Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/UKxczdGTzCvCJaaQRCkgW8UA7lI.roa
File: UKxczdGTzCvCJaaQRCkgW8UA7lI.roa (raw, json)
Hash identifier: fIz0HN2BtyrpsDhDl+yA0My3gJxDpNGw3EQbB/GQgEU=
Subject key identifier: 50:AC:5C:CD:D1:93:CC:2B:C2:25:A6:90:44:29:20:5B:C5:00:EE:52
Certificate issuer: /CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Certificate serial: 0184EFF9DD3E6EFC61C2EDF9B9FE07A6F130
Authority key identifier: AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/UKxczdGTzCvCJaaQRCkgW8UA7lI.roa
Signing time: Thu 08 Dec 2022 04:24:00 +0000
ROA not before: Thu 08 Dec 2022 04:24:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24700
IP address blocks: 46.174.190.0/24 maxlen: 24
46.174.188.0/24 maxlen: 24
46.174.189.0/24 maxlen: 24
46.174.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ef:f9:dd:3e:6e:fc:61:c2:ed:f9:b9:fe:07:a6:f1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Validity
Not Before: Dec 8 04:24:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50ac5ccdd193cc2bc225a6904429205bc500ee52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:8b:83:6d:77:ab:04:50:f9:95:96:f8:a7:
ba:74:2a:35:f5:5b:b7:0b:e3:0e:3d:90:56:45:21:
43:df:af:6a:49:7b:3f:26:f1:33:9c:aa:e9:1c:d8:
6a:c9:c2:6c:b7:b1:84:8d:1f:70:4b:3c:ad:71:28:
05:35:5d:55:b7:86:5a:8e:99:5f:60:f8:e8:d8:e3:
91:1f:3e:3a:f5:1b:8b:8f:31:0b:c7:42:d0:1d:90:
4b:36:c0:0d:0c:eb:6e:e6:c4:4b:75:15:e8:a6:04:
6b:78:59:12:1f:28:55:18:80:9b:56:21:0c:ab:90:
0f:59:9b:3f:9c:f5:c3:f9:8a:45:42:43:3d:b4:37:
e1:f3:29:4e:ef:c9:54:af:49:b4:fa:28:35:14:37:
3c:fb:73:f6:06:83:7c:fa:f5:a3:96:e4:4b:f7:86:
cb:33:68:b9:8a:e5:14:3b:31:b7:4a:64:f5:41:50:
41:09:4c:41:f0:5f:fe:7b:dd:ec:35:b3:9b:ae:76:
4f:d7:3f:a5:21:04:2a:03:0d:32:44:42:78:67:5e:
a8:7f:df:c6:2a:81:31:52:a6:81:e3:35:94:94:13:
24:a7:8d:23:80:ef:e2:53:3c:fa:ab:66:bf:fc:b8:
45:06:d4:02:cc:74:cd:d2:3b:b2:e5:1f:3c:7c:d1:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AC:5C:CD:D1:93:CC:2B:C2:25:A6:90:44:29:20:5B:C5:00:EE:52
X509v3 Authority Key Identifier:
keyid:AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/UKxczdGTzCvCJaaQRCkgW8UA7lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/rIDr0ZpiboFuGNE-6zvCGuhpFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.188.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:ce:6a:f0:0c:b6:36:a5:60:c6:45:4f:d6:82:77:27:9e:ed:
61:1b:82:aa:b2:3e:93:1d:de:34:40:65:ac:b7:38:f9:e3:be:
4a:b3:3a:0b:eb:cf:af:61:b7:25:05:5e:c6:50:7d:dc:be:1e:
e2:de:60:d0:57:78:8f:8b:8a:33:7a:18:48:33:b3:e3:cb:68:
bb:b5:6f:d4:c4:28:db:9d:05:86:25:49:c3:40:de:37:3e:88:
24:e3:c4:16:21:be:09:65:38:25:8d:c8:6a:5a:ee:63:81:0f:
07:0a:12:cb:c8:ff:fe:7a:be:bb:36:91:ba:2a:9f:cd:82:72:
5c:a9:f3:3d:d9:6f:82:d4:4a:b6:84:2b:84:ce:35:a4:8b:35:
a5:b9:8d:10:40:42:a0:e2:e4:d1:48:b5:3f:5d:5b:cb:99:d6:
17:0a:21:7e:e4:e6:51:e9:8b:cc:78:a7:9a:92:45:bf:2b:b0:
e8:fc:ee:39:5f:03:ef:e4:90:3a:0f:b8:1e:2d:2a:35:22:c3:
c2:f7:21:d0:09:e8:64:2f:1a:90:96:52:06:65:c2:d4:bc:28:
69:73:39:25:db:c1:54:4c:66:7d:13:07:17:52:b3:89:19:a7:
55:3e:b0:e0:bf:8e:a8:b5:92:67:2e:70:cc:3b:3b:11:03:ba:
79:39:25:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:50 2025 by rpki-client