Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/UyvA3eS1m0fQ9LmHqohOpGUgOH8.roa
File: UyvA3eS1m0fQ9LmHqohOpGUgOH8.roa (raw, json)
Hash identifier: nd0xk/LBWR8Y1uHlUTNuhLFMAeJyMBYmIcQoIT0cSck=
Subject key identifier: 53:2B:C0:DD:E4:B5:9B:47:D0:F4:B9:87:AA:88:4E:A4:65:20:38:7F
Certificate issuer: /CN=baab3f0885b5566b9b1533d2096df68e549fec3e
Certificate serial: 019425FDC951A5F4EA5D5F86D5E3DB848CC8
Authority key identifier: BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/UyvA3eS1m0fQ9LmHqohOpGUgOH8.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51134
IP address blocks: 91.216.168.0/24 maxlen: 24
91.230.144.0/24 maxlen: 24
185.252.196.0/22 maxlen: 24
2a0c:3240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c9:51:a5:f4:ea:5d:5f:86:d5:e3:db:84:8c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baab3f0885b5566b9b1533d2096df68e549fec3e
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=532bc0dde4b59b47d0f4b987aa884ea46520387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:82:1c:e0:3f:5a:77:a7:30:5a:0e:2f:26:
ba:dd:dd:97:c0:48:cc:2f:bc:b0:79:c4:6d:65:bf:
6b:9b:a7:05:b5:9f:43:ac:22:95:57:49:7c:19:b3:
5e:1e:92:51:b4:10:03:2a:8f:79:93:62:43:68:c1:
5d:da:67:b4:c7:9e:05:61:73:04:9e:46:3b:84:c7:
24:d7:e4:df:2b:25:22:f0:0d:74:4f:2f:b5:ee:6d:
68:b7:99:fb:3b:2a:4e:88:a8:64:3c:9f:07:31:09:
fd:1c:32:97:a4:13:4b:51:e3:04:65:76:83:a9:9f:
14:35:5b:a2:64:66:e2:64:60:e6:0e:d6:10:d5:4e:
15:99:67:be:a7:df:be:9c:14:b9:b5:87:db:e1:51:
7b:cf:3b:75:27:c5:1b:ea:1f:a6:b0:a3:24:ae:88:
f8:c0:88:2c:e3:69:ab:38:ef:f3:4f:1c:99:a7:dd:
68:f2:d8:63:01:15:ce:32:f5:aa:ab:aa:6f:31:82:
da:b6:0f:70:70:23:e9:0b:6c:be:3b:65:f6:57:62:
ae:4c:fc:cd:68:d6:70:f1:83:84:85:3e:0b:b3:b5:
c1:5a:00:f0:ed:fb:59:07:a0:76:98:fd:96:57:7e:
4d:1e:b9:49:cc:4f:1a:af:fc:43:eb:c7:f4:bc:44:
e2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2B:C0:DD:E4:B5:9B:47:D0:F4:B9:87:AA:88:4E:A4:65:20:38:7F
X509v3 Authority Key Identifier:
keyid:BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/UyvA3eS1m0fQ9LmHqohOpGUgOH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.168.0/24
91.230.144.0/24
185.252.196.0/22
IPv6:
2a0c:3240::/29
Signature Algorithm: sha256WithRSAEncryption
64:0b:2a:b4:b0:a9:24:6e:04:8b:72:8f:b5:7f:e3:13:49:e9:
b4:61:9e:8c:af:ca:e4:5e:55:7e:e8:f3:fe:22:0e:ca:e1:ca:
63:5f:ed:d8:ce:11:5d:76:a1:7c:e8:10:4d:09:fc:78:91:18:
04:73:8d:de:17:65:bd:74:30:c6:8d:4c:36:91:af:77:3e:c0:
98:3c:bf:3e:21:92:c8:f8:2a:19:41:c2:29:d4:5e:a7:01:1e:
8c:48:4a:62:cb:6b:a8:3d:9f:f4:34:c0:31:97:2a:cd:98:e1:
b3:71:8f:5b:88:c1:69:68:8b:84:b3:a9:69:aa:34:e8:eb:2f:
da:d1:ce:10:57:cc:c8:25:b4:ba:96:10:de:d1:2c:e0:82:f1:
d9:9e:1a:c7:91:f6:3d:6b:5a:27:f9:0d:ab:69:e8:d7:c7:4d:
b5:4e:6b:11:a5:c3:53:8c:74:5a:47:ad:59:62:44:63:94:35:
02:71:70:48:1e:04:12:44:ee:f3:07:a2:bc:16:67:6c:8a:53:
66:d8:66:48:f6:3e:09:de:8b:c9:c2:da:71:18:7d:86:54:24:
69:d9:aa:20:c9:93:8c:a4:fc:a6:3e:36:64:f6:67:47:1a:51:
61:a5:f1:f5:32:e7:ff:91:94:56:07:77:11:42:87:61:40:9d:
d2:1e:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:36 2025 by rpki-client