Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/UHTtePt1uACW2YkzvmZSU1JXU_k.roa
File: UHTtePt1uACW2YkzvmZSU1JXU_k.roa (raw, json)
Hash identifier: 1Ld3N+6FJyke3UOzPFt7uuXO4KUSVmdmHZT6X2OXbQw=
Subject key identifier: 50:74:ED:78:FB:75:B8:00:96:D9:89:33:BE:66:52:53:52:57:53:F9
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228DA28341AC05CCD93BE1E720BBFE30
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/UHTtePt1uACW2YkzvmZSU1JXU_k.roa
Signing time: Wed 01 Jan 2025 15:48:14 +0000
ROA not before: Wed 01 Jan 2025 15:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51557
IP address blocks: 84.51.21.0/24 maxlen: 24
84.51.25.0/24 maxlen: 24
84.51.38.0/24 maxlen: 24
91.93.146.0/24 maxlen: 24
91.93.149.0/24 maxlen: 24
91.93.151.0/24 maxlen: 24
91.93.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a2:83:41:ac:05:cc:d9:3b:e1:e7:20:bb:fe:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5074ed78fb75b80096d98933be665253525753f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:f8:60:61:92:94:a4:77:35:ae:bd:c3:45:
85:3d:67:80:ce:5c:bf:b0:50:56:67:44:8c:d3:6b:
53:0e:ec:31:f3:82:12:0e:51:9f:86:25:bf:9d:75:
05:c8:e1:01:3c:1a:2d:fa:26:a4:50:9b:0e:c7:08:
14:58:e6:d8:ab:95:9c:b0:80:41:0b:e2:5e:8b:88:
3e:26:7f:33:f3:1e:bc:13:50:f3:df:40:d4:4d:ee:
98:44:81:db:34:10:01:33:ff:6a:5d:3f:14:5b:65:
78:e3:9f:68:c1:70:1d:07:2e:d7:73:2e:90:96:56:
4e:3d:2c:27:23:9d:dc:69:ef:b9:9e:51:08:4d:a1:
ec:13:ac:b9:e9:c7:90:f1:3d:ec:87:36:3c:02:a4:
34:08:77:e0:51:26:6d:5d:3a:d6:77:c9:b3:28:f9:
4a:12:eb:cb:99:3d:e8:24:83:ca:fe:f1:8c:9a:f9:
10:1e:4a:78:c5:bc:9a:a4:2e:94:78:13:ee:c3:47:
66:10:ae:c3:e4:9d:11:f0:2c:2c:f4:52:66:12:ed:
c6:09:73:8a:90:de:6c:bd:a1:dc:95:7d:8c:1f:c7:
43:6f:de:27:94:34:9c:19:9c:87:f5:7d:60:83:ec:
6a:b6:93:38:5e:5c:f8:17:d6:1d:95:3a:4c:68:73:
58:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:74:ED:78:FB:75:B8:00:96:D9:89:33:BE:66:52:53:52:57:53:F9
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/UHTtePt1uACW2YkzvmZSU1JXU_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.51.21.0/24
84.51.25.0/24
84.51.38.0/24
91.93.146.0/24
91.93.149.0/24
91.93.151.0-91.93.152.255
Signature Algorithm: sha256WithRSAEncryption
87:87:d7:c8:8a:1f:9a:91:2f:57:5a:75:88:6c:cc:ad:6b:ab:
9f:42:34:bd:a4:57:15:43:85:39:02:c1:27:ae:12:98:a3:f0:
d4:0b:62:1b:fc:a5:db:7c:03:bc:12:af:5c:8b:59:8c:8f:ac:
15:f4:7b:55:9a:ad:09:44:10:fa:9d:b9:8c:41:1f:4b:e4:ed:
2f:6e:a2:57:72:79:53:f5:88:6f:a9:80:62:de:8b:a9:5e:d6:
ad:f6:8f:49:42:81:e4:36:ad:bb:60:68:da:99:12:4b:ac:c0:
9d:f3:3b:92:62:a1:d8:2e:43:2a:c4:55:63:80:d8:e2:96:f3:
b0:e0:5d:90:37:a0:ef:36:44:da:99:96:f5:7d:eb:34:cd:fe:
88:49:fe:9f:2d:a1:6b:1d:42:09:9a:a9:5a:45:77:45:e2:06:
d4:b2:a4:b1:3e:e2:c4:ae:ec:74:ea:be:4c:a0:47:a7:b1:2a:
18:1d:a1:a2:8f:6e:64:61:33:e8:e4:31:af:83:c3:32:83:fe:
87:cb:42:95:c3:0b:ef:2d:44:83:0c:07:4d:ff:dc:c6:8f:e6:
e0:21:bf:9d:31:c1:b6:8c:35:19:06:fd:26:95:7b:9a:b1:0b:
02:57:41:f8:72:46:80:ce:c2:13:95:26:e5:0f:f7:30:42:b6:
36:42:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:06:14 2025 by rpki-client