Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/UJ5ftZcJfUjCakEVT4XfNc6ppYM.roa
File: UJ5ftZcJfUjCakEVT4XfNc6ppYM.roa (raw, json)
Hash identifier: IE2zIMW4SOnspMk6Aqw+z81q5gwvFhswELpfyOJJCIk=
Subject key identifier: 50:9E:5F:B5:97:09:7D:48:C2:6A:41:15:4F:85:DF:35:CE:A9:A5:83
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 0F5B7F29
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/UJ5ftZcJfUjCakEVT4XfNc6ppYM.roa
Signing time: Sat 01 Jan 2022 05:54:52 +0000
ROA not before: Sat 01 Jan 2022 05:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60822
IP address blocks: 46.23.200.0/22 maxlen: 22
46.23.204.0/22 maxlen: 22
195.137.144.0/22 maxlen: 22
195.137.148.0/22 maxlen: 22
195.137.152.0/24 maxlen: 24
185.85.212.0/22 maxlen: 22
46.23.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257654569 (0xf5b7f29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Jan 1 05:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=509e5fb597097d48c26a41154f85df35cea9a583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4b:56:ad:84:d7:6a:9f:e1:66:fb:58:b9:76:
36:4d:5b:07:ec:69:0d:ec:c7:42:0a:05:f0:45:cb:
85:b9:29:73:1a:0c:64:ef:84:3c:11:b1:14:d1:82:
4a:6f:80:77:6d:ba:37:3d:0d:36:03:b6:b8:62:9e:
34:18:fa:ba:aa:e3:e3:1a:ab:75:13:b2:d4:72:48:
e1:17:df:6f:d1:30:e9:3d:1c:f9:8e:77:41:dc:44:
7b:83:87:e9:9a:85:c8:70:55:ac:68:86:55:f4:4a:
49:90:4d:44:34:58:51:08:19:e3:46:4c:67:7e:13:
a5:8c:6d:39:69:ba:2f:cf:a3:7c:bd:d6:47:23:d4:
83:21:5b:a4:34:60:97:47:df:50:e5:6d:d3:8c:ce:
20:eb:58:93:b7:83:3e:f8:0f:ef:2b:00:02:e7:c3:
7c:fd:f5:b3:aa:d6:a1:17:44:ce:91:80:57:56:4b:
53:9d:a9:39:97:d1:b6:83:e0:74:6b:2d:d6:67:e7:
12:63:db:17:8d:2b:80:9f:f0:41:3e:98:02:ed:a5:
88:06:8f:2a:de:ed:3d:a9:84:ed:ea:27:d8:22:7d:
86:6e:c1:93:29:04:be:20:45:6a:77:ad:f2:12:f6:
4f:db:b4:5a:dd:e4:3e:e0:3b:89:5d:2b:11:45:8e:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:5F:B5:97:09:7D:48:C2:6A:41:15:4F:85:DF:35:CE:A9:A5:83
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/UJ5ftZcJfUjCakEVT4XfNc6ppYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.192.0/20
185.85.212.0/22
195.137.144.0-195.137.152.255
Signature Algorithm: sha256WithRSAEncryption
57:1f:9b:af:30:d3:be:a8:2e:c5:a7:e7:dc:bf:79:10:8e:6d:
89:43:57:b6:78:3c:7b:0a:40:0c:7d:ab:ff:6b:7a:a3:a6:74:
ef:14:8a:db:1e:9c:e1:7d:dc:8e:92:f4:93:84:6b:ec:09:85:
35:b9:09:40:e1:f6:13:e1:fa:20:ec:42:9c:44:18:06:34:e2:
6d:d1:30:28:4d:30:d3:37:de:78:fc:60:ce:0b:05:51:56:4b:
62:a3:53:01:5d:ad:d7:1f:52:03:1b:83:d4:28:74:a2:30:0b:
01:08:48:f2:4f:fe:56:a3:18:82:b9:12:fd:2d:cf:b4:83:20:
dc:99:30:91:b8:d3:bc:5b:16:6a:81:18:02:57:5b:cd:b3:0a:
19:2d:d3:36:d4:ef:d1:b0:a8:79:ec:a6:e4:7d:cf:be:88:50:
70:d8:ce:f6:16:32:eb:94:3e:5f:fe:25:38:4b:2d:09:d7:c1:
c9:4e:98:10:ba:f3:91:5f:f7:6b:27:13:0c:94:93:96:5e:a4:
a8:ab:53:8a:27:94:89:1d:40:e4:22:d0:24:e1:b6:9c:95:5a:
66:e4:57:90:c3:b7:0d:1f:60:42:8b:4b:2c:06:20:8c:15:a3:
e8:eb:2f:18:34:b1:d7:39:c3:fd:ce:49:21:f6:ab:56:ea:ad:
0f:b5:14:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:12 2025 by rpki-client