Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/UQK4oCziabrEXPnSY8_HzHuEFs4.roa
File: UQK4oCziabrEXPnSY8_HzHuEFs4.roa (raw, json)
Hash identifier: IFp04dEallHzxHBEZ430RoZEeB0gdiEO3nyP4l5IzLg=
Subject key identifier: 51:02:B8:A0:2C:E2:69:BA:C4:5C:F9:D2:63:CF:C7:CC:7B:84:16:CE
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 01942368ECD31A049EC181CDFD1B2D3C3008
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/UQK4oCziabrEXPnSY8_HzHuEFs4.roa
Signing time: Wed 01 Jan 2025 19:47:46 +0000
ROA not before: Wed 01 Jan 2025 19:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2586
IP address blocks: 62.65.192.0/18 maxlen: 18
81.90.112.0/20 maxlen: 23
82.131.0.0/17 maxlen: 17
85.253.0.0/16 maxlen: 16
87.119.160.0/19 maxlen: 21
91.213.43.0/24 maxlen: 24
94.246.216.0/21 maxlen: 22
94.246.224.0/19 maxlen: 19
95.129.192.0/21 maxlen: 23
145.14.16.0/20 maxlen: 20
145.14.32.0/20 maxlen: 20
146.255.176.0/21 maxlen: 23
178.23.112.0/21 maxlen: 23
185.13.16.0/22 maxlen: 24
185.72.28.0/22 maxlen: 24
194.55.8.0/22 maxlen: 22
194.150.64.0/22 maxlen: 24
194.204.0.0/18 maxlen: 20
2001:1530::/32 maxlen: 32
2001:1bf0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:ec:d3:1a:04:9e:c1:81:cd:fd:1b:2d:3c:30:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Jan 1 19:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5102b8a02ce269bac45cf9d263cfc7cc7b8416ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:77:43:e5:8d:f2:88:9d:26:23:5a:5e:a6:4a:
e1:c6:ca:cd:15:d0:b9:a0:ab:76:5e:37:b8:8d:0c:
b1:63:c9:ac:58:57:64:41:8d:d4:9c:ac:aa:62:a7:
bd:de:01:e5:25:1e:56:b2:c3:c7:2a:e0:5b:05:b3:
a7:62:7e:10:98:d7:ed:bf:51:04:4a:c7:8c:62:80:
4f:f4:ee:6c:16:d7:af:ac:5d:c7:f7:2f:f5:1b:40:
32:9a:f8:27:d4:5e:16:2f:db:b2:96:81:99:c7:e6:
8a:b6:d6:c8:1f:15:b6:42:28:a0:7a:f8:55:ee:ee:
28:9e:b8:b2:10:ea:95:23:ff:88:46:05:35:8b:70:
1b:e9:1a:eb:66:5e:d2:ea:0e:40:4b:f8:83:d4:97:
51:1c:e8:41:03:e4:71:9e:79:8c:fc:5f:77:88:cb:
56:ad:0f:89:78:c9:1c:38:64:7d:33:06:82:08:53:
60:e2:4e:75:97:d6:40:90:60:ad:75:14:e2:7e:89:
60:9b:04:81:48:44:f9:05:66:5a:8c:58:c6:7d:4e:
29:7e:81:6f:15:eb:15:d7:d1:5c:7b:84:b2:5a:e0:
44:e9:b0:bf:b5:e6:1d:f5:8f:3d:6c:e1:d7:e7:7d:
47:97:ca:fd:c7:a4:c8:5e:b5:c2:fe:5e:58:37:6c:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:02:B8:A0:2C:E2:69:BA:C4:5C:F9:D2:63:CF:C7:CC:7B:84:16:CE
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/UQK4oCziabrEXPnSY8_HzHuEFs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.192.0/18
81.90.112.0/20
82.131.0.0/17
85.253.0.0/16
87.119.160.0/19
91.213.43.0/24
94.246.216.0-94.246.255.255
95.129.192.0/21
145.14.16.0-145.14.47.255
146.255.176.0/21
178.23.112.0/21
185.13.16.0/22
185.72.28.0/22
194.55.8.0/22
194.150.64.0/22
194.204.0.0/18
IPv6:
2001:1530::/32
2001:1bf0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:06:58:f1:cc:da:41:fe:52:6f:93:ac:11:24:de:40:79:af:
49:45:72:29:c0:b4:a3:4a:e7:86:02:fe:c2:b6:31:e9:a3:6c:
16:db:89:94:12:ed:99:38:9b:11:eb:94:93:48:56:41:91:42:
4c:e6:bf:0a:e3:f0:16:fd:a8:5b:9d:e8:42:a6:cd:f2:86:0b:
3d:ce:18:67:d5:56:e8:03:ab:8b:bc:c2:1b:80:49:f6:04:68:
60:6b:62:33:b9:f4:a1:b6:7e:64:1b:41:c2:97:51:f8:bb:42:
66:20:1d:3f:6d:d7:c2:a4:b2:ce:b7:38:b6:03:80:ad:54:53:
a7:6a:f5:6a:39:f4:13:6a:4a:e3:aa:50:72:2a:03:6b:73:fc:
a2:ff:c0:7f:9d:6b:9d:7b:e0:3c:9a:ad:d7:0d:c2:1e:31:ec:
34:ef:c2:cd:5b:fd:45:a9:b9:04:2b:d5:aa:3c:75:ca:3e:d1:
5f:7d:72:68:7f:b4:39:2c:63:5e:c4:98:3a:29:19:0f:b2:34:
a7:d1:b7:fb:4f:a8:2c:1c:12:9c:db:c0:ff:1f:88:fd:f0:49:
4d:22:d5:9a:33:0e:2d:0a:49:66:71:a7:e5:bf:d4:36:6a:7f:
94:d9:1f:88:79:6f:e4:cb:48:f8:f1:47:7f:76:73:f3:94:f7:
67:b5:6f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:17:09 2025 by rpki-client on console.sobornost.net