Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/0UiMAD3K1Vd_o1ukey_EamOgfsg.roa
File: 0UiMAD3K1Vd_o1ukey_EamOgfsg.roa (raw, json)
Hash identifier: /lgJM2bqi/sUpmdCb7crrQqVayvXqEJ8evDSByU3DJU=
Subject key identifier: D1:48:8C:00:3D:CA:D5:57:7F:A3:5B:A4:7B:2F:C4:6A:63:A0:7E:C8
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 01942746DB25F3A29213173FEB365261F31A
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/0UiMAD3K1Vd_o1ukey_EamOgfsg.roa
Signing time: Thu 02 Jan 2025 13:49:02 +0000
ROA not before: Thu 02 Jan 2025 13:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60261
IP address blocks: 46.183.90.0/24 maxlen: 24
46.183.91.0/24 maxlen: 24
46.183.92.0/24 maxlen: 24
178.79.216.0/23 maxlen: 23
178.79.216.0/24 maxlen: 24
178.79.217.0/24 maxlen: 24
178.249.109.0/24 maxlen: 24
2a02:3d0:a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:db:25:f3:a2:92:13:17:3f:eb:36:52:61:f3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Jan 2 13:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1488c003dcad5577fa35ba47b2fc46a63a07ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:ad:8e:a9:6b:19:29:c9:b5:9c:40:c4:f2:
70:61:9b:77:fa:91:db:92:62:f1:50:cb:2f:b7:18:
50:45:60:a6:e2:81:be:e2:a7:47:31:bb:ef:a4:ab:
72:bf:12:c8:94:aa:92:2f:87:56:d9:c6:b9:18:cf:
11:2d:be:48:da:4e:15:9b:06:8b:63:d1:97:0c:d7:
39:fa:26:2c:1a:44:68:26:19:01:fc:85:55:f9:b5:
a7:d3:60:2f:62:ba:50:38:fe:e5:cf:5d:f5:e2:ef:
95:43:46:9e:e1:26:a7:a3:f9:75:62:25:4f:25:6d:
db:0a:90:48:bb:68:a7:5d:fb:c7:12:08:fb:90:aa:
62:91:b4:59:48:97:07:62:9e:69:6d:90:cf:26:47:
e8:9c:dd:8f:cc:17:86:c6:0e:06:84:72:d1:c5:82:
91:31:cb:63:b5:06:73:55:22:14:0f:c2:26:57:63:
a8:51:07:38:48:d9:07:b0:ca:5b:d2:76:05:30:1e:
06:a4:96:21:bd:e0:cd:af:a4:73:69:af:05:1d:97:
8b:d5:7b:bb:f7:f1:a0:e2:05:a0:1d:ac:14:a6:60:
35:f0:09:36:de:04:14:83:86:2e:2b:7f:ab:ee:e6:
5d:bb:85:a0:d8:6e:e5:ee:c4:67:fe:04:2c:8e:07:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:48:8C:00:3D:CA:D5:57:7F:A3:5B:A4:7B:2F:C4:6A:63:A0:7E:C8
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/0UiMAD3K1Vd_o1ukey_EamOgfsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.90.0-46.183.92.255
178.79.216.0/23
178.249.109.0/24
IPv6:
2a02:3d0:a::/48
Signature Algorithm: sha256WithRSAEncryption
73:83:18:76:df:9c:50:31:5f:7a:bc:b5:66:48:51:d0:52:fc:
ec:eb:22:cb:08:43:32:8e:9f:21:58:b0:2c:76:26:d1:40:63:
b4:22:59:75:13:7b:19:d2:00:53:58:cf:10:a1:f4:78:7a:5a:
58:10:70:ca:87:e2:fd:fb:ff:d5:46:ab:a0:2b:cb:36:17:1b:
5c:84:80:3c:6c:47:ae:1a:65:a6:d5:e2:78:4c:4f:7f:52:d9:
32:45:ba:b4:c7:e0:7a:4d:8c:30:51:49:53:b7:79:7f:ab:28:
04:40:12:19:b4:69:9d:93:9f:35:8c:a6:2f:09:6e:42:f2:9d:
ba:22:57:16:3a:62:50:2c:ac:eb:cb:ac:24:bd:ea:e9:46:5c:
b0:9f:3c:a9:0b:df:c4:e0:14:39:78:ff:de:09:21:3e:84:2c:
40:c2:5f:db:33:44:4e:10:0f:6e:3f:b9:18:90:75:5a:e9:9c:
80:ae:59:7f:e5:7e:7b:5f:5d:28:99:2e:57:15:0b:53:51:ab:
a4:d2:a1:eb:76:38:e9:e1:10:32:9d:9a:60:4f:87:69:93:e9:
27:35:6d:40:c5:44:70:da:0d:79:19:85:ed:0a:62:42:be:25:
b2:13:89:69:0a:a7:dc:a9:6b:7c:4b:0f:f4:b0:d3:db:33:5a:
96:d9:38:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:26:51 2025 by rpki-client