Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa
File: uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa (raw, json)
Hash identifier: 9FJQPnJf1+iHQwAWGEeso0fULqarFlyxqNgrRoa6pYY=
Subject key identifier: BB:13:EE:04:22:C8:88:BD:2F:BE:97:29:E6:21:B9:EE:7E:8D:C6:5F
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 01942144528F80EEB2221AD955B3C0056642
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa
Signing time: Wed 01 Jan 2025 09:48:33 +0000
ROA not before: Wed 01 Jan 2025 09:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57865
IP address blocks: 46.191.184.0/22 maxlen: 22
46.191.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:52:8f:80:ee:b2:22:1a:d9:55:b3:c0:05:66:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 1 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb13ee0422c888bd2fbe9729e621b9ee7e8dc65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:6f:0a:e2:25:45:d9:9c:35:52:10:3e:d2:
35:68:1c:1f:82:76:85:b3:cf:ad:1a:d7:64:7a:9c:
f9:66:44:ca:85:f3:6c:44:78:33:3c:48:be:ce:7c:
eb:44:43:e2:09:dd:33:c4:a7:fb:ed:f4:e2:6d:61:
fb:ae:ae:84:7c:17:f4:ab:8d:de:09:4d:e8:d4:68:
bb:a2:c0:fd:77:92:6b:40:3a:26:96:7d:09:0a:1d:
01:74:42:e8:9b:51:e3:80:94:48:2e:5a:67:4d:69:
22:04:71:81:17:c9:a8:db:8a:9a:ad:ad:9b:95:c5:
5c:45:b1:4b:5a:aa:11:bc:df:e1:92:ef:9e:77:5d:
b7:42:ce:4a:5a:1d:d5:19:d1:bc:ae:75:de:b0:58:
cb:ee:f5:d1:5b:6d:fc:0a:75:29:6d:dd:19:58:b0:
0f:f2:4d:b1:71:1b:6f:8f:b9:2e:97:da:44:7b:4a:
3a:cd:4a:a3:02:0d:d8:f2:f0:89:31:8a:44:3f:f3:
cf:4a:8e:40:cf:23:da:6a:74:83:ce:20:e2:36:a0:
38:db:ee:b8:ac:f4:85:6d:43:19:45:91:8f:03:c5:
3b:9a:de:65:18:6b:8c:95:28:d8:93:4f:25:e3:fd:
00:e1:3a:33:5c:6c:b2:39:6d:d4:98:e0:7d:27:7a:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:13:EE:04:22:C8:88:BD:2F:BE:97:29:E6:21:B9:EE:7E:8D:C6:5F
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.184.0/21
Signature Algorithm: sha256WithRSAEncryption
73:af:51:24:a9:24:9f:a2:80:f5:c8:b5:24:54:e2:25:f4:53:
a0:ff:87:85:63:a1:8e:7a:0a:56:4d:66:0b:57:a9:11:61:bf:
69:ff:e2:d9:1f:f3:2e:4f:56:4f:2b:a9:79:0c:1f:7d:94:31:
08:f0:c4:48:7a:22:8f:88:55:f6:2b:36:48:7b:e4:dc:8d:55:
16:bb:7b:d3:a1:fc:df:84:30:87:b0:58:f8:db:f6:fa:f2:b6:
76:4f:e3:e3:c4:eb:aa:8b:6b:61:f5:2d:ba:ea:04:0e:f7:7b:
00:e4:3b:84:f4:a9:5c:50:d2:38:17:b1:a6:17:70:ef:30:50:
86:2d:92:5f:a2:48:f8:5a:5b:54:d5:32:6e:6f:5d:a7:6b:10:
78:e0:a9:58:f8:13:bc:08:2d:8f:7d:24:24:87:72:90:61:31:
a9:1a:1a:c1:17:cd:e6:c4:34:b6:4a:18:51:39:51:33:17:01:
7f:e2:08:5d:b9:b1:eb:f6:8d:ad:c1:9d:e9:52:d6:04:d4:35:
0c:56:aa:1e:86:11:86:4a:75:c4:b8:bf:5c:75:fc:74:6a:19:
a9:08:14:85:9f:49:50:37:70:32:95:9c:2c:82:26:6e:76:b5:
ce:6c:87:9c:ef:2f:a9:6f:f2:65:a9:38:8b:6b:99:5c:b2:ce:
b0:2a:96:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net