Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/UvHXXFoVL7W8kRf_CmjRtC48uH4.roa
File: UvHXXFoVL7W8kRf_CmjRtC48uH4.roa (raw, json)
Hash identifier: E8q/i3b6Anio6852XqG98vgAFVWa9Xn560kQh/u0aSY=
Subject key identifier: 52:F1:D7:5C:5A:15:2F:B5:BC:91:17:FF:0A:68:D1:B4:2E:3C:B8:7E
Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Certificate serial: 019425FD92CDB76E4F478DDA79AE53D700B6
Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/UvHXXFoVL7W8kRf_CmjRtC48uH4.roa
Signing time: Thu 02 Jan 2025 07:49:22 +0000
ROA not before: Thu 02 Jan 2025 07:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203177
IP address blocks: 91.244.117.0/24 maxlen: 24
185.135.208.0/22 maxlen: 22
185.135.208.0/24 maxlen: 24
185.135.209.0/24 maxlen: 24
185.135.210.0/24 maxlen: 24
185.135.211.0/24 maxlen: 24
2a0a:6600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:92:cd:b7:6e:4f:47:8d:da:79:ae:53:d7:00:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Validity
Not Before: Jan 2 07:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52f1d75c5a152fb5bc9117ff0a68d1b42e3cb87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:00:d6:b5:02:44:18:bc:41:2e:be:47:7c:4c:
c7:2d:95:05:ca:ff:7b:50:43:d2:ce:db:a0:c1:06:
b8:15:7c:c2:22:5f:43:f3:3a:77:65:6f:54:4b:07:
eb:0f:4b:25:f4:61:bf:19:06:30:0d:ad:3f:c8:da:
ca:50:39:27:9e:7d:ff:03:a2:f2:b2:2d:32:3f:21:
ff:af:60:2f:36:d7:8f:28:5f:07:d4:14:79:b9:5b:
5c:3f:0b:42:86:51:89:de:26:70:e5:b9:e3:aa:26:
95:72:03:b9:99:2c:29:bb:5c:e1:61:a7:1e:72:ac:
dc:fb:6c:65:99:c6:6e:39:b5:9c:b4:48:dc:b4:cd:
10:1d:9a:3a:24:0d:2f:ba:43:6b:1b:0b:64:c1:d1:
2e:31:47:8c:3d:ed:e4:27:b0:fb:18:0e:e4:fd:c1:
ec:9e:e5:6a:fd:27:67:33:11:7f:3a:74:47:9d:a5:
23:02:4a:1c:56:b9:97:97:45:22:22:12:9e:1e:57:
97:ec:de:e0:61:f6:80:0b:66:31:51:d4:c0:a7:88:
e9:1f:73:2d:d5:d1:9a:de:f2:c0:62:20:a1:9f:08:
b7:54:fb:02:f9:e2:a6:cf:f4:fe:f3:42:95:7e:0a:
73:de:b8:8c:84:51:4f:10:50:07:c8:54:3a:39:07:
1c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F1:D7:5C:5A:15:2F:B5:BC:91:17:FF:0A:68:D1:B4:2E:3C:B8:7E
X509v3 Authority Key Identifier:
keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/UvHXXFoVL7W8kRf_CmjRtC48uH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.117.0/24
185.135.208.0/22
IPv6:
2a0a:6600::/29
Signature Algorithm: sha256WithRSAEncryption
52:54:70:dd:ff:ee:fb:0e:c0:48:d6:f4:79:00:58:01:96:fe:
15:1b:76:7a:69:8a:37:f6:51:31:5c:93:92:17:90:ef:21:bb:
20:b4:26:b4:4e:d1:12:3b:cd:c9:ea:04:85:f8:bb:33:de:ec:
f1:9c:11:bd:97:ac:90:81:fd:a7:ea:ee:64:b9:79:1c:76:69:
29:94:d9:31:a7:54:a9:a9:86:1b:33:19:ca:dd:90:4b:97:c7:
76:59:17:ba:8e:35:03:b0:38:6f:26:8d:a1:a6:55:1f:3f:3c:
9d:57:56:2b:c0:5c:f8:38:56:3a:96:76:e3:84:f0:ac:2c:9b:
d4:19:b3:8b:b6:d8:71:17:6d:e4:35:71:ef:8c:f2:ea:06:03:
0d:83:b2:ed:76:5d:73:15:86:40:51:af:19:c0:c7:bf:f8:94:
39:9d:90:1a:b1:8d:66:46:46:0a:87:01:ec:1c:29:86:2c:e2:
e9:fd:c3:c7:0c:d1:f7:5f:0f:38:ec:ef:25:75:e0:18:44:39:
18:4d:dd:18:a6:a0:e0:4c:e7:e9:0e:ad:8d:0f:a4:9a:b6:a6:
35:ac:53:93:0c:e3:e6:08:46:32:b0:86:16:68:64:b2:45:54:
26:f6:2e:6a:22:2e:f6:bb:3d:7a:ed:f2:ec:9a:e6:0a:8a:41:
2a:07:96:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:10 2025 by rpki-client on console.sobornost.net