Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/UvT-yR6sWH-Vw3RNjCtlyq-rIkI.roa
File: UvT-yR6sWH-Vw3RNjCtlyq-rIkI.roa (raw, json)
Hash identifier: YP99dzJs+LkhfkRRU0vzSck5KbkoE5DPqO7RJmrPKwI=
Subject key identifier: 52:F4:FE:C9:1E:AC:58:7F:95:C3:74:4D:8C:2B:65:CA:AF:AB:22:42
Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Certificate serial: 019425FDADD0E7609BF9386F3A4F36F19134
Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/UvT-yR6sWH-Vw3RNjCtlyq-rIkI.roa
Signing time: Thu 02 Jan 2025 07:49:29 +0000
ROA not before: Thu 02 Jan 2025 07:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43529
IP address blocks: 46.251.16.0/20 maxlen: 20
79.121.0.0/18 maxlen: 18
79.121.64.0/21 maxlen: 21
79.121.88.0/21 maxlen: 21
94.248.128.0/19 maxlen: 19
94.248.192.0/19 maxlen: 19
94.248.240.0/21 maxlen: 21
2a03:bf00:200::/40 maxlen: 40
2a03:bf01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ad:d0:e7:60:9b:f9:38:6f:3a:4f:36:f1:91:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Validity
Not Before: Jan 2 07:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52f4fec91eac587f95c3744d8c2b65caafab2242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:46:fb:c6:57:82:f3:60:71:c1:96:62:62:
7d:7b:c7:22:1b:f7:59:cf:30:eb:00:d4:b0:5e:0b:
f0:35:1d:8f:3d:fc:d8:c5:47:c6:48:bd:6a:3b:75:
0d:aa:71:ee:04:0d:bb:6f:4e:7b:67:23:14:2f:8d:
a0:fb:1e:08:4f:f2:93:9e:ea:88:80:f7:df:36:8a:
cd:d2:5d:10:c4:19:18:3b:9a:18:69:ff:04:1b:b6:
61:2b:d0:af:06:3d:db:c5:5e:7d:9e:4c:4d:2f:41:
38:1a:64:69:0b:13:80:b2:8b:37:f6:04:29:6f:46:
71:42:b3:42:64:05:2a:dc:72:ac:ac:e8:16:3c:7f:
06:f0:08:e0:04:a8:e4:dc:80:02:1d:93:10:9c:06:
dc:f8:73:ac:d5:ce:cb:07:4d:6d:7f:dd:50:4c:4d:
8e:03:8f:c1:03:52:45:4a:48:c8:d4:84:5d:cd:cf:
28:57:13:7c:c6:ae:e9:8c:7f:43:36:0a:cc:c4:c1:
4c:85:58:90:f9:79:8c:b1:c9:b1:20:90:8a:d6:a9:
41:73:74:c8:91:35:33:e3:4b:a2:da:95:87:a5:11:
62:dd:44:75:d7:04:8e:1d:4a:3b:8f:b3:54:40:15:
54:2a:a4:85:9d:dd:81:87:41:2c:1f:df:83:68:5c:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F4:FE:C9:1E:AC:58:7F:95:C3:74:4D:8C:2B:65:CA:AF:AB:22:42
X509v3 Authority Key Identifier:
keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/UvT-yR6sWH-Vw3RNjCtlyq-rIkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.251.16.0/20
79.121.0.0-79.121.71.255
79.121.88.0/21
94.248.128.0/19
94.248.192.0/19
94.248.240.0/21
IPv6:
2a03:bf00:200::/40
2a03:bf01::/32
Signature Algorithm: sha256WithRSAEncryption
91:15:b6:de:bb:fb:0d:51:dc:78:8f:44:39:de:27:42:ea:81:
40:ec:dc:18:1f:ec:9d:1c:84:10:82:8c:06:0e:3a:cd:d0:23:
33:23:fa:84:46:26:35:9f:cc:df:a6:8d:e4:e9:3a:a0:e2:e0:
25:6b:5b:08:47:ad:a5:0e:fc:bb:cf:4f:1b:dd:96:f1:65:34:
1c:5c:ca:ef:ab:6e:b9:a4:db:29:a7:60:1f:19:1f:2a:96:dd:
a2:c8:32:f9:c7:07:da:ed:ce:5e:62:bd:af:2e:20:b1:7b:a8:
39:dd:17:2e:0d:4d:53:94:a7:f2:3c:93:0d:1b:9d:8a:8f:64:
77:2a:08:d5:52:07:6b:1d:07:71:8e:40:38:4d:cf:68:34:eb:
5a:93:23:63:75:a4:50:58:c8:b5:3f:02:34:d1:84:c5:05:ae:
91:96:3e:2f:d7:cb:31:5c:b2:ea:8d:90:71:c1:0a:11:d2:ec:
5a:07:90:14:43:25:4d:e5:f9:85:a7:d9:e1:35:ff:e3:f6:be:
b0:61:02:0d:5a:35:0c:e6:c7:bb:97:a5:55:11:8c:c0:35:7d:
ae:61:cf:2b:b0:e4:fd:e9:b9:8b:ea:62:1d:d9:9d:ce:78:51:
53:1a:60:bb:e1:71:a7:2d:aa:a7:7c:d4:4f:a0:3b:07:cc:f5:
be:54:4d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:28:02 2025 by rpki-client