Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/af2671-0518-419f-99e0-a3199ea8d13e/1/uugq9XrsLvNu4gUxLVR1y_vCPw4.roa
File: uugq9XrsLvNu4gUxLVR1y_vCPw4.roa (raw, json)
Hash identifier: Nl9qZP7bwGBjYqzQPkVDeFAl3kPoK8weGeZU4fn0kog=
Subject key identifier: BA:E8:2A:F5:7A:EC:2E:F3:6E:E2:05:31:2D:54:75:CB:FB:C2:3F:0E
Certificate issuer: /CN=923603c981868916b0b1701dcf3720caa2484fdc
Certificate serial: 0185868C06C9CE002DBC7AA1AA09BBC09FEC
Authority key identifier: 92:36:03:C9:81:86:89:16:B0:B1:70:1D:CF:37:20:CA:A2:48:4F:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjYDyYGGiRawsXAdzzcgyqJIT9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/af2671-0518-419f-99e0-a3199ea8d13e/1/uugq9XrsLvNu4gUxLVR1y_vCPw4.roa
Signing time: Fri 06 Jan 2023 10:06:41 +0000
ROA not before: Fri 06 Jan 2023 10:06:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16044
IP address blocks: 91.226.252.0/24 maxlen: 24
91.226.252.0/22 maxlen: 22
91.226.253.0/24 maxlen: 24
91.226.254.0/24 maxlen: 24
91.226.255.0/24 maxlen: 24
193.34.62.0/24 maxlen: 24
193.34.60.0/24 maxlen: 24
193.34.60.0/22 maxlen: 22
193.34.63.0/24 maxlen: 24
193.34.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:8c:06:c9:ce:00:2d:bc:7a:a1:aa:09:bb:c0:9f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923603c981868916b0b1701dcf3720caa2484fdc
Validity
Not Before: Jan 6 10:06:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bae82af57aec2ef36ee205312d5475cbfbc23f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:af:ff:ba:f7:65:6f:63:71:06:11:36:d4:
18:d9:77:d1:51:6a:ba:21:fa:09:55:1c:c4:c1:cd:
f3:e9:d0:c8:d2:fe:27:cb:2a:62:03:af:09:12:3f:
83:84:33:cc:c6:d8:d5:f5:a0:e6:19:8c:75:8d:8c:
6f:6c:d6:e0:bb:0f:ee:bc:41:37:61:89:6d:26:92:
23:64:a7:6c:1a:cb:2b:3c:f5:bd:b8:97:38:a7:b5:
cc:a5:b0:56:e5:61:86:65:e2:d3:e9:fe:4b:49:bd:
a9:6c:ca:b8:42:ba:07:b6:14:7e:f5:b5:e1:45:fb:
b0:24:b5:45:6d:b9:bf:ac:50:99:4f:91:4e:7a:16:
b4:fb:f9:cd:94:23:38:2f:34:96:fb:2b:30:bc:88:
4e:b2:b8:e6:c6:e2:a4:e1:d0:39:dd:ac:57:19:35:
d1:ed:c9:68:cb:f5:70:81:06:f8:ef:9a:6a:31:64:
54:8e:2f:03:4b:25:b6:8d:a5:6a:f2:3f:0a:6c:a2:
fc:8b:ed:da:36:fe:ca:85:34:86:b3:8f:6a:89:ed:
70:76:2b:21:ec:b0:e6:f1:4d:dc:1b:89:0e:5a:2d:
c9:a2:9c:4c:2d:79:83:7e:c6:3a:1f:32:38:37:36:
9d:26:67:be:39:64:f5:d4:1e:2b:f7:13:84:bf:d8:
2e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E8:2A:F5:7A:EC:2E:F3:6E:E2:05:31:2D:54:75:CB:FB:C2:3F:0E
X509v3 Authority Key Identifier:
keyid:92:36:03:C9:81:86:89:16:B0:B1:70:1D:CF:37:20:CA:A2:48:4F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjYDyYGGiRawsXAdzzcgyqJIT9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/af2671-0518-419f-99e0-a3199ea8d13e/1/uugq9XrsLvNu4gUxLVR1y_vCPw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/af2671-0518-419f-99e0-a3199ea8d13e/1/kjYDyYGGiRawsXAdzzcgyqJIT9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.252.0/22
193.34.60.0/22
Signature Algorithm: sha256WithRSAEncryption
88:f1:17:bf:ee:18:01:8d:16:1b:12:f6:f6:05:ae:70:7b:87:
76:cb:33:b8:6d:0e:ad:73:e8:78:2e:12:a9:4e:4b:9f:4b:5b:
7b:59:c8:19:a9:c6:b8:26:f5:bb:d3:ed:f8:cc:60:ee:a6:22:
57:2a:4c:f2:e1:05:b7:20:ce:b9:98:a7:10:e8:53:2c:f2:dc:
a9:0b:b2:8e:6f:6e:d8:d9:7e:47:78:15:a7:d9:53:a9:c9:ff:
b4:88:ab:9d:dd:9e:93:98:a5:61:61:f4:ac:71:32:20:e5:f9:
6a:d1:73:ad:56:7b:0b:49:7a:3b:fd:fd:f3:5e:45:8c:18:38:
96:6f:2c:e5:ea:ed:21:dc:ff:7b:fe:b8:d8:b3:e3:f8:72:43:
01:51:e1:6d:d1:92:17:1e:d6:c0:3d:79:06:a8:ef:de:ba:fa:
32:0d:51:35:cc:b3:16:41:32:47:80:3d:2e:89:c8:1c:c5:d1:
66:8f:3f:ca:2d:c8:0e:ff:13:3a:2e:4d:7e:8f:1a:57:a4:fd:
8e:4a:92:e2:2f:2e:28:50:60:a3:bf:f5:10:81:e5:27:fb:7e:
76:0a:4e:18:36:a3:56:77:ee:d2:fa:f4:49:2e:7e:2e:fd:02:
51:93:ef:45:99:2d:e1:d0:de:25:94:8b:ff:97:1f:0b:eb:79:
82:bf:c2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:02:40 2025 by rpki-client