Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/UmPwqKyARZqa-K92MHrGqC9QyYg.roa
File: UmPwqKyARZqa-K92MHrGqC9QyYg.roa (raw, json)
Hash identifier: j/qBkJJtXcMUmDoWtmsXwP9m2yfPn26NNyaQXDeqLdE=
Subject key identifier: 52:63:F0:A8:AC:80:45:9A:9A:F8:AF:76:30:7A:C6:A8:2F:50:C9:88
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 01942444ECBD14FA04A57E3BF9C80EDF53B5
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/UmPwqKyARZqa-K92MHrGqC9QyYg.roa
Signing time: Wed 01 Jan 2025 23:48:04 +0000
ROA not before: Wed 01 Jan 2025 23:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15600
IP address blocks: 94.143.88.0/21 maxlen: 21
185.74.116.0/22 maxlen: 22
194.153.176.0/21 maxlen: 21
2a00:d320::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ec:bd:14:fa:04:a5:7e:3b:f9:c8:0e:df:53:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Jan 1 23:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5263f0a8ac80459a9af8af76307ac6a82f50c988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:d4:e1:ed:b0:c5:7a:33:73:41:8c:12:df:
f6:ce:6b:5a:4e:83:d7:e0:51:d2:e1:70:66:93:f3:
da:8b:bd:ae:ea:20:ae:4d:70:77:54:3e:8a:b2:a3:
b3:da:42:6a:53:69:92:a0:cd:e8:a5:b1:d3:e4:fd:
38:19:be:b7:28:17:1c:8d:14:7e:5e:61:45:f1:4c:
48:a8:c4:a7:05:96:bd:72:05:e8:b2:a6:3e:32:6e:
ae:70:05:48:b5:22:d2:a7:8a:93:b9:7e:bb:af:05:
8d:49:69:a0:65:d2:2b:85:25:65:e9:5d:31:3f:58:
38:dd:02:97:33:ef:17:eb:bc:ad:ab:0a:07:0e:ab:
70:96:38:3f:5c:b9:f6:30:d4:37:4b:dd:4d:c6:b8:
e8:60:1a:46:9a:48:a3:1b:78:24:a2:62:1b:72:80:
7f:54:fc:24:84:35:f0:e9:d2:f3:21:ca:ff:03:c5:
1c:ce:7a:8e:8e:5c:b3:d8:36:a6:af:70:ae:9e:09:
d7:42:03:2a:94:50:d2:a7:02:d1:f5:76:31:83:c2:
c3:93:15:d0:b7:82:b2:95:d4:53:e6:86:48:52:13:
71:6c:76:ec:c8:19:00:02:19:a1:52:43:19:05:35:
da:2c:67:40:ed:88:61:07:5c:93:bc:96:f8:0f:9e:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:63:F0:A8:AC:80:45:9A:9A:F8:AF:76:30:7A:C6:A8:2F:50:C9:88
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/UmPwqKyARZqa-K92MHrGqC9QyYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.88.0/21
185.74.116.0/22
194.153.176.0/21
IPv6:
2a00:d320::/29
Signature Algorithm: sha256WithRSAEncryption
b8:1b:6e:8f:20:29:05:7c:bc:d0:56:72:e7:37:7c:4f:02:c0:
8b:e2:94:b7:a8:e8:59:1e:9f:49:53:92:e4:d8:24:4f:f0:64:
8d:24:99:5b:45:b4:90:21:2d:7e:22:aa:d9:99:af:88:b2:e4:
0f:e8:9d:64:1b:51:64:94:59:e5:a9:2b:6a:cf:b8:9b:6d:cf:
69:b6:6f:2f:07:c8:ba:13:f1:9b:ee:5a:d2:32:0d:c4:58:61:
4d:13:ca:2f:f4:5c:fc:ca:a3:b2:76:6d:96:5f:9e:04:d5:df:
34:c8:3c:37:1e:1a:ba:49:93:55:f4:25:83:7d:3f:26:4f:e9:
52:14:e0:e3:ab:05:b2:4b:92:5c:f7:21:49:2a:c6:61:8d:0b:
85:7a:74:b7:a8:97:08:f4:41:f5:48:23:78:42:eb:95:d0:5c:
5d:1f:d4:eb:83:20:62:a1:6a:3a:f1:34:24:6f:70:80:cd:a8:
0c:e2:9d:07:36:5f:ba:b1:a5:61:79:ce:8f:32:16:07:10:2a:
78:f4:62:4d:a7:69:31:ba:78:60:43:ed:56:30:de:76:86:08:
d4:83:f3:71:28:85:64:a3:b3:44:49:7a:04:78:8a:b3:76:3a:
ad:76:eb:45:b7:65:9a:ca:a4:b0:b8:98:4b:cc:54:59:9b:72:
c0:df:2c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:05 2025 by rpki-client on console.sobornost.net