Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/Uc7Gw0WDW5zdDRKa954NyTzqv6g.roa
File: Uc7Gw0WDW5zdDRKa954NyTzqv6g.roa (raw, json)
Hash identifier: FmxP6Uz7faOa7pJaYu4u/4WUOpulDOhau3FqT5C1MnI=
Subject key identifier: 51:CE:C6:C3:45:83:5B:9C:DD:0D:12:9A:F7:9E:0D:C9:3C:EA:BF:A8
Certificate issuer: /CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Certificate serial: 0194258F9E7A9CCA402EC2709BFCBFD817FE
Authority key identifier: 9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/Uc7Gw0WDW5zdDRKa954NyTzqv6g.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201471
IP address blocks: 84.40.40.0/21 maxlen: 24
84.40.58.0/23 maxlen: 24
84.40.60.0/22 maxlen: 24
185.90.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9e:7a:9c:ca:40:2e:c2:70:9b:fc:bf:d8:17:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51cec6c345835b9cdd0d129af79e0dc93ceabfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6b:39:56:3d:9a:d4:6c:af:b3:43:ef:51:e9:
1f:b9:93:63:4f:dc:a6:bb:ad:ac:a2:28:14:42:ab:
5a:05:09:9b:04:1d:82:45:d5:00:83:23:6b:79:f7:
d7:89:7d:18:d8:30:0d:1f:be:15:c7:08:84:3e:77:
76:dc:28:23:1b:4f:7f:60:94:5d:4a:80:13:c5:09:
52:35:a3:c7:7c:1a:18:95:14:00:09:27:84:de:9a:
0e:5e:d0:29:46:92:74:66:49:22:9b:4b:2f:8f:c3:
34:84:39:e5:7f:11:47:24:af:cf:54:3c:d3:9b:58:
e3:cf:2f:7a:63:7c:3b:eb:95:b0:ce:45:6e:32:d9:
12:79:68:73:c0:93:72:bf:08:da:87:7a:2a:43:23:
60:19:f5:fd:94:33:59:a0:4c:07:0f:8c:4b:7c:bd:
9e:60:b0:74:85:4b:e0:85:22:4e:f2:05:de:70:23:
37:df:ff:fd:28:8e:4a:b5:bf:5d:32:57:89:d9:16:
ee:36:8e:4e:a9:79:33:4c:1d:df:9b:5a:2a:5b:cc:
3f:03:16:15:90:79:22:46:01:6e:4b:93:5d:ad:29:
53:c5:a8:09:37:2a:4c:f0:01:b6:cf:7a:fd:52:c3:
0b:de:7c:13:28:f5:a7:40:aa:de:e0:e2:cf:a6:fb:
1a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CE:C6:C3:45:83:5B:9C:DD:0D:12:9A:F7:9E:0D:C9:3C:EA:BF:A8
X509v3 Authority Key Identifier:
keyid:9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/Uc7Gw0WDW5zdDRKa954NyTzqv6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.40.40.0/21
84.40.58.0-84.40.63.255
185.90.48.0/22
Signature Algorithm: sha256WithRSAEncryption
92:53:b4:03:ca:de:a6:56:5e:61:97:be:2b:8f:25:cc:f2:2c:
39:5c:31:5e:5b:99:d2:dc:ee:e0:78:29:ea:52:b1:9e:e8:99:
73:7f:2b:fe:83:13:86:4a:ff:a3:50:6e:c4:51:00:fa:21:47:
20:0c:df:24:88:eb:6f:be:27:c5:47:e4:03:29:fa:f3:c8:5a:
db:0a:c3:71:28:c7:9d:9f:50:40:3d:75:f1:ef:a2:ca:ef:33:
f5:4b:5d:10:55:fc:e0:00:6e:af:3f:82:c2:0c:e7:5e:28:41:
f7:1c:2b:b6:3c:46:fe:8d:3d:4d:9f:54:de:ad:1a:d6:9c:2c:
e6:cb:6c:ff:20:c2:e2:c3:2d:97:b9:27:23:21:9c:6e:40:32:
d2:54:e6:e0:59:e3:b0:fa:76:4e:54:d4:b6:46:2e:4f:24:d8:
47:3e:12:45:1d:b7:b8:bf:43:23:32:e8:a6:9c:0e:f4:23:b6:
f2:17:73:56:3e:a9:5b:a5:e9:7a:fc:12:69:1c:21:b2:7e:4a:
f6:e3:23:a0:b1:71:69:ee:8a:67:18:44:3e:76:7b:da:28:3a:
cb:0c:3e:35:d9:4f:60:2a:f4:b4:b9:a5:18:e0:8f:1a:d5:d9:
9a:24:56:b2:b7:d0:59:e0:d4:83:3f:8b:23:f3:1b:f6:4e:2d:
9a:0e:04:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net