Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/Uj_Ex-i3bgccX9Ywrmfj2Gd8p3c.roa
File: Uj_Ex-i3bgccX9Ywrmfj2Gd8p3c.roa (raw, json)
Hash identifier: gQTBzztodKYlSdLf+xqvvsK7yGiqlEUSgidRG/25lC0=
Subject key identifier: 52:3F:C4:C7:E8:B7:6E:07:1C:5F:D6:30:AE:67:E3:D8:67:7C:A7:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 0193F01220CF2B56A9899266B4FE9DE9B4C8
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/Uj_Ex-i3bgccX9Ywrmfj2Gd8p3c.roa
Signing time: Sun 22 Dec 2024 20:32:20 +0000
ROA not before: Sun 22 Dec 2024 20:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49895
IP address blocks: 46.254.76.0/24 maxlen: 24
46.254.79.0/24 maxlen: 24
2a00:e800::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f0:12:20:cf:2b:56:a9:89:92:66:b4:fe:9d:e9:b4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Dec 22 20:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=523fc4c7e8b76e071c5fd630ae67e3d8677ca777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:cb:c5:70:1e:45:2a:22:88:78:8f:e9:55:
ec:52:bb:14:7b:3d:fa:4b:00:c1:ac:67:bc:bd:46:
f4:8a:43:f9:0a:59:29:f6:e1:a3:34:8f:11:c1:06:
e5:2c:65:4c:00:79:26:0c:4d:4d:55:5e:a0:41:d5:
d7:21:a7:2e:d2:e5:49:91:5e:b6:4c:25:32:ba:c5:
5b:68:d6:7f:c4:c3:6f:f6:b6:fa:57:92:e6:bf:ab:
e1:57:5e:04:ff:f9:dd:33:0d:d1:3e:1c:55:10:3b:
8c:f7:5f:be:ff:d1:3b:3d:75:1d:73:00:8e:70:a6:
de:c5:dd:40:0e:20:8c:c8:65:9b:39:75:0b:52:3e:
23:c0:f4:dc:3d:90:e8:d8:7f:83:8f:7d:55:e2:73:
27:75:80:ba:1a:b8:1d:23:62:13:98:93:24:46:fe:
91:5e:67:6a:b1:a0:c5:0e:68:58:ff:3d:7f:b1:23:
69:fc:1b:91:b8:8d:db:78:3d:21:11:2b:c4:e1:f4:
81:52:97:ad:87:02:1e:66:1c:d2:c9:64:61:9f:52:
40:20:c3:17:8a:39:69:7a:96:c9:e1:8a:21:41:49:
6c:ef:37:a5:12:32:d2:6e:57:4e:78:33:5c:ce:7b:
c5:4e:87:67:82:41:0c:86:99:fd:6e:09:be:34:d8:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3F:C4:C7:E8:B7:6E:07:1C:5F:D6:30:AE:67:E3:D8:67:7C:A7:77
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/Uj_Ex-i3bgccX9Ywrmfj2Gd8p3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.76.0/24
46.254.79.0/24
IPv6:
2a00:e800::/32
Signature Algorithm: sha256WithRSAEncryption
30:9e:7f:a3:94:82:31:48:bd:19:40:6d:6c:aa:ad:26:b3:09:
76:9c:55:3e:3e:c7:3f:d3:8f:dd:b6:87:df:bd:fd:6a:8e:b0:
fc:8f:49:56:ab:b4:ec:fb:27:ff:fb:08:22:b1:2d:1c:1d:a0:
81:3e:b9:97:84:e4:1f:a9:0d:94:74:1f:ef:16:1d:5c:6a:82:
f1:27:f0:11:a8:1e:c2:5d:dd:5b:cb:33:2c:28:25:90:d0:87:
af:ec:38:a9:6f:da:ad:ed:7f:01:e4:37:58:99:6d:ab:a9:11:
4c:1b:58:bb:9d:34:ca:77:bb:81:0a:0e:0a:f9:93:f3:7a:a8:
20:02:6e:28:2c:3e:9a:74:51:66:7b:fd:ba:97:02:57:ba:43:
73:ed:d7:e6:25:8e:e8:1e:60:3b:d5:8e:66:75:e7:22:a4:18:
ad:c9:67:9c:42:ef:c5:b8:03:1a:0b:f3:63:83:11:b7:c2:e5:
e1:a9:9c:47:e8:24:1f:53:98:53:3a:98:e2:54:a1:8f:f9:2f:
2d:97:5a:aa:01:3e:c2:35:1d:09:e7:4e:0f:88:9c:ef:54:b4:
a7:0a:5f:d2:ce:77:8a:09:c0:f4:e2:42:d9:9e:99:b4:a2:5e:
3b:e3:9d:62:8c:fb:10:c2:9b:c9:0e:1a:81:c7:fc:cc:01:4c:
a2:9a:91:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:56 2024 by rpki-client on console.sobornost.net