Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/UEolp0R-hRHKGcTNGe0AoFHIQN0.roa
File: UEolp0R-hRHKGcTNGe0AoFHIQN0.roa (raw, json)
Hash identifier: MIhc/4dE+vXix8ModKbHmu/83XSuv98iPqMBE/1dwmU=
Subject key identifier: 50:4A:25:A7:44:7E:85:11:CA:19:C4:CD:19:ED:00:A0:51:C8:40:DD
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 019426D9FB3A31BDCB26F7D611183B74E66E
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/UEolp0R-hRHKGcTNGe0AoFHIQN0.roa
Signing time: Thu 02 Jan 2025 11:50:07 +0000
ROA not before: Thu 02 Jan 2025 11:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5606
IP address blocks: 46.102.144.0/22 maxlen: 22
89.33.236.0/23 maxlen: 23
89.45.168.0/21 maxlen: 21
89.46.6.0/24 maxlen: 24
93.115.112.0/21 maxlen: 21
93.119.152.0/24 maxlen: 24
93.119.153.0/24 maxlen: 24
185.171.186.0/24 maxlen: 24
195.246.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:fb:3a:31:bd:cb:26:f7:d6:11:18:3b:74:e6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jan 2 11:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=504a25a7447e8511ca19c4cd19ed00a051c840dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:6b:55:26:f2:a0:66:2d:dd:0d:23:15:d2:
a8:9d:66:1a:6f:d0:77:2b:56:3c:c4:f1:f8:7a:da:
15:4b:c6:d8:c4:c4:66:c1:e1:8c:73:fd:f6:1c:8d:
30:00:a2:58:ef:22:6a:5e:a0:70:14:03:05:32:f1:
82:1a:e0:d8:89:01:7b:ac:7d:cb:61:26:22:df:18:
88:93:c4:90:82:37:95:41:fc:19:db:cd:9e:ca:5f:
fe:92:1b:e2:ff:26:6f:a6:e0:f5:30:ee:d8:be:5c:
ff:fb:60:2f:44:16:42:6b:81:fa:b5:4f:b0:2b:c7:
5d:98:08:df:b7:88:60:9f:6b:7e:b8:76:07:ab:5a:
e8:94:a0:f9:01:c4:71:5e:e0:4c:76:08:f3:9a:b4:
5f:69:b8:e6:68:d5:e1:58:f7:b2:9c:f7:32:b9:4a:
b2:90:62:94:d1:65:3a:9b:7c:28:4d:7e:27:92:72:
3a:f3:be:89:b2:e6:ae:66:65:7b:e2:39:b9:27:d2:
5c:89:68:db:57:5a:98:42:af:26:9a:40:2e:da:5e:
81:85:3e:96:47:d6:4a:88:42:9a:6d:ce:78:64:50:
9c:6f:75:df:1e:57:04:9f:b7:36:ef:00:4d:5d:a0:
82:ef:58:2f:3a:15:fb:35:4c:33:b5:93:fe:ba:65:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4A:25:A7:44:7E:85:11:CA:19:C4:CD:19:ED:00:A0:51:C8:40:DD
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/UEolp0R-hRHKGcTNGe0AoFHIQN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.144.0/22
89.33.236.0/23
89.45.168.0/21
89.46.6.0/24
93.115.112.0/21
93.119.152.0/23
185.171.186.0/24
195.246.242.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:80:b9:be:89:79:29:ad:56:ef:99:7f:63:7e:00:3b:d6:93:
2f:88:8a:74:46:19:02:cb:39:fc:6a:6e:c0:c5:eb:34:e6:57:
8a:1f:f5:fd:99:94:39:7e:18:e2:49:4e:3c:ea:16:d1:88:bf:
c1:91:77:af:f4:71:42:0a:8d:e4:b3:6a:48:dd:0f:b8:6c:3f:
fd:7c:0c:b2:67:bb:c6:7b:35:99:66:93:b0:bb:f9:c5:7b:46:
0d:d0:a5:fc:34:f2:c5:cb:2f:00:90:f0:d4:c5:2c:d3:ec:c8:
c0:61:ad:db:ee:bc:57:ec:fe:ab:3e:13:95:27:01:96:62:63:
36:c2:23:f2:b2:1e:9b:35:9b:0c:51:cc:b0:b5:d0:ec:f5:11:
16:29:4d:1d:14:d5:6e:d6:63:53:75:65:f8:e9:55:26:7e:cd:
48:2a:ab:73:5a:da:07:5d:25:ec:79:5b:e8:d5:e6:24:2b:1f:
9f:4a:d4:9b:e4:d2:e6:a1:e9:75:a8:34:62:07:92:fa:1f:7c:
71:15:20:02:ca:46:7d:4b:19:6f:a5:dc:20:92:a1:16:e4:37:
8f:43:c6:62:d7:f1:74:5a:80:e6:f7:6d:ba:2a:cd:46:60:77:
cf:3c:e9:82:f0:d1:7f:a2:f2:62:f7:fa:7e:c8:f2:93:fd:f4:
99:cb:69:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:29:07 2025 by rpki-client