Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uXdBuhKzl7TqagYxbnMVKfuzZgw.roa
File: uXdBuhKzl7TqagYxbnMVKfuzZgw.roa (raw, json)
Hash identifier: 439m9an3WKHP1JzPsBM0Kr1+N4e9+/KuslEwF/6KLxM=
Subject key identifier: B9:77:41:BA:12:B3:97:B4:EA:6A:06:31:6E:73:15:29:FB:B3:66:0C
Certificate issuer: /CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Certificate serial: 01941F8C22964AFE925EE7EF43C861C9976C
Authority key identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uXdBuhKzl7TqagYxbnMVKfuzZgw.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8301
IP address blocks: 178.208.192.0/19 maxlen: 24
185.74.72.0/22 maxlen: 24
185.74.72.0/24 maxlen: 24
185.74.74.0/24 maxlen: 24
185.74.75.0/24 maxlen: 24
195.244.192.0/19 maxlen: 24
195.244.204.0/24 maxlen: 24
212.120.224.0/19 maxlen: 24
212.120.236.0/24 maxlen: 24
212.120.244.0/24 maxlen: 24
212.120.250.0/24 maxlen: 24
217.65.48.0/20 maxlen: 24
2a01:8c40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:22:96:4a:fe:92:5e:e7:ef:43:c8:61:c9:97:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b97741ba12b397b4ea6a06316e731529fbb3660c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f7:eb:64:4b:89:0d:eb:b2:97:83:cc:e7:b6:
8b:6f:03:51:a0:85:49:72:eb:0d:37:b9:85:39:05:
9c:2b:6d:70:91:33:6a:10:93:7c:6e:48:1a:7e:38:
0c:69:c3:b6:2e:2a:7b:48:92:1c:61:dc:44:c0:dd:
41:8d:2b:e8:d3:85:db:1d:84:ee:32:92:17:b2:cf:
f2:25:8a:60:4f:aa:a5:a3:aa:51:08:57:0c:11:ad:
99:3a:d6:28:39:51:6c:00:11:c9:80:52:40:fb:51:
d3:60:b5:ee:c1:bd:74:3f:09:42:67:d3:8d:fb:41:
f9:e2:d2:df:76:0c:3c:ac:66:be:fd:6b:56:f1:18:
65:31:61:4f:e4:3b:b6:78:1f:40:f4:ec:d5:b4:6a:
e4:1a:16:19:79:6f:21:4d:a8:f4:d3:d7:1e:42:ab:
56:5f:b1:d3:eb:b7:73:c9:5a:d8:9c:ad:1e:b2:cc:
3e:1a:4c:f4:2d:01:2d:a1:0f:5e:56:e9:9b:1a:b3:
ce:92:64:be:26:f1:93:8d:6f:fb:ca:19:fb:ed:fd:
17:f9:f3:bf:b5:4b:1f:49:5b:64:1f:b2:87:d6:c3:
7d:51:bc:97:b2:c1:75:1e:f1:97:36:21:dd:07:ac:
92:a8:59:db:eb:80:49:95:3c:2e:6b:75:0a:8e:bd:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:77:41:BA:12:B3:97:B4:EA:6A:06:31:6E:73:15:29:FB:B3:66:0C
X509v3 Authority Key Identifier:
keyid:B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uXdBuhKzl7TqagYxbnMVKfuzZgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.192.0/19
185.74.72.0/22
195.244.192.0/19
212.120.224.0/19
217.65.48.0/20
IPv6:
2a01:8c40::/32
Signature Algorithm: sha256WithRSAEncryption
8e:2e:50:ca:81:62:10:6d:f3:1c:f9:3d:df:83:49:27:fc:6f:
06:76:98:fb:3b:59:92:43:3d:5c:64:7c:f3:bf:69:41:a8:94:
a9:7f:54:03:e8:ea:47:b7:c4:f2:a6:e2:0b:37:a3:54:73:0a:
3e:fd:e4:36:89:e2:c5:a3:5f:fb:d3:a9:9c:f8:34:a3:57:3a:
2f:42:22:10:3e:54:8f:0e:99:73:d7:13:ef:66:41:37:74:b1:
2b:5d:15:6d:e6:45:5e:ae:2a:94:24:2c:ff:2b:4c:96:0a:43:
f4:88:8b:01:00:af:81:71:e8:53:f5:8d:39:de:76:21:fe:c0:
11:2a:b7:b4:c3:f6:c6:6f:c0:ad:38:78:8e:0b:88:b1:ab:24:
a2:b2:85:f5:ae:93:5d:76:eb:0e:48:4a:54:56:d5:40:9c:78:
6c:f7:ed:28:10:80:0a:4c:ed:79:0a:89:69:40:62:eb:68:df:
2c:f4:4f:00:51:a8:0a:a4:26:fe:1c:e8:b9:87:21:20:05:09:
91:94:a5:f5:22:f8:97:ad:3d:b3:cb:d8:4a:e3:65:ba:01:8a:
15:45:c6:0b:12:fb:b4:7b:80:78:38:60:a2:03:68:f1:32:b6:
a9:63:2e:23:29:fb:50:89:f9:44:8f:b5:cd:a3:69:72:ff:e2:
6e:e1:32:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net