Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/UgfsaZW_71NE_ZLHN7omkdTwQeU.roa
File: UgfsaZW_71NE_ZLHN7omkdTwQeU.roa (raw, json)
Hash identifier: 1Ht27MXENjxxwlDl8dmef7TBwHdd6Y1nwAvb+Yfw8oU=
Subject key identifier: 52:07:EC:69:95:BF:EF:53:44:FD:92:C7:37:BA:26:91:D4:F0:41:E5
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019611087879FD6855B8A7A7449692C4139D
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/UgfsaZW_71NE_ZLHN7omkdTwQeU.roa
Signing time: Mon 07 Apr 2025 16:14:49 +0000
ROA not before: Mon 07 Apr 2025 16:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211056
IP address blocks: 45.11.186.0/24 maxlen: 24
45.81.16.0/23 maxlen: 24
45.81.16.0/24 maxlen: 24
45.81.17.0/24 maxlen: 24
45.81.18.0/24 maxlen: 24
185.201.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:08:78:79:fd:68:55:b8:a7:a7:44:96:92:c4:13:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Apr 7 16:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5207ec6995bfef5344fd92c737ba2691d4f041e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:df:50:50:2d:7c:18:06:5d:62:e0:b3:ed:68:
90:b2:0a:86:26:b8:9f:ba:e7:59:56:d6:3c:39:2a:
ac:dd:bb:cc:c0:82:17:2b:db:ed:bb:c1:ae:8f:26:
83:46:0b:6f:2c:33:92:23:91:65:29:62:28:57:09:
aa:35:0d:a2:8b:51:19:f3:b1:19:0e:5e:b1:fd:50:
55:93:e0:ea:5f:c1:fc:cc:3f:96:c7:fd:c7:06:a8:
60:a8:72:cc:7e:4d:00:6c:8a:d0:21:a3:dc:8b:b2:
be:19:eb:ce:1d:8d:bf:59:69:97:ba:50:2a:d7:03:
de:64:1c:65:8a:06:59:46:39:2a:83:d7:c9:ee:dd:
b2:41:8a:44:d2:e4:44:22:41:3b:07:17:3d:eb:9d:
97:85:49:25:19:6c:15:e2:94:68:57:84:37:f5:09:
31:dd:3b:ef:b7:c3:f3:84:d2:ef:f5:c1:87:c8:48:
13:0b:9f:d5:17:b9:b4:45:e3:fe:74:28:a5:37:f1:
8d:9a:05:c2:d5:c7:4f:59:cb:75:c8:f0:9f:0d:4c:
ca:cd:2b:62:7d:6c:e8:a2:b4:ec:64:68:49:a5:92:
b8:6e:cb:0b:f0:f8:de:56:b8:c3:17:f2:0b:5e:13:
9b:77:a1:75:50:a4:5f:95:10:24:c6:8b:33:dc:13:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:07:EC:69:95:BF:EF:53:44:FD:92:C7:37:BA:26:91:D4:F0:41:E5
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/UgfsaZW_71NE_ZLHN7omkdTwQeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
45.81.16.0-45.81.18.255
185.201.49.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:22:aa:3c:43:f3:53:5f:65:3d:90:0a:fc:65:da:d4:7c:2d:
7b:55:33:5c:12:eb:ba:0f:6c:b3:29:0d:3e:ee:8e:45:9e:16:
f5:d2:d2:36:81:dd:18:a0:49:9d:ff:3b:b0:ef:aa:3a:77:88:
9b:a8:6f:2c:a1:31:9c:ea:6d:78:25:c8:fd:2e:ff:c8:2b:3a:
b6:3f:fb:e9:eb:09:ba:43:05:ad:b1:3d:f9:75:24:9a:22:f8:
43:f0:ba:73:12:37:cb:b6:22:b9:e9:92:ff:90:25:ce:a4:55:
a4:7d:fe:24:6f:14:94:e3:2a:88:03:8b:85:c5:78:3d:15:b7:
9b:e2:c0:04:4d:37:38:eb:24:e7:fa:4e:fa:3c:a1:8d:b6:a8:
61:ef:25:60:82:5a:62:18:9b:67:93:73:86:13:b4:bc:08:ae:
48:f1:be:53:4e:24:53:4a:58:08:11:ec:f2:a6:a6:9e:9d:81:
93:58:2f:81:89:78:8f:5c:5e:75:8b:12:0f:5e:df:6d:48:79:
08:05:33:4a:4f:78:af:ab:a2:f2:c1:26:9d:56:3d:88:eb:a2:
79:94:ed:3b:64:9c:4c:d0:46:50:ae:be:09:41:63:a7:ff:88:
76:b7:20:47:34:a4:99:46:a4:61:c4:4a:a0:75:3c:3a:a1:b7:
f5:6e:54:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:11 2025 by rpki-client on console.sobornost.net