Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/uvd1cKCOmqZYi8L4xtWD1skpDvw.roa
File: uvd1cKCOmqZYi8L4xtWD1skpDvw.roa (raw, json)
Hash identifier: +e/+widvxtIhard+pWDd7C4vDgFDP2T3458Wltd2Nbc=
Subject key identifier: BA:F7:75:70:A0:8E:9A:A6:58:8B:C2:F8:C6:D5:83:D6:C9:29:0E:FC
Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial: 01941F8C8177E56C7DA9079E2BA5227A6787
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/uvd1cKCOmqZYi8L4xtWD1skpDvw.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203501
IP address blocks: 45.86.116.0/22 maxlen: 24
45.87.196.0/24 maxlen: 24
45.87.197.0/24 maxlen: 24
45.87.198.0/24 maxlen: 24
45.87.199.0/24 maxlen: 24
45.91.44.0/22 maxlen: 24
45.91.45.0/24 maxlen: 24
89.37.88.0/22 maxlen: 24
194.113.26.0/23 maxlen: 23
194.113.26.0/24 maxlen: 24
194.113.27.0/24 maxlen: 24
2a02:7040:ff00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:81:77:e5:6c:7d:a9:07:9e:2b:a5:22:7a:67:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baf77570a08e9aa6588bc2f8c6d583d6c9290efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:fe:4f:60:16:f5:6e:67:ae:4b:48:26:26:
5e:5f:0a:97:ee:0d:40:b2:3d:5a:b6:a8:17:57:2a:
39:c7:a4:8e:81:5a:cd:4f:5f:e8:34:94:0e:43:e7:
81:29:14:97:6e:b2:af:60:33:fc:ff:39:10:0a:45:
6f:21:49:a2:03:54:81:0d:a3:9a:84:54:23:9d:3c:
35:f6:cd:79:35:03:e0:11:8b:94:fd:cd:bf:2a:4b:
cf:b1:1d:8d:75:fd:89:d7:81:b4:55:42:23:a7:f9:
a4:f1:c3:7e:45:fa:b1:89:5e:2c:5b:a7:f6:41:f9:
51:f8:5d:b4:fb:56:a1:5d:d0:aa:7b:f4:0b:9c:f6:
a0:57:9b:4f:f5:1f:a6:69:03:43:8b:da:2f:26:37:
f7:7c:e3:a7:ba:55:30:b1:4a:29:15:f1:c1:73:95:
8f:a2:0c:94:9b:c8:d6:f2:2f:a2:f9:87:18:8c:38:
7f:aa:71:23:f8:38:02:c3:4e:b3:6f:be:ad:26:9f:
35:f8:88:0e:11:92:f6:bb:e4:2e:e3:00:b7:4a:aa:
a9:ba:e0:8a:2f:58:0d:d6:5a:15:9e:78:23:dc:32:
0a:4f:34:2d:c9:13:84:8f:33:92:ea:18:1e:0d:e0:
91:49:91:15:2d:b6:3b:f7:79:30:22:15:b3:44:f5:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F7:75:70:A0:8E:9A:A6:58:8B:C2:F8:C6:D5:83:D6:C9:29:0E:FC
X509v3 Authority Key Identifier:
keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/uvd1cKCOmqZYi8L4xtWD1skpDvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.116.0/22
45.87.196.0/22
45.91.44.0/22
89.37.88.0/22
194.113.26.0/23
IPv6:
2a02:7040:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
87:72:17:eb:c5:ba:50:ee:f7:47:32:ce:34:5a:a5:6d:3c:e5:
2d:68:a9:3d:c1:6a:6a:b2:de:4c:b3:fc:2a:4a:0b:ca:8e:bf:
1d:21:04:7d:d9:7a:65:0a:a5:f6:da:3e:ef:86:4a:2f:c2:a6:
27:6d:f5:01:0e:53:74:7d:90:1d:e1:a7:3d:89:cd:dd:45:b3:
5c:74:56:f1:0c:0d:6e:3e:da:5f:8e:36:79:75:75:92:76:71:
55:d8:10:36:cf:f1:23:91:5b:0a:f5:53:ce:8d:47:d4:5b:ba:
9c:cc:e0:7e:ca:19:50:b4:10:c0:7a:e1:04:b1:ee:12:95:5c:
6a:a9:ab:b8:46:1a:ac:06:0c:75:47:ee:1e:bf:53:01:45:22:
bd:fb:06:c4:e6:75:e0:27:e8:08:29:38:f4:64:b3:cb:1b:bf:
50:f2:7b:36:23:78:9b:ef:c7:85:b8:af:47:68:ed:84:b9:ad:
62:b9:6d:0e:fc:8f:f1:2a:9b:77:ff:17:54:16:a6:66:a2:18:
ab:f0:81:e1:3e:cb:48:60:26:b1:f6:fb:6b:90:9d:ff:81:fa:
cf:53:59:01:d5:7a:b1:16:8f:02:f6:19:09:66:a2:78:9c:80:
46:29:a2:ef:74:7f:46:a7:ca:32:01:c3:63:8c:db:ac:72:ee:
11:6e:4b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:16 2025 by rpki-client