Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/uEtH-WMzGMQ39OBfcunTZEOsrt8.roa
File: uEtH-WMzGMQ39OBfcunTZEOsrt8.roa (raw, json)
Hash identifier: DDKUC3onp/8aOQ+NFAy3yM0YxsOrViUAEuEDZFkRFtg=
Subject key identifier: B8:4B:47:F9:63:33:18:C4:37:F4:E0:5F:72:E9:D3:64:43:AC:AE:DF
Certificate issuer: /CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Certificate serial: 0194252234672894E7E5B74612E12B8EBED0
Authority key identifier: F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/uEtH-WMzGMQ39OBfcunTZEOsrt8.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44684
IP address blocks: 45.139.80.0/22 maxlen: 22
45.139.80.0/24 maxlen: 24
46.235.224.0/21 maxlen: 24
93.93.128.0/21 maxlen: 24
176.126.240.0/21 maxlen: 24
185.47.60.0/22 maxlen: 22
185.101.96.0/24 maxlen: 24
195.10.223.0/24 maxlen: 24
2a00:1098::/32 maxlen: 48
2a04:ad80::/29 maxlen: 29
2a04:ad80::/47 maxlen: 48
2a06:1c80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:34:67:28:94:e7:e5:b7:46:12:e1:2b:8e:be:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b84b47f9633318c437f4e05f72e9d36443acaedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:8f:56:64:ea:5e:6b:8b:b0:3b:60:f4:b9:
17:89:a3:72:0b:13:a1:19:96:a5:e6:b0:6c:91:10:
08:cb:0a:43:00:5c:4c:2a:4f:87:50:28:9f:55:e3:
25:bd:be:13:a1:1b:e3:3a:a9:ac:fa:98:85:e3:9e:
41:97:69:82:fd:11:5b:0c:b0:c5:1f:4a:d2:67:6c:
71:ef:6f:3d:59:d1:6f:a5:bb:9a:d3:b3:56:73:06:
4f:d0:a1:59:7e:b3:53:05:7b:90:f1:3a:de:92:f7:
69:b2:be:86:45:9c:ce:6e:3b:4f:c7:b3:27:f8:c8:
30:a6:27:a3:91:59:88:fe:4f:3f:60:51:36:7e:23:
59:92:a1:7b:da:bc:e5:58:99:60:97:d4:10:76:9f:
45:81:4e:68:22:9a:0b:6b:c2:a6:75:fc:4b:2f:c2:
0f:54:27:6d:c2:fc:17:bc:ac:1c:82:0a:8d:18:80:
bc:fc:72:2c:8c:95:f3:c0:53:d1:5e:8e:a9:9c:a1:
7e:0f:69:1b:77:a1:90:88:66:ab:c3:95:18:5c:cd:
00:02:87:f4:3e:85:e6:e0:b6:f0:d0:b6:56:23:b7:
ff:1d:69:1f:7e:92:0d:d0:5a:6e:df:34:cd:94:be:
ef:75:72:ab:90:1b:2d:1b:8b:62:a0:26:6d:2c:a1:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4B:47:F9:63:33:18:C4:37:F4:E0:5F:72:E9:D3:64:43:AC:AE:DF
X509v3 Authority Key Identifier:
keyid:F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/uEtH-WMzGMQ39OBfcunTZEOsrt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.80.0/22
46.235.224.0/21
93.93.128.0/21
176.126.240.0/21
185.47.60.0/22
185.101.96.0/24
195.10.223.0/24
IPv6:
2a00:1098::/32
2a04:ad80::/29
2a06:1c80::/29
Signature Algorithm: sha256WithRSAEncryption
35:e3:5f:40:4e:4d:a1:99:f0:7a:b0:be:e4:53:84:d4:6c:48:
51:f6:b2:36:8e:e0:d4:b4:cd:d9:ae:6e:f1:93:01:61:16:23:
b3:7b:7d:7d:6a:b6:51:83:8a:ae:a7:60:1b:2f:0a:fd:76:dd:
65:94:3d:0d:c4:92:e4:d2:f5:8c:34:96:0c:7c:89:ca:6d:67:
a7:8b:6f:ef:24:58:86:1d:ca:df:3c:8d:20:ba:48:56:99:9e:
1c:99:28:58:c6:91:5a:16:56:cc:36:aa:1a:c8:5f:aa:e0:d9:
9b:08:38:11:f0:82:42:00:5b:7d:12:6f:63:86:a7:05:ae:eb:
04:79:c4:52:0e:11:18:88:a1:aa:f2:58:0a:e5:a7:ba:ff:f8:
2f:cb:00:0c:c5:00:bb:2b:8d:fd:5f:89:27:b6:df:91:f8:9b:
e7:31:3b:19:75:04:9d:a5:16:a2:91:3e:78:c6:c0:cd:b6:1b:
33:a2:a0:5a:c7:85:28:41:57:e9:15:86:b4:14:5e:b3:87:bc:
e7:25:9d:bb:1a:e0:ca:ae:5e:5c:3e:4e:3e:e6:54:f4:7d:b7:
02:2c:a7:28:9b:1a:35:07:4a:7b:51:55:a7:29:6a:37:6d:4d:
93:4e:ee:ed:04:2c:1f:e4:4a:99:9a:55:14:28:54:ee:b0:97:
1b:b0:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net