Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/ujK7196Gk_c3ddVaz2vNjb1yuKM.roa
File: ujK7196Gk_c3ddVaz2vNjb1yuKM.roa (raw, json)
Hash identifier: oPbTKsm4Ke6sVA27ztN+8OGkGTX5DqK9hqJSWTYFs3k=
Subject key identifier: BA:32:BB:D7:DE:86:93:F7:37:75:D5:5A:CF:6B:CD:8D:BD:72:B8:A3
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 01942746D93C0F97EB4DD8145AC5FEA4EB2D
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/ujK7196Gk_c3ddVaz2vNjb1yuKM.roa
Signing time: Thu 02 Jan 2025 13:49:01 +0000
ROA not before: Thu 02 Jan 2025 13:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25804
IP address blocks: 46.183.88.0/24 maxlen: 24
46.228.144.0/24 maxlen: 24
178.79.198.0/23 maxlen: 23
178.79.218.0/23 maxlen: 23
2a02:3d0:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:d9:3c:0f:97:eb:4d:d8:14:5a:c5:fe:a4:eb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Jan 2 13:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba32bbd7de8693f73775d55acf6bcd8dbd72b8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:18:4a:e6:5b:63:7d:7a:dd:68:11:44:66:
82:1d:84:ba:3a:d9:09:d2:05:a0:e9:ac:c4:1b:a3:
d9:f4:ef:9a:af:a6:83:8e:61:0b:52:22:ab:de:64:
72:64:89:84:0c:1a:ea:ea:cb:da:1a:f7:4e:be:ab:
9b:13:92:88:af:dc:0c:b8:2c:c6:3f:53:3f:ae:30:
2e:e8:10:6e:73:cc:53:ae:80:b6:ff:a4:99:b8:9d:
dc:b9:39:10:00:6c:d0:f9:4e:d9:68:b5:e1:63:85:
b8:71:35:05:96:33:38:9f:22:06:0d:c3:b9:2f:94:
20:70:2f:52:de:5b:44:32:68:6f:2b:82:1d:e3:03:
9c:82:97:d2:dd:4b:a9:cd:bc:38:a9:2e:ee:01:73:
09:87:f9:43:5f:5b:49:27:b4:99:67:e5:ce:eb:1f:
ee:88:36:90:35:62:e2:f4:9e:a5:0e:a1:7f:85:fa:
0d:22:d1:95:af:1c:92:5e:3e:a6:57:4d:e2:00:cb:
75:cc:dc:51:65:1f:df:86:c7:0e:b1:1b:69:82:77:
b6:2b:a7:e7:33:1a:80:0a:bd:b1:a5:aa:95:f1:43:
36:d9:e0:bb:a8:3b:f4:9b:fa:1c:24:62:16:cd:99:
42:68:d9:20:28:35:d9:81:a2:a4:d7:4f:81:cf:76:
eb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:32:BB:D7:DE:86:93:F7:37:75:D5:5A:CF:6B:CD:8D:BD:72:B8:A3
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/ujK7196Gk_c3ddVaz2vNjb1yuKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.88.0/24
46.228.144.0/24
178.79.198.0/23
178.79.218.0/23
IPv6:
2a02:3d0:8::/48
Signature Algorithm: sha256WithRSAEncryption
88:bf:4b:19:23:e8:a4:70:d9:0f:f8:8e:0f:79:a2:8c:a7:6d:
69:0c:26:43:b3:7d:af:22:b2:23:88:0f:38:fa:96:8c:63:6d:
86:5a:42:6e:3e:85:89:1f:b8:a3:1c:31:59:95:43:db:0c:ea:
44:f8:39:84:84:ae:ac:4f:fc:25:5a:7e:d7:52:6b:99:cb:1e:
36:6d:53:14:c1:0b:42:bd:ae:5b:e7:7f:d7:1c:a9:8c:46:c7:
8d:3d:6d:d1:45:20:0f:f4:34:02:89:01:1e:2b:6b:cb:51:5b:
7c:1b:ed:98:44:42:af:4e:f5:e2:cf:4e:16:f3:31:ce:8e:43:
5c:e9:27:1b:d8:97:71:f1:dc:74:38:ec:af:de:a1:dc:ca:a3:
01:71:f3:f6:21:1b:72:26:d6:30:d6:4f:23:dd:5f:43:95:06:
1d:24:8e:b2:da:7e:53:2d:4a:01:32:8d:88:52:89:07:7d:5a:
77:ba:08:44:b3:46:12:a0:b7:98:ff:f6:d7:37:2b:ca:5f:89:
16:67:fb:0d:7a:fc:aa:27:46:8c:03:39:db:c0:47:1e:f4:af:
32:af:4a:59:11:3e:42:95:ea:9b:21:d1:38:8d:9b:15:8d:f6:
55:35:c2:0e:d6:50:60:98:23:2e:3a:c5:41:91:bd:ad:8b:6e:
d8:dd:90:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:01:53 2025 by rpki-client