Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/UON5AT9SXUWq39L68I_y2_ZUikk.roa
File: UON5AT9SXUWq39L68I_y2_ZUikk.roa (raw, json)
Hash identifier: JwjZjFuzIaj/y6AQtmJH9bJqGEr4cg/qlCiSjx+pXxc=
Subject key identifier: 50:E3:79:01:3F:52:5D:45:AA:DF:D2:FA:F0:8F:F2:DB:F6:54:8A:49
Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial: 01961FF59BE5021BF7A179C626A54F3E0348
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/UON5AT9SXUWq39L68I_y2_ZUikk.roa
Signing time: Thu 10 Apr 2025 13:48:31 +0000
ROA not before: Thu 10 Apr 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8244
IP address blocks: 94.142.192.0/23 maxlen: 23
94.142.194.0/23 maxlen: 24
195.230.192.0/22 maxlen: 22
195.230.200.0/21 maxlen: 21
2a01:ac40:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:f5:9b:e5:02:1b:f7:a1:79:c6:26:a5:4f:3e:03:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Validity
Not Before: Apr 10 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50e379013f525d45aadfd2faf08ff2dbf6548a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:ad:6d:2f:2b:9d:9f:a5:31:0f:1e:90:3a:
69:2f:12:41:82:b9:40:4a:d4:f3:29:3c:df:c1:27:
b7:1e:a3:3c:78:a1:30:12:0c:67:ea:35:24:9f:4a:
23:d1:0a:7c:df:bc:1a:5f:b5:2e:48:f1:33:8f:86:
8c:63:b6:0e:d3:d0:68:8c:e3:85:98:9a:f4:a7:0d:
ad:04:34:58:cc:8d:ab:f4:32:9d:56:f4:7d:00:99:
2e:45:02:f7:ff:b8:ff:a7:8e:bd:b4:f6:cb:23:e8:
d7:f3:4f:dc:d0:a9:1a:16:6f:14:4e:c0:0d:ee:3b:
76:a4:7b:8c:75:69:21:24:07:36:e8:97:84:75:4a:
20:6a:7e:55:c0:c2:87:6e:e5:e8:6a:29:6a:53:c2:
72:82:12:ca:ae:f9:52:94:31:03:86:51:48:60:7b:
ef:dc:d7:4e:85:af:02:94:50:97:b1:c2:90:ec:68:
61:da:fa:e1:06:33:b2:ce:e9:4f:15:cb:0a:ad:78:
5b:f2:22:24:2e:16:fe:dd:82:cb:a6:73:12:0c:bc:
7d:76:c2:ae:95:5c:f1:bf:ce:86:2f:ec:e4:2f:55:
ee:f1:d6:7d:ce:76:33:5c:ff:78:b6:d0:3a:2c:7e:
4f:05:df:49:2a:35:13:58:49:9b:8f:86:52:18:64:
9f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E3:79:01:3F:52:5D:45:AA:DF:D2:FA:F0:8F:F2:DB:F6:54:8A:49
X509v3 Authority Key Identifier:
keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/UON5AT9SXUWq39L68I_y2_ZUikk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.192.0/22
195.230.192.0/22
195.230.200.0/21
IPv6:
2a01:ac40:2000::/36
Signature Algorithm: sha256WithRSAEncryption
15:3f:63:a6:9a:05:71:b0:81:68:86:a5:1c:b4:16:63:c9:69:
e2:77:e5:f0:e1:6b:1d:f7:ef:82:63:48:dc:03:80:a3:01:96:
a6:1d:a3:b5:94:79:24:3b:88:41:2a:72:f1:3e:3f:11:07:28:
df:4d:c6:bf:02:61:40:3f:3e:2d:76:f9:7f:e1:30:59:2b:fa:
a0:20:52:83:e1:3f:ba:96:6a:ef:de:22:ed:30:94:b3:41:21:
59:82:08:af:ea:a9:cb:f5:2b:ca:38:95:c1:0b:04:a0:45:2b:
e7:12:1b:c1:be:00:b3:d6:d0:11:59:48:04:fc:37:a2:58:f5:
49:e9:4e:7d:f7:cc:b1:d7:b5:b8:e6:95:fe:04:af:84:ea:b7:
7b:65:31:42:c2:9d:16:ea:74:3c:35:0d:d7:60:70:eb:34:16:
17:8c:a4:b9:a2:40:fa:09:7e:a6:98:3c:ad:3c:60:a9:7e:ea:
2f:06:54:fd:a7:75:12:e2:0b:45:af:db:bb:93:1c:fe:ae:19:
8d:b7:32:11:a3:06:41:ba:e4:19:8f:d7:4c:fc:8f:2b:3a:4b:
db:39:5f:e1:1b:0b:10:27:f5:96:c4:1c:7b:fb:62:b0:de:56:
39:35:2f:1f:f8:34:8e:bf:d9:93:9b:10:6e:64:0d:b1:91:6b:
c4:f4:57:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net