Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/uAY7hVAuFrjWUoNPpdRgTEHtcz8.roa
File: uAY7hVAuFrjWUoNPpdRgTEHtcz8.roa (raw, json)
Hash identifier: ATwY0nwj3G5EjIg+VZz3Y24NdHZrssfo8WEV62/YzO8=
Subject key identifier: B8:06:3B:85:50:2E:16:B8:D6:52:83:4F:A5:D4:60:4C:41:ED:73:3F
Certificate issuer: /CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Certificate serial: 01942444CDFE839A1CC8DC66FAEADB3BF18D
Authority key identifier: 6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/uAY7hVAuFrjWUoNPpdRgTEHtcz8.roa
Signing time: Wed 01 Jan 2025 23:47:56 +0000
ROA not before: Wed 01 Jan 2025 23:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34232
IP address blocks: 176.53.194.0/23 maxlen: 24
176.53.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:cd:fe:83:9a:1c:c8:dc:66:fa:ea:db:3b:f1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Validity
Not Before: Jan 1 23:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8063b85502e16b8d652834fa5d4604c41ed733f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:a8:0b:29:69:00:55:d7:a9:bc:68:69:e2:
a6:04:02:3b:ea:bd:b5:86:7c:ef:c7:97:92:81:c1:
14:58:3f:3b:66:8b:7a:bf:67:1f:bf:84:77:dd:48:
21:3b:24:52:37:54:d9:69:81:21:95:6b:49:3a:de:
a7:f6:2e:f5:d3:cc:20:76:76:17:10:87:47:2d:b1:
18:b6:26:64:71:d2:c6:8e:b7:02:6b:61:c0:d6:81:
e8:e4:23:f2:ea:3e:1d:78:50:ef:00:12:4a:62:cb:
f1:c4:f9:95:3c:3a:e3:36:02:5f:bd:c2:e2:74:f3:
cf:59:79:34:f3:a9:20:ef:1a:fb:f1:de:22:b7:55:
4d:94:4b:a5:39:f2:e4:69:c4:60:de:96:54:ba:3c:
6e:18:f6:52:0a:37:5a:dd:12:9c:73:4a:03:8e:a1:
41:bb:50:f1:b9:d9:b0:70:7f:99:18:b9:b9:1f:c6:
36:e3:86:f5:f6:10:a7:36:d0:95:58:4e:4d:29:05:
9e:bd:24:da:48:1a:37:1a:c8:76:46:3f:b4:3c:6b:
38:f1:39:5e:80:b9:77:31:70:86:59:de:96:b1:ac:
6c:6c:3f:f8:67:1c:e8:52:99:d8:cc:e3:86:30:77:
04:56:c0:d6:45:2d:2a:ae:1b:f8:f5:95:82:1c:f0:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:06:3B:85:50:2E:16:B8:D6:52:83:4F:A5:D4:60:4C:41:ED:73:3F
X509v3 Authority Key Identifier:
keyid:6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/uAY7hVAuFrjWUoNPpdRgTEHtcz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.194.0/23
176.53.208.0/22
Signature Algorithm: sha256WithRSAEncryption
18:0b:0d:7b:0f:00:97:5d:08:51:ee:0a:0c:08:2f:f1:e0:3c:
ba:57:b9:20:f0:4d:67:2a:c9:fd:e5:d5:64:e3:77:21:5f:0f:
8d:d6:a8:8e:20:21:51:a7:75:60:e0:ac:4c:00:8e:98:aa:54:
d9:86:15:bd:c2:81:b4:0c:c6:0c:c0:17:e4:cd:a6:e1:16:a8:
f4:c2:7b:9d:71:48:a4:5c:ab:2e:91:aa:75:32:01:c1:a6:da:
e0:13:a1:3b:ca:86:78:54:b7:97:1a:92:58:92:79:c2:90:26:
40:80:d3:45:d5:5b:cc:ef:da:51:19:7e:3d:98:3d:ad:2d:ee:
aa:9b:23:ff:62:00:34:09:29:59:be:71:9f:96:77:07:7d:6b:
93:4d:3b:fa:08:c0:8f:a6:ae:c8:71:af:74:65:05:70:8e:38:
d5:82:15:98:9a:5d:5e:e9:fa:4b:be:74:6b:0f:f4:66:51:86:
f6:bb:4d:57:ac:d8:6c:90:b3:f3:a1:3b:ef:33:f4:ad:30:c0:
d2:14:87:c5:5b:b7:b7:eb:13:20:ea:c1:53:0f:c7:00:52:ff:
d3:77:ab:d8:76:f2:ce:4d:8c:e5:a0:d7:c5:a2:ae:a2:39:56:
d9:79:88:40:81:db:81:63:31:8a:e3:2b:dc:6b:59:50:88:3b:
b6:69:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:55:02 2025 by rpki-client on console.sobornost.net