Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/UYQwhD4luTCUu0PCAY6S9fVvQB8.roa
File: UYQwhD4luTCUu0PCAY6S9fVvQB8.roa (raw, json)
Hash identifier: xwaHQTXwHl9OCxbP17eG8J9sJZEQNFLx/yHQgL2r4Fs=
Subject key identifier: 51:84:30:84:3E:25:B9:30:94:BB:43:C2:01:8E:92:F5:F5:6F:40:1F
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CB93C02849FECA1E91FE3BB50824B
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/UYQwhD4luTCUu0PCAY6S9fVvQB8.roa
Signing time: Wed 01 Jan 2025 01:48:23 +0000
ROA not before: Wed 01 Jan 2025 01:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202169
IP address blocks: 91.215.48.0/22 maxlen: 24
185.19.188.0/23 maxlen: 24
185.19.190.0/24 maxlen: 24
185.240.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:b9:3c:02:84:9f:ec:a1:e9:1f:e3:bb:50:82:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=518430843e25b93094bb43c2018e92f5f56f401f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b4:0d:b7:da:90:83:02:dd:87:08:6b:a3:b6:
09:88:8d:29:e7:e9:eb:f6:11:95:d0:5f:b4:5d:bd:
c1:6e:a0:8d:e0:ed:14:3b:74:e6:67:99:85:1a:4a:
55:61:58:c5:4f:41:83:82:a3:e8:c7:f9:79:4c:89:
f8:25:fa:01:2e:55:82:4e:2a:a4:a8:2f:9a:14:79:
b4:67:45:9f:d8:15:f9:b4:4d:5e:c7:c9:f3:bc:91:
6e:40:6c:25:14:7b:a7:48:3f:45:c2:1a:84:2d:9e:
d9:88:e8:1f:49:63:a4:ec:84:ef:2c:be:f5:05:fd:
fa:aa:2c:da:84:55:07:96:a2:62:a8:33:a0:1f:12:
58:78:be:3c:b9:8f:2b:a4:4d:9f:50:a5:94:3f:ab:
52:0d:c8:0a:8b:28:d6:f2:e8:b6:97:52:fc:e2:a4:
26:99:0f:d6:78:59:d3:ce:46:8f:8a:a4:bd:d6:e3:
9c:d0:5d:3c:77:27:9a:86:5c:a9:f1:73:92:85:e8:
44:9b:78:2e:07:cf:48:e5:e4:e5:67:c2:e4:e5:e5:
f7:3f:47:b9:c4:ad:34:bf:29:90:11:c8:37:72:64:
35:fc:9d:ff:8a:c2:52:b4:68:44:29:76:ea:8f:45:
80:c9:53:59:ee:87:86:cf:e4:e9:55:01:fb:27:40:
ca:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:84:30:84:3E:25:B9:30:94:BB:43:C2:01:8E:92:F5:F5:6F:40:1F
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/UYQwhD4luTCUu0PCAY6S9fVvQB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.48.0/22
185.19.188.0-185.19.190.255
185.240.80.0/22
Signature Algorithm: sha256WithRSAEncryption
66:d3:78:16:e4:d0:e6:96:74:45:78:70:f3:7e:bc:f7:2b:13:
aa:8a:6f:ba:1d:0a:dd:42:69:d5:34:a6:dd:d7:bb:70:a9:dc:
cf:cf:38:be:17:3a:39:94:da:df:a2:a3:9e:4a:c6:64:95:a1:
06:68:7f:d8:d4:13:e0:36:c4:30:f7:16:b5:da:d1:cd:b6:70:
36:79:56:4f:b3:22:3c:e7:e9:e5:1b:76:56:bf:cb:c0:1c:5c:
90:39:e4:cf:0f:98:54:42:3f:62:e2:02:04:3e:1b:ed:82:16:
f7:05:0b:0b:f2:5c:86:2e:63:c0:53:19:c6:14:33:45:f9:72:
72:cb:3e:7e:bd:10:6f:c3:95:ba:ab:41:3e:70:3a:96:b0:c8:
03:88:87:cf:b5:86:33:0c:0f:ce:05:2f:ac:16:a1:d2:1a:cf:
bd:f3:b5:28:44:87:19:b4:68:18:5b:21:0b:85:b7:8c:ca:49:
c8:56:0a:e5:ab:54:42:cf:53:30:61:da:47:08:1e:b8:c9:2a:
47:27:b3:88:ff:c2:72:14:18:16:b2:69:b7:09:9d:af:ef:4c:
66:9f:59:74:27:ad:37:6b:54:d2:1c:9d:55:43:c9:b8:54:f9:
a9:02:e4:67:10:3a:f7:46:c3:de:e9:9d:44:72:06:5e:98:85:
4d:94:6d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net