Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/ULPXRm8In0iucltCiTjO30AS1C0.roa
File: ULPXRm8In0iucltCiTjO30AS1C0.roa (raw, json)
Hash identifier: 97n1pECWSKGJxeSXP3tl/iwpgFcjm2jvqPMD3YywHEo=
Subject key identifier: 50:B3:D7:46:6F:08:9F:48:AE:72:5B:42:89:38:CE:DF:40:12:D4:2D
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 0194266B914CD29A1CD3711EA21458DE62C5
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/ULPXRm8In0iucltCiTjO30AS1C0.roa
Signing time: Thu 02 Jan 2025 09:49:31 +0000
ROA not before: Thu 02 Jan 2025 09:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 45.145.128.0/23 maxlen: 23
193.187.92.0/22 maxlen: 22
193.202.8.0/22 maxlen: 22
193.202.12.0/22 maxlen: 22
193.202.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:91:4c:d2:9a:1c:d3:71:1e:a2:14:58:de:62:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 2 09:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50b3d7466f089f48ae725b428938cedf4012d42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:aa:ee:5b:d0:f4:5a:8f:da:bf:e1:46:71:
20:ee:7d:f1:9e:ee:f5:16:3c:04:8f:14:09:f2:89:
a1:6c:6f:8e:9b:88:01:1d:7b:fb:1d:54:3e:68:68:
cf:5d:14:18:7b:17:0e:3b:a5:b3:90:25:8c:34:c8:
07:68:d8:c1:96:9a:82:36:b0:14:75:9e:4f:03:d5:
4a:29:88:d0:bb:67:e2:6d:33:b6:35:3f:d0:59:4d:
8c:ab:a5:0c:47:37:c4:75:bb:05:71:a1:e7:be:08:
7d:2e:c6:ef:b6:90:bf:27:e4:99:0e:f3:f5:6b:d4:
ed:6e:bc:c7:18:32:b3:3b:50:20:01:ef:a4:a0:e7:
d5:ed:9d:86:77:d5:36:24:11:11:fa:22:09:b3:0a:
24:c5:fd:b0:85:e0:b8:d4:a8:09:8d:9f:1e:7f:21:
5f:09:bf:04:51:ce:d8:54:60:62:d4:8d:cd:b4:36:
15:52:48:19:51:be:a5:eb:7a:04:84:ee:60:ab:4d:
cc:a6:8c:4a:04:6c:bd:76:72:6b:7d:6a:0c:c2:5a:
5a:a5:d7:bb:7a:e0:db:c6:c0:1c:eb:b7:26:59:42:
08:a9:3b:31:07:3c:5a:24:f2:96:da:e1:ae:38:f6:
89:f2:c1:d1:43:db:f8:ea:95:7c:ce:53:40:a8:7b:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B3:D7:46:6F:08:9F:48:AE:72:5B:42:89:38:CE:DF:40:12:D4:2D
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/ULPXRm8In0iucltCiTjO30AS1C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.128.0/23
193.187.92.0/22
193.202.8.0/21
193.202.84.0/22
Signature Algorithm: sha256WithRSAEncryption
50:00:a1:c1:95:7e:0c:6a:10:85:83:49:ef:ae:b1:81:d4:b8:
88:49:f2:01:be:e4:b0:cf:47:b6:41:5f:d1:43:00:32:48:02:
3b:d5:d2:c2:bb:a1:b9:4e:6c:b5:76:30:0d:ba:89:33:a7:fc:
a5:01:d3:55:12:15:37:1d:e8:dd:ff:d5:2a:8c:bc:b0:18:f5:
78:f5:2d:e4:1f:1e:7e:72:66:b9:4e:60:85:63:41:01:49:e6:
8e:cb:22:2b:a3:4d:3c:08:36:bf:06:6a:02:37:d6:2c:fc:85:
ed:f4:f3:4e:48:e3:22:69:72:a9:e4:91:a1:76:8a:15:a9:ac:
55:af:8f:5d:0d:ef:85:c7:da:9c:e2:95:26:9d:05:39:63:3a:
4d:66:02:71:42:6d:fe:ed:f2:ca:fe:9a:09:a5:b1:7f:38:1a:
4f:56:04:57:be:f1:4b:e3:dc:81:3c:6f:c9:79:9d:46:e9:0b:
c9:3e:6f:ac:a6:ae:c7:2e:31:68:83:9f:64:de:5c:42:3c:5f:
fa:db:00:7a:3b:7d:6a:45:bc:b0:62:5d:e0:2b:e7:0e:b9:24:
75:3a:4e:8a:df:88:30:6a:75:5c:b6:f4:0d:95:6b:0c:8e:53:
14:5f:14:6d:19:d8:81:2f:46:a1:ca:f2:b6:d7:1d:8c:1b:a1:
74:d8:77:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:39 2025 by rpki-client