Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/U3lA_e0y8319DjoZ7X8Ks2r2M7w.roa
File: U3lA_e0y8319DjoZ7X8Ks2r2M7w.roa (raw, json)
Hash identifier: fqverKbNHsV3jVuR9y0WWha056JePZs0l3+H4zjSxfA=
Subject key identifier: 53:79:40:FD:ED:32:F3:7D:7D:0E:3A:19:ED:7F:0A:B3:6A:F6:33:BC
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0194228D390352A45103C84AFEC2542F27CD
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/U3lA_e0y8319DjoZ7X8Ks2r2M7w.roa
Signing time: Wed 01 Jan 2025 15:47:47 +0000
ROA not before: Wed 01 Jan 2025 15:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21075
IP address blocks: 46.164.138.0/24 maxlen: 24
93.183.236.0/24 maxlen: 24
93.183.238.0/24 maxlen: 24
193.109.80.0/24 maxlen: 24
193.238.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:39:03:52:a4:51:03:c8:4a:fe:c2:54:2f:27:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 15:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=537940fded32f37d7d0e3a19ed7f0ab36af633bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:b8:19:3b:69:29:d8:95:fb:0c:ae:0b:f4:
52:44:ce:88:9c:8d:ee:54:cd:46:9b:b2:5d:24:be:
26:eb:c7:5a:93:b3:af:e5:73:26:72:c2:5d:f6:e7:
e8:3f:79:02:26:10:a6:86:46:58:e2:35:88:46:35:
8f:23:0a:6e:9e:a1:09:ae:ed:c8:0c:16:e5:55:d0:
cb:91:14:91:46:21:0b:a9:56:c1:5a:83:01:cd:bc:
48:84:72:c5:df:1f:66:64:ed:9e:73:71:56:6b:82:
f8:c7:1e:e5:84:fc:e9:4c:a2:c5:9c:bd:11:e3:5f:
5c:15:6c:1d:5b:cc:b0:77:9a:9e:86:30:fc:8a:f3:
ae:3b:34:6b:54:e8:fe:9c:f6:03:ff:a1:c9:eb:db:
43:4d:59:7a:92:eb:7a:1a:bd:29:8c:2f:c2:07:11:
31:98:2d:5e:e0:dc:4d:b4:7e:b0:d3:3c:68:f8:a2:
4d:63:d8:45:e3:44:f6:d4:8b:7e:19:d7:f3:8d:33:
87:9e:73:29:10:b4:dd:f6:ee:20:96:f9:05:65:da:
d2:ec:a3:10:b0:a4:40:a3:8e:12:d0:18:d3:b2:f8:
78:0d:94:3e:35:93:58:69:9c:80:ee:96:60:a3:87:
4e:37:0a:d7:2f:dc:c9:b5:e9:48:30:e9:09:5f:03:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:79:40:FD:ED:32:F3:7D:7D:0E:3A:19:ED:7F:0A:B3:6A:F6:33:BC
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/U3lA_e0y8319DjoZ7X8Ks2r2M7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.164.138.0/24
93.183.236.0/24
93.183.238.0/24
193.109.80.0/24
193.238.96.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:a3:f8:67:20:8a:e4:8c:ac:25:a3:be:26:41:31:63:df:7c:
a4:e0:85:ec:83:46:55:21:91:07:c5:c9:f6:d2:70:0b:d0:92:
89:a4:40:7d:00:ea:78:65:00:ba:25:3f:c8:07:0d:d9:c0:56:
7b:a0:9f:99:f0:6b:c5:2f:a1:84:83:c7:ca:90:58:04:50:b6:
c2:3d:5a:94:23:8c:c6:29:7c:c0:45:ef:78:c0:4d:0b:63:df:
58:84:c6:43:d7:4e:73:60:7a:26:da:20:1d:72:81:02:79:8f:
85:08:2a:6e:72:63:9a:2a:ea:32:8c:5b:6d:a1:54:d4:cc:8c:
85:7a:a1:d4:8c:19:07:4f:13:df:43:d0:6c:66:78:aa:90:c5:
83:eb:50:2f:ff:25:80:3d:bc:85:3b:45:69:a7:15:10:21:fc:
92:5a:c6:b1:4d:80:e0:b7:ab:54:ab:3b:b3:51:71:84:6a:33:
34:11:d3:1d:e6:02:be:cb:8e:ee:34:4a:c4:78:cb:63:3f:e7:
80:f3:a9:5d:6f:20:25:81:c6:4e:bc:e3:ad:cd:3c:a0:a3:41:
ef:57:5b:47:4c:fc:e4:08:5a:b9:6b:47:0a:eb:0e:1e:39:0e:
16:c1:e7:c5:1a:a8:1f:76:63:6b:b6:42:76:59:10:b1:1a:84:
6b:32:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:19:47 2025 by rpki-client