Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/UU6tLpkAgcGXQBKYNt1ixd6UT_s.roa
File: UU6tLpkAgcGXQBKYNt1ixd6UT_s.roa (raw, json)
Hash identifier: sbQkGosfvYed00K0i5Qf9A6Q+ACjdzIy6l5MBI7zSQM=
Subject key identifier: 51:4E:AD:2E:99:00:81:C1:97:40:12:98:36:DD:62:C5:DE:94:4F:FB
Certificate issuer: /CN=ed3141220968d0ae44045e6836999928eca864b8
Certificate serial: 018572D5B4D4190CF3CCBBC4E66A68B0855A
Authority key identifier: ED:31:41:22:09:68:D0:AE:44:04:5E:68:36:99:99:28:EC:A8:64:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TFBIglo0K5EBF5oNpmZKOyoZLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/UU6tLpkAgcGXQBKYNt1ixd6UT_s.roa
Signing time: Mon 02 Jan 2023 14:14:46 +0000
ROA not before: Mon 02 Jan 2023 14:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49112
IP address blocks: 176.52.224.0/21 maxlen: 21
176.52.224.0/20 maxlen: 20
176.52.232.0/21 maxlen: 21
130.0.96.0/19 maxlen: 19
95.157.128.0/18 maxlen: 18
185.147.232.0/22 maxlen: 22
2a00:9380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:b4:d4:19:0c:f3:cc:bb:c4:e6:6a:68:b0:85:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3141220968d0ae44045e6836999928eca864b8
Validity
Not Before: Jan 2 14:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=514ead2e990081c19740129836dd62c5de944ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:07:c5:7d:ea:e0:87:05:ea:a2:13:f0:5b:
9c:4a:14:78:b9:6a:cf:18:31:62:f4:81:f5:13:14:
d8:2f:1a:e6:41:91:d6:1b:ba:a6:23:85:e1:6b:37:
1a:ae:5b:d6:cb:0a:bd:b1:c2:24:19:d0:be:b5:5a:
46:17:c6:8a:90:e7:90:9e:c0:42:c9:5d:8b:d4:02:
1a:5f:84:46:a0:cd:4b:61:85:b7:05:cf:44:a1:5c:
8b:04:ac:4a:b6:43:c6:e5:bb:35:64:0f:eb:b9:e6:
b2:b7:3a:f2:84:b5:59:d4:a7:e1:c0:1d:f9:5c:2a:
7c:9e:c0:c9:dd:a7:19:51:a0:9e:73:e8:12:63:f5:
c8:a3:36:ed:ae:e6:6c:9f:5a:4e:27:f6:a5:35:9f:
24:2e:9c:69:1b:b8:2e:e7:66:57:51:50:97:5a:be:
ab:43:82:93:85:58:b5:eb:c5:60:84:fd:8b:21:0b:
38:03:c1:c4:aa:08:63:73:8f:fd:88:2e:45:7f:c4:
3e:e6:67:35:52:c8:a2:d2:a0:0a:68:10:cb:9b:f0:
fd:77:3b:62:cc:d5:f6:d6:ae:ea:ea:2e:36:1a:aa:
02:91:5c:74:14:96:89:2d:fa:a7:7a:c1:92:c1:73:
d2:c6:6c:10:4d:62:d4:ac:ae:a6:53:28:41:f2:98:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4E:AD:2E:99:00:81:C1:97:40:12:98:36:DD:62:C5:DE:94:4F:FB
X509v3 Authority Key Identifier:
keyid:ED:31:41:22:09:68:D0:AE:44:04:5E:68:36:99:99:28:EC:A8:64:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TFBIglo0K5EBF5oNpmZKOyoZLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/UU6tLpkAgcGXQBKYNt1ixd6UT_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/7TFBIglo0K5EBF5oNpmZKOyoZLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.157.128.0/18
130.0.96.0/19
176.52.224.0/20
185.147.232.0/22
IPv6:
2a00:9380::/32
Signature Algorithm: sha256WithRSAEncryption
a2:41:c3:4b:ba:bb:8e:ca:24:5c:9f:a3:81:ca:a1:88:96:c2:
dd:9b:0f:06:f9:7b:48:4b:c4:54:e0:bc:9e:10:62:59:94:1d:
14:4e:16:35:a6:05:a1:94:c2:41:7a:49:8e:62:f0:26:3f:35:
a8:50:fc:eb:1c:93:93:80:a1:9f:2a:4d:c4:94:ce:ce:15:46:
3c:d8:a6:48:93:1a:0a:99:be:da:6f:b4:c4:a8:c9:f3:fb:e3:
2a:65:df:62:25:af:a4:ce:d3:c4:ad:fc:84:5c:01:7a:9f:4f:
29:eb:80:02:5e:f0:4c:bf:95:2f:c2:4d:95:5f:a8:d8:b6:d3:
74:1c:69:8f:4c:66:89:1e:9b:b3:5f:b1:ce:92:c3:ef:81:39:
1c:78:be:06:62:70:a7:7f:a8:e9:b2:c8:9f:e4:e6:a7:03:cf:
31:18:57:8b:2d:8a:d1:7c:fd:67:dc:8c:3d:a4:70:58:5d:07:
5a:75:0a:ec:57:db:88:7e:94:4d:fe:1b:5e:8f:04:36:67:36:
a5:17:ae:3a:0b:ed:6e:c6:02:07:cb:86:1c:45:8b:86:82:10:
b7:8b:8a:f5:9c:dc:76:63:00:32:48:d4:32:40:fa:75:58:3d:
85:b1:1e:51:6f:ac:98:89:34:10:6a:b1:ac:06:c0:11:9e:b8:
cd:36:6d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:31 2025 by rpki-client