Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/upGGneJgvI6M1t_o_EEPGjsDcMI.roa
File: upGGneJgvI6M1t_o_EEPGjsDcMI.roa (raw, json)
Hash identifier: vI6qDNqAlS7+y5dNDxKd/Mj9M+WZ3KMXOcY6AVRxZCI=
Subject key identifier: BA:91:86:9D:E2:60:BC:8E:8C:D6:DF:E8:FC:41:0F:1A:3B:03:70:C2
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 019393DDD8F2847544C168A9A77589928226
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/upGGneJgvI6M1t_o_EEPGjsDcMI.roa
Signing time: Wed 04 Dec 2024 22:50:09 +0000
ROA not before: Wed 04 Dec 2024 22:50:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 46.229.243.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
76.164.200.0/24 maxlen: 24
76.164.201.0/24 maxlen: 24
76.164.202.0/24 maxlen: 24
76.164.203.0/24 maxlen: 24
77.74.123.0/24 maxlen: 24
83.229.61.0/24 maxlen: 24
85.204.107.0/24 maxlen: 24
92.42.100.0/24 maxlen: 24
103.112.171.0/24 maxlen: 24
103.121.48.0/24 maxlen: 24
103.121.49.0/24 maxlen: 24
103.126.50.0/24 maxlen: 24
103.126.51.0/24 maxlen: 24
103.244.144.0/24 maxlen: 24
103.244.145.0/24 maxlen: 24
103.246.248.0/24 maxlen: 24
185.104.63.0/24 maxlen: 24
195.74.93.0/24 maxlen: 24
203.14.32.0/24 maxlen: 24
203.25.108.0/24 maxlen: 24
2a12:3200::/36 maxlen: 36
2a12:3200:1000::/36 maxlen: 36
2a12:3200:2000::/36 maxlen: 36
2a12:3200:3000::/36 maxlen: 36
2a12:3200:4000::/36 maxlen: 36
2a12:3200:5000::/36 maxlen: 36
2a12:3200:6000::/36 maxlen: 36
2a12:3200:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:93:dd:d8:f2:84:75:44:c1:68:a9:a7:75:89:92:82:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Dec 4 22:50:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba91869de260bc8e8cd6dfe8fc410f1a3b0370c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6d:34:43:2c:6b:54:7d:68:af:90:02:f1:a4:
f4:6c:23:15:84:53:9c:f4:27:07:6b:a4:a5:88:ec:
60:cc:56:6e:99:19:db:01:d7:5c:f9:a7:c1:e3:96:
a8:c9:4f:aa:ee:34:c0:0f:43:13:ec:7b:af:d2:e6:
a5:9c:0e:93:b5:7d:db:f8:24:1a:2f:01:b7:6a:d1:
17:6c:d8:d0:3d:66:0d:ff:f8:d3:55:ef:ec:d7:2c:
20:c8:92:a1:06:60:1b:ff:e2:b3:7a:90:77:7f:6d:
a3:99:ce:f1:6a:f1:44:dc:0a:be:5a:b8:da:88:8e:
16:b5:e6:df:a0:c2:2d:58:f7:c7:95:85:fe:37:51:
8a:e1:35:a9:c0:06:82:13:63:82:e6:8e:b2:36:31:
80:45:6d:5f:e6:48:29:55:2d:a9:5d:37:bf:1e:9c:
0c:28:bb:71:de:89:27:a3:3e:64:59:f0:f0:be:05:
1e:19:10:e1:b0:76:1c:5a:19:bd:61:66:00:0e:1c:
a0:2b:85:7b:fa:79:f6:55:c0:7a:b1:3a:b8:e4:c6:
4f:3a:13:59:9f:d7:63:b4:6d:33:ba:2e:55:f0:06:
e8:e5:2c:85:36:5d:1f:64:00:c0:e3:39:3d:67:b0:
06:86:eb:86:c4:f7:2a:13:5c:1d:9b:21:62:4b:d0:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:91:86:9D:E2:60:BC:8E:8C:D6:DF:E8:FC:41:0F:1A:3B:03:70:C2
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/upGGneJgvI6M1t_o_EEPGjsDcMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.251.0/24
46.229.253.0/24
76.164.200.0/22
77.74.123.0/24
83.229.61.0/24
85.204.107.0/24
92.42.100.0/24
103.112.171.0/24
103.121.48.0/23
103.126.50.0/23
103.244.144.0/23
103.246.248.0/24
185.104.63.0/24
195.74.93.0/24
203.14.32.0/24
203.25.108.0/24
IPv6:
2a12:3200::/33
Signature Algorithm: sha256WithRSAEncryption
67:c0:34:14:3d:00:12:45:a8:9d:74:3c:dd:17:62:1f:23:77:
42:c7:e9:e0:7c:6a:06:35:4e:e3:3b:6c:7e:65:a9:8a:6e:9d:
9e:aa:e1:41:1d:7a:c2:63:be:24:af:fd:98:e1:43:9c:98:1e:
32:e6:27:eb:a9:18:30:2f:45:a9:ae:68:52:f4:fc:b6:d8:d8:
ad:21:78:65:28:8e:e9:fb:ec:d0:43:15:ab:56:e1:a9:b5:7b:
30:ee:e1:6f:46:8e:21:45:36:46:5b:12:b2:a8:cb:a1:6a:4c:
ae:f7:48:b6:25:fc:0b:eb:8d:d3:7b:0e:df:8e:1d:2c:fa:3b:
01:e1:72:dc:89:34:f7:c6:70:76:5e:09:e3:b0:85:fa:19:1e:
ea:52:de:53:30:83:61:43:a3:28:dd:ac:d9:e1:8a:8a:eb:9f:
cf:10:26:41:60:40:ce:af:56:05:7e:6f:18:6a:2a:52:ba:67:
82:0f:eb:b0:94:f7:4a:99:53:d7:62:20:9d:76:1f:73:61:9a:
c0:b6:de:5f:dc:b5:6e:9b:64:30:25:8c:13:6b:10:9e:d7:8f:
3a:00:af:84:7f:57:8a:e6:20:89:73:65:22:da:8b:f4:e1:ed:
09:f9:62:6f:c6:5b:4c:8c:33:f9:e7:ef:6e:63:ee:df:3c:b5:
3a:7a:0e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:18:36 2025 by rpki-client