Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/uhluz2w2P0ipZZ_TpZIBFjiGaPc.roa
File: uhluz2w2P0ipZZ_TpZIBFjiGaPc.roa (raw, json)
Hash identifier: cJx3Z1ZVt6H7vBX/j7Vw07otsuAEwtV9WijlHHKtd04=
Subject key identifier: BA:19:6E:CF:6C:36:3F:48:A9:65:9F:D3:A5:92:01:16:38:86:68:F7
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0185A5313AE681F4784FDFEE599944420129
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/uhluz2w2P0ipZZ_TpZIBFjiGaPc.roa
Signing time: Thu 12 Jan 2023 08:55:44 +0000
ROA not before: Thu 12 Jan 2023 08:55:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
45.151.97.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:31:3a:e6:81:f4:78:4f:df:ee:59:99:44:42:01:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 12 08:55:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba196ecf6c363f48a9659fd3a5920116388668f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:6a:89:f7:a0:33:72:80:52:cf:6f:84:fd:
ab:06:8f:8f:c5:fb:7c:a0:03:68:f9:6a:f4:83:d7:
a1:9d:41:d7:71:5c:66:c8:ff:e5:9d:d3:6b:ca:5e:
38:bc:4c:7d:02:32:2d:a2:a1:66:87:25:41:68:34:
41:22:87:09:ca:ff:d8:18:39:95:4c:24:19:f5:60:
55:4f:42:e0:91:a3:d5:d9:9a:9e:6c:2d:56:d6:cd:
aa:15:7a:5a:fa:09:ad:74:31:b9:e3:0b:b7:e4:6b:
bb:1d:27:ec:d3:32:41:60:49:ba:54:74:20:a2:85:
e8:c4:61:33:9c:86:ed:e5:27:ff:3e:60:eb:88:12:
34:c2:1e:3a:75:ef:e6:21:5f:7d:ba:c8:a9:e3:46:
9d:8c:06:e7:1c:af:5c:1e:1b:81:2d:88:95:31:27:
5e:94:04:ad:87:f0:c6:8c:6a:cd:4c:57:d4:b2:e2:
7d:d8:12:65:52:05:df:5d:5d:09:38:d0:01:72:40:
ad:7e:11:af:7a:ec:67:ee:e2:24:d8:e8:b0:e0:18:
87:0c:8b:50:70:3e:5f:d4:72:06:c0:46:55:37:2c:
15:de:4c:db:7a:49:a0:33:6a:e4:88:26:be:3b:d2:
72:c6:c7:f7:27:64:2c:c1:0e:39:95:08:ba:7d:57:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:19:6E:CF:6C:36:3F:48:A9:65:9F:D3:A5:92:01:16:38:86:68:F7
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/uhluz2w2P0ipZZ_TpZIBFjiGaPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0-45.151.98.255
94.137.72.0/24
94.137.74.0/24
94.137.78.0/23
94.137.89.0-94.137.91.255
94.137.93.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:08:c0:2c:a9:6a:b6:a2:14:3a:10:fe:7a:bf:4c:df:cb:55:
22:ad:42:db:7a:4a:98:fa:ce:e6:7b:c1:fe:bf:0e:5e:e6:79:
72:46:0e:34:80:86:15:96:7a:c6:b2:92:44:b9:39:ee:d3:3d:
33:f9:02:c1:a6:d6:95:61:6d:a4:cd:b2:52:ad:6f:4f:37:86:
72:04:c0:ef:18:2d:80:98:1d:04:0e:86:bf:3e:25:c1:a8:db:
cd:b7:3b:ee:cc:43:45:b8:fa:ff:3c:a7:a0:8c:1a:9d:92:98:
c8:b2:3c:31:cc:63:ac:e5:32:12:0f:9e:4f:92:9e:72:c8:5a:
12:73:dc:b7:e2:61:cb:f7:58:4a:3e:e8:7a:6e:11:82:ce:32:
f7:31:4d:5a:39:3f:99:34:d1:ac:65:44:93:78:5d:90:54:b6:
c1:e2:eb:f8:db:54:12:34:bd:09:25:42:39:22:3b:00:b2:9b:
a0:b9:20:84:19:d5:e0:4e:4d:f6:f7:f9:a6:be:14:05:dd:87:
2c:8c:98:f0:45:3e:ec:b9:9f:c8:4e:d3:6e:13:23:2e:d4:47:
98:0b:12:bf:f7:bf:f0:a5:b5:ff:fd:a0:99:1e:b6:06:8a:11:
59:e1:f3:3d:0c:39:dd:98:f9:38:de:c9:30:e7:25:03:b8:5d:
f3:1f:30:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:15 2025 by rpki-client