Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/UAG7Vw7dUkqkDxBMQLu-m8JXca0.roa
File: UAG7Vw7dUkqkDxBMQLu-m8JXca0.roa (raw, json)
Hash identifier: okVJOzi8DNsZqNqv7CQsokkqsmG7hdG9GNJN8/xpnDk=
Subject key identifier: 50:01:BB:57:0E:DD:52:4A:A4:0F:10:4C:40:BB:BE:9B:C2:57:71:AD
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018AA701888FC589CE51241E89A8AF9579E8
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/UAG7Vw7dUkqkDxBMQLu-m8JXca0.roa
Signing time: Mon 18 Sep 2023 06:36:50 +0000
ROA not before: Mon 18 Sep 2023 06:36:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8300
IP address blocks: 193.134.248.0/23 maxlen: 23
212.243.101.0/24 maxlen: 24
194.209.74.0/24 maxlen: 24
193.5.30.0/24 maxlen: 24
193.5.252.0/24 maxlen: 24
193.5.158.0/23 maxlen: 24
2001:918:ffb7::/48 maxlen: 48
2001:918:ff70::/44 maxlen: 48
2001:918:f00::/40 maxlen: 40
2001:918:1ab::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:01:88:8f:c5:89:ce:51:24:1e:89:a8:af:95:79:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Sep 18 06:36:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5001bb570edd524aa40f104c40bbbe9bc25771ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:02:a7:3e:93:56:d5:4d:4d:5d:c4:64:a2:
f7:71:51:e7:cc:c0:c1:a9:8b:b3:ae:ac:40:ac:2b:
2c:07:c3:6b:e3:d4:b2:b1:64:c3:d8:12:dc:58:c4:
63:eb:3e:6a:3a:16:e4:a7:37:0b:79:94:e5:9c:9c:
fb:f1:2a:f3:d4:29:5d:fd:b3:a3:a1:4c:9d:ed:9d:
72:6f:af:79:a4:e1:da:ad:85:91:d1:f3:71:c5:1c:
2b:47:71:4e:87:85:e2:dc:6d:03:27:45:cf:29:cf:
8a:ea:53:4d:21:a4:40:39:5e:9c:c5:03:33:67:e6:
45:76:4b:5f:59:34:39:9a:86:d3:24:38:6c:72:48:
51:a5:12:d6:d2:1c:8b:2a:6b:fc:59:a5:b4:9c:be:
eb:42:fc:4a:bc:88:f8:13:4b:da:9b:a7:c7:aa:49:
33:86:ca:ae:7e:7c:72:13:e2:26:53:1d:77:47:84:
74:4e:30:83:ed:d4:b9:57:bf:84:83:1c:db:c8:50:
90:14:ec:35:a0:41:c7:6f:7a:d7:55:16:67:4b:33:
b5:82:0d:86:db:0d:dd:40:12:fd:54:87:f5:d9:72:
ef:b9:66:00:2f:39:ac:a2:9d:47:01:f0:91:6b:3b:
4f:39:6c:7f:50:ca:bf:18:a2:2e:8a:eb:b7:97:f3:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:01:BB:57:0E:DD:52:4A:A4:0F:10:4C:40:BB:BE:9B:C2:57:71:AD
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/UAG7Vw7dUkqkDxBMQLu-m8JXca0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.30.0/24
193.5.158.0/23
193.5.252.0/24
193.134.248.0/23
194.209.74.0/24
212.243.101.0/24
IPv6:
2001:918:1ab::/48
2001:918:f00::/40
2001:918:ff70::/44
2001:918:ffb7::/48
Signature Algorithm: sha256WithRSAEncryption
35:c2:38:08:59:ab:49:76:b0:03:65:2e:f1:64:9c:34:16:8a:
7d:44:c4:e0:3a:6d:32:b4:3d:0a:b6:b9:fa:7e:26:fd:44:8b:
0a:a8:bc:93:58:67:ba:6f:85:5a:7f:14:33:a6:b7:24:92:98:
d1:7a:d7:5d:be:86:2c:a7:8c:98:57:f5:3e:90:ec:12:b6:35:
20:30:1f:85:f1:33:35:77:ca:5b:2f:80:8e:90:de:70:f4:02:
ef:58:07:5a:5a:f6:79:df:89:b8:85:1e:ea:ef:b7:c6:52:9c:
c6:7c:3e:ce:31:d0:4e:ee:05:9f:9a:1c:11:eb:02:45:5d:39:
20:77:ee:16:ab:bc:4e:ea:03:3b:15:b9:e8:61:a3:86:1a:f2:
b3:18:b0:5c:17:8a:7a:b6:ec:d8:ab:28:14:5a:42:74:c2:35:
a3:16:22:80:14:45:35:93:9d:6d:43:12:fa:23:ad:60:42:38:
6e:a6:97:0a:85:46:78:d6:af:fe:8b:3f:0b:41:d3:91:e6:df:
05:3e:f6:ac:c0:c0:73:d4:1c:8d:97:46:6e:a8:ee:6b:5a:3b:
c3:eb:21:5d:d1:ab:1e:87:c0:34:21:33:6c:18:b4:89:52:38:
ab:90:8c:fe:ba:28:d9:42:ae:d3:34:5c:6b:24:7f:b3:79:31:
3e:6a:89:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:45:41 2025 by rpki-client