a:f4:22:c7:5c:8a:d6:d7:02:74:34:c5:52:a5:92:
40:86:29:0c:65:c5:2a:96:55:c5:9f:80:e7:04:45:
85:26:f1:02:c2:66:8a:cc:4e:53:e1:2c:2d:88:af:
6c:ed:02:a4:23:bb:22:52:e3:9a:5e:66:77:a7:d4:
27:43:85:7b:ce:a1:e4:02:a0:9a:c2:3c:df:56:e7:
76:9d:2c:11:55:07:ad:f3:92:0c:77:ac:76:9d:cc:
af:5b:82:c3:4e:25:b9:67:68:90:e0:39:8e:91:1a:
6e:95:ff:03:9d:14:29:c2:d6:f9:54:05:46:d8:7d:
c4:21:f9:19:9d:e2:52:eb:ec:d2:9a:96:ad:49:fa:
ef:54:f3:02:75:92:3a:82:18:fb:5f:02:cb:3b:bd:
18:99:93:9e:fb:20:5b:02:c1:a1:10:b5:9f:40:34:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:06:BB:96:46:C7:0F:EB:FE:BA:1F:00:FF:CA:07:6E:00:B0:5E:30
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/Uga7lkbHD-v-uh8A_8oHbgCwXjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.165.0/24
91.200.178.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d6:72:e8:ec:16:af:f1:22:1f:3b:2c:13:b2:e7:45:1e:56:
73:52:d0:73:c1:d1:71:dd:04:33:45:ae:9e:67:48:3f:14:d5:
a4:91:bb:bf:86:50:4b:3d:63:02:7a:ef:d5:2d:eb:e2:1a:cf:
a1:9a:fc:79:0b:ac:d9:26:9e:df:85:a1:fc:55:0c:68:34:6f:
4a:4f:08:86:b2:ed:96:fb:51:45:9e:46:d7:08:e1:02:b2:03:
47:50:08:46:ed:6e:46:48:ce:ae:45:bb:8d:34:ad:cb:41:83:
46:50:29:eb:ef:0a:2c:48:dc:86:ab:74:d7:ab:a7:1d:74:73:
29:8b:8f:1e:c4:74:fa:76:e0:2b:b4:44:3e:f1:f1:86:b8:4b:
b5:09:f8:01:04:9d:dc:05:20:f7:da:1e:a9:17:e7:9d:c2:60:
cd:bb:6e:10:9e:46:b2:80:b8:e2:36:2e:cd:e2:67:fc:e0:f8:
4d:30:03:c4:b6:43:28:15:3d:d7:cd:ac:2b:0e:a8:d7:6b:61:
6f:41:b4:f2:6e:81:d9:2a:a9:64:3e:9b:a8:b2:79:0c:8e:14:
48:04:cd:fc:27:d5:65:62:76:48:ae:46:a7:d0:40:46:5f:26:
12:aa:1e:7d:7a:3d:26:b6:d3:2a:4d:42:81:2c:d0:64:bb:c2:
a1:b6:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 18:00:53 2025 by rpki-client on console.sobornost.net