Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/UV4IRG9gccMEhZOHHsOgfmmgV6U.roa
File: UV4IRG9gccMEhZOHHsOgfmmgV6U.roa (raw, json)
Hash identifier: oJcBVkxVKzVfcqev7w0SwCanRhs+cCqxyAWIwsa0ejc=
Subject key identifier: 51:5E:08:44:6F:60:71:C3:04:85:93:87:1E:C3:A0:7E:69:A0:57:A5
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01942747D12F4B7D4818AC2D3E9397873DD3
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/UV4IRG9gccMEhZOHHsOgfmmgV6U.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 5.183.94.0/24 maxlen: 24
45.82.223.0/24 maxlen: 24
185.244.8.0/23 maxlen: 24
185.244.11.0/24 maxlen: 24
193.42.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d1:2f:4b:7d:48:18:ac:2d:3e:93:97:87:3d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=515e08446f6071c3048593871ec3a07e69a057a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:b8:05:a8:11:df:21:13:8e:c8:42:c4:7f:
c4:1f:97:68:92:c6:a5:57:70:5d:bd:9c:74:fb:90:
ca:03:ec:15:7c:4a:aa:0b:ac:11:77:da:4d:82:32:
02:89:c1:15:da:b2:bf:80:76:2f:ca:dd:a6:05:b5:
22:92:bb:ff:05:18:58:c1:b1:b0:58:2b:46:ed:12:
d4:64:c6:8e:47:14:ed:cc:0f:b1:fb:e8:8a:03:6e:
0e:46:cf:70:38:8c:87:34:2b:96:7d:f6:dc:2c:15:
ce:de:38:0e:95:c5:96:b7:a0:8e:b3:b0:7d:44:d8:
70:c1:6b:dc:32:ea:e1:6c:d7:02:8b:4c:17:e6:8f:
1a:d8:95:78:5f:75:3e:b1:c9:37:03:26:52:2b:ed:
35:1f:c0:b7:fa:4a:06:9f:7b:59:e2:38:f4:59:ec:
27:ad:ee:3c:ab:67:7c:8a:ab:d5:9e:a4:55:d5:24:
44:b0:e6:3b:dd:02:65:36:90:5f:d0:fc:0f:8c:78:
ab:2f:49:0e:1f:2b:3c:90:af:20:97:f2:59:24:5f:
13:ef:cf:16:0c:7c:bb:fe:04:2b:2f:88:ee:32:60:
b4:9b:3e:df:22:e7:08:19:74:80:0f:a7:43:28:09:
91:95:0e:9e:09:c3:e8:18:1b:e4:3d:98:39:22:e6:
ef:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5E:08:44:6F:60:71:C3:04:85:93:87:1E:C3:A0:7E:69:A0:57:A5
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/UV4IRG9gccMEhZOHHsOgfmmgV6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.94.0/24
45.82.223.0/24
185.244.8.0/23
185.244.11.0/24
193.42.226.0/23
Signature Algorithm: sha256WithRSAEncryption
96:3b:6d:90:08:d1:c8:eb:83:02:27:1e:5c:5e:c1:c0:3e:ef:
fd:d9:57:3f:8c:67:6d:33:fe:31:5c:d3:71:0d:e5:01:c1:81:
09:f2:fa:02:8b:cc:48:85:9c:d2:99:07:88:38:3c:d8:4c:05:
68:43:32:89:83:73:61:11:0d:25:55:b8:74:a9:d3:6b:40:70:
08:bf:04:f6:b6:9b:7a:48:b1:84:ff:36:50:0d:ab:25:09:3d:
a8:69:64:db:90:f9:e4:69:5b:e3:21:05:31:ce:8e:d9:46:b1:
88:b4:73:e1:a7:cd:3e:60:fb:dd:df:b3:13:26:6b:d0:8a:34:
43:e3:62:9c:fc:da:5f:87:1d:69:fd:9f:18:8a:d4:6e:12:85:
ef:b0:c9:92:bc:d9:74:05:8c:ef:06:b6:9e:14:e9:c9:1c:ff:
e9:03:f8:ca:d1:e2:ea:0f:a6:42:96:78:ea:27:8c:27:5a:f8:
30:5f:d4:52:7d:98:88:64:1a:91:92:6f:20:12:2f:63:eb:6f:
35:1b:57:a4:fa:a9:4e:04:8e:c9:fe:0d:68:6a:ef:53:52:05:
2f:e5:b1:ad:a6:f4:98:6d:d5:91:cf:e4:45:7f:30:78:b2:2a:
a3:27:59:f2:52:7f:85:c9:50:cb:08:a4:a9:de:8d:71:87:36:
8e:86:41:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:25 2025 by rpki-client on console.sobornost.net