Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/UGBpl3oHNIS2Cd9_Sczzu0VBiiE.roa
File: UGBpl3oHNIS2Cd9_Sczzu0VBiiE.roa (raw, json)
Hash identifier: wSoOj4MFImWuZ5Z3plItyJ7lOAnvxzo7omn+Vgq6Vio=
Subject key identifier: 50:60:69:97:7A:07:34:84:B6:09:DF:7F:49:CC:F3:BB:45:41:8A:21
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 019420682C6B55A3CF6CCD804CC7A2CCADB1
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/UGBpl3oHNIS2Cd9_Sczzu0VBiiE.roa
Signing time: Wed 01 Jan 2025 05:48:05 +0000
ROA not before: Wed 01 Jan 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43500
IP address blocks: 185.130.208.0/22 maxlen: 24
185.139.218.0/23 maxlen: 24
195.189.144.0/24 maxlen: 24
212.46.44.0/24 maxlen: 24
2a12:b40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2c:6b:55:a3:cf:6c:cd:80:4c:c7:a2:cc:ad:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Jan 1 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=506069977a073484b609df7f49ccf3bb45418a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:aa:d2:55:83:21:5b:cc:8d:34:ae:56:d5:
06:6f:3c:10:8b:65:0d:62:e3:15:04:a7:ab:12:88:
5d:05:b5:f4:00:ef:2f:a5:45:d4:60:ea:c9:85:a3:
03:6f:bb:6f:5c:42:e1:4f:01:47:f3:b5:b0:d8:f0:
c4:51:c4:0b:28:85:26:d5:48:3d:c8:f9:17:50:90:
cb:f0:95:02:1b:e1:a2:f9:6f:e7:02:ec:b2:19:9f:
67:b1:6a:48:7a:9a:2b:d6:94:dd:fa:2e:74:1d:7f:
ac:d2:2c:06:5a:04:6e:43:72:da:49:54:94:62:b0:
6b:7b:83:79:92:bd:5c:20:55:8d:25:4f:11:2e:75:
94:1e:5b:b0:15:91:dc:98:92:82:5f:4c:2f:31:52:
c2:72:ac:e1:da:cc:ce:3b:e5:52:2b:75:d4:c7:3d:
58:bb:7d:95:0e:13:ce:b6:dc:78:3c:25:b8:7a:4e:
3a:00:0f:f5:97:a0:cb:e9:42:1d:2f:41:d3:f5:7b:
0a:08:ef:46:36:00:bc:2d:22:fb:14:f4:a2:88:6d:
69:c1:92:53:46:18:8b:f1:82:96:16:9e:f9:dc:7c:
7d:81:4d:fd:96:43:c9:e1:26:8c:d7:a5:25:c4:d0:
52:d1:58:8c:6b:b5:f6:26:a9:25:20:18:61:ff:01:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:60:69:97:7A:07:34:84:B6:09:DF:7F:49:CC:F3:BB:45:41:8A:21
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/UGBpl3oHNIS2Cd9_Sczzu0VBiiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.208.0/22
185.139.218.0/23
195.189.144.0/24
212.46.44.0/24
IPv6:
2a12:b40::/29
Signature Algorithm: sha256WithRSAEncryption
6b:70:c7:f5:be:94:ed:96:dd:7c:e5:01:22:5e:0c:06:d1:8d:
59:94:4e:fc:d4:54:c8:23:b5:6d:78:ab:ba:3d:76:80:9b:0f:
6c:3e:75:aa:82:56:99:0a:a5:c7:f3:01:44:f3:c8:c8:41:6a:
a9:98:84:bb:de:e3:3d:24:55:a9:25:07:53:27:e2:62:29:c2:
2a:51:11:60:40:4d:c4:c7:9f:78:16:3b:1f:09:e8:1c:87:d6:
ae:83:20:89:86:ce:99:08:e7:7c:6d:90:3e:7c:fb:6b:f8:a0:
fa:2a:0e:bc:6d:11:b5:02:9a:fe:97:26:33:ba:49:5f:52:3b:
07:e7:36:8f:1a:bd:d9:0e:d6:64:76:e3:b7:fd:85:05:86:0e:
45:eb:00:b1:5c:8c:5d:dd:ed:75:4b:80:20:c8:81:3b:d6:04:
e8:40:6f:78:00:ca:7f:a5:1e:ce:bb:a3:de:58:75:cf:e3:5b:
da:ae:d4:1f:ad:61:b0:53:d1:c6:60:f1:41:07:36:31:12:10:
67:b6:66:4c:83:5f:02:91:7e:79:28:ce:94:8c:32:ea:64:88:
18:a3:12:ce:84:57:92:b3:24:b9:93:58:e3:13:26:1a:07:be:
e6:b6:f1:32:ac:df:a8:03:c0:32:b1:7d:7d:74:88:8c:be:c3:
49:77:d8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net