Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/uTA8mSJ_3Pm9uHRtbBQGox8CCms.roa
File: uTA8mSJ_3Pm9uHRtbBQGox8CCms.roa (raw, json)
Hash identifier: JKMyKU4R0Hs07ETR6QJe5cFRF5p9HW1pjj1e0SHJl68=
Subject key identifier: B9:30:3C:99:22:7F:DC:F9:BD:B8:74:6D:6C:14:06:A3:1F:02:0A:6B
Certificate issuer: /CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Certificate serial: 01942369D9B4DD8A0262BED94B04185CE671
Authority key identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/uTA8mSJ_3Pm9uHRtbBQGox8CCms.roa
Signing time: Wed 01 Jan 2025 19:48:47 +0000
ROA not before: Wed 01 Jan 2025 19:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202112
IP address blocks: 92.249.27.0/24 maxlen: 24
193.57.35.0/24 maxlen: 24
2a13:ec2::/47 maxlen: 47
2a13:ec7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d9:b4:dd:8a:02:62:be:d9:4b:04:18:5c:e6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Validity
Not Before: Jan 1 19:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9303c99227fdcf9bdb8746d6c1406a31f020a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:b0:94:e6:3d:e4:aa:a0:59:f6:48:c8:44:
94:c8:f7:99:8c:2a:78:b3:34:7c:c1:5b:1c:1e:64:
da:89:98:56:99:04:46:cb:fd:57:29:76:e0:42:69:
22:c6:6e:99:1d:6d:2b:78:2d:8b:72:ec:b2:ee:54:
ba:d1:bb:fb:43:8b:e3:2d:8f:f9:9a:3f:eb:ba:79:
68:17:7a:3c:26:66:cf:c8:3c:9b:12:5b:82:38:8b:
14:fe:88:da:96:59:42:2c:71:26:81:d5:4b:af:8e:
10:5b:fb:7a:32:aa:80:5f:7c:75:b9:6e:c6:d2:e4:
ad:fe:69:ee:b1:a2:f1:ae:d7:ae:3c:4e:92:fb:04:
25:0a:29:6e:32:43:f1:31:74:53:af:96:b0:73:6d:
42:e1:6d:75:d6:91:e8:99:19:ea:d0:a0:29:6d:a5:
2d:7a:a8:c5:41:8f:bc:76:32:a8:10:60:2b:14:01:
9a:b2:35:03:8a:89:46:2d:02:58:6b:37:32:c2:ea:
d0:0c:43:44:c0:b7:f9:99:e4:4f:f1:11:5a:83:59:
e4:c2:ce:6b:cd:07:2b:db:96:eb:f2:fb:ad:cc:14:
20:54:cd:83:a3:f7:b2:d1:00:50:7e:c1:a5:03:93:
95:2b:a6:8d:52:a4:c8:78:e7:d3:ee:d3:cd:3e:ba:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:30:3C:99:22:7F:DC:F9:BD:B8:74:6D:6C:14:06:A3:1F:02:0A:6B
X509v3 Authority Key Identifier:
keyid:76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/uTA8mSJ_3Pm9uHRtbBQGox8CCms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.27.0/24
193.57.35.0/24
IPv6:
2a13:ec2::/47
2a13:ec7::/48
Signature Algorithm: sha256WithRSAEncryption
8a:a2:03:6d:d0:f0:70:5b:fd:fb:2d:39:16:e5:f4:cc:79:64:
a8:47:5e:8a:8c:fe:3d:2f:39:61:e1:55:14:62:8d:62:45:18:
1b:e4:e7:c5:84:7d:62:1d:e5:19:99:5b:02:8c:60:88:4f:8b:
4c:9e:18:f3:53:b7:88:9d:1f:52:9e:af:09:a6:11:fe:69:59:
e8:85:00:d4:1b:a0:57:18:d9:4d:57:03:ee:1c:68:53:09:0e:
72:8e:f8:b6:2a:2c:72:6e:83:84:ba:49:d4:d6:b0:ab:94:9f:
7b:35:40:d8:24:af:67:08:bc:a3:16:83:30:fb:25:70:17:28:
43:02:62:7a:74:b5:59:66:d7:34:22:52:04:5d:2d:a4:24:11:
72:58:64:ef:30:7d:f8:74:57:c3:5c:56:d1:ef:14:db:c1:ca:
1e:cf:51:5b:4b:dc:9a:f6:d5:e0:ca:5d:05:76:2f:c0:72:74:
7c:e7:55:d4:09:27:22:4e:5e:41:bf:8d:15:f9:d6:6d:e5:c2:
34:0c:d8:4c:d2:2e:56:8b:a7:65:ad:6d:32:66:48:05:e8:9f:
39:5c:7d:42:65:f0:8b:9d:ad:e3:6a:bc:0f:26:30:5c:8c:b4:
ba:44:b1:81:3b:5c:20:66:a6:4d:29:33:fe:e2:66:c2:9c:b6:
2a:21:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net