Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ubmkMeAXqxVXiyKXcRnsdH4LIe4.roa
File: ubmkMeAXqxVXiyKXcRnsdH4LIe4.roa (raw, json)
Hash identifier: 7ijhfidcV0ZL886O7BLdE3RBMn3fDqzgWMJfShyItXw=
Subject key identifier: B9:B9:A4:31:E0:17:AB:15:57:8B:22:97:71:19:EC:74:7E:0B:21:EE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01951A07074130C11AA4836CAC59743B0F42
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ubmkMeAXqxVXiyKXcRnsdH4LIe4.roa
Signing time: Tue 18 Feb 2025 17:07:02 +0000
ROA not before: Tue 18 Feb 2025 17:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215269
IP address blocks: 89.213.49.0/24 maxlen: 24
89.213.51.0/24 maxlen: 24
109.176.254.0/23 maxlen: 24
213.130.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:07:07:41:30:c1:1a:a4:83:6c:ac:59:74:3b:0f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 18 17:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9b9a431e017ab15578b22977119ec747e0b21ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:e0:fc:82:e9:8c:17:30:8c:e4:5b:8c:1d:
00:a5:96:0f:52:f4:0f:46:d8:d4:5a:05:71:1e:16:
31:8f:d5:80:3a:08:62:ff:ad:7d:80:60:39:c1:e5:
29:ac:3b:d3:a9:86:7e:f2:41:dd:8a:9b:3a:ae:d7:
a8:ef:34:6a:d6:30:77:cb:1d:ae:28:35:7a:3e:f4:
34:4c:47:2c:98:f8:79:cf:29:ec:d5:6e:c3:18:7b:
e3:06:7e:c6:68:7f:2c:de:fc:eb:91:bc:87:e5:77:
ce:3e:a0:d4:e2:8a:7e:ed:a7:67:a8:43:7f:13:76:
3b:59:f6:df:4e:15:d0:ed:86:28:e6:72:2b:02:5e:
2b:d7:3a:ea:88:e5:7c:d9:bf:19:d1:fc:a5:a5:f8:
b8:19:fb:1b:fc:63:52:b6:50:1a:2f:d3:23:cb:20:
c2:a3:b2:4b:2a:86:d3:bb:b0:7d:27:22:55:1d:c2:
63:47:76:55:68:6a:2e:87:de:74:22:d2:e9:92:e7:
26:a3:98:ba:4c:67:0e:d2:7f:de:31:79:b8:18:4e:
46:7e:2d:6b:cd:d7:29:ad:64:6d:16:80:2a:7f:65:
d0:41:14:50:57:41:75:55:16:b5:be:ae:24:f0:f7:
6c:5e:a9:e4:9a:ab:22:5b:94:73:2a:de:be:88:8a:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B9:A4:31:E0:17:AB:15:57:8B:22:97:71:19:EC:74:7E:0B:21:EE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ubmkMeAXqxVXiyKXcRnsdH4LIe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.49.0/24
89.213.51.0/24
109.176.254.0/23
213.130.156.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:87:0c:9c:a0:46:f3:6d:ee:dc:48:3c:91:98:d4:dc:35:34:
8c:2c:e8:8a:b1:66:42:11:88:bb:e2:e1:5e:b0:cd:14:40:c4:
61:6f:6b:33:93:b7:58:25:46:92:48:52:ec:94:df:92:f3:b2:
be:67:ca:6f:a9:ac:0a:b5:ca:2a:86:7d:d8:0e:85:12:24:e2:
85:bb:f3:25:a3:68:7c:78:16:e6:51:a3:2a:93:ae:bc:3c:de:
7c:f4:2f:53:7a:dc:92:b2:f1:6c:1d:9d:b2:7d:7e:1a:ad:62:
a9:b2:f1:35:96:85:e8:f1:6c:6f:1f:32:c6:53:fb:5d:bc:8b:
da:82:ae:90:c1:ff:e2:07:25:e7:c3:1b:87:28:41:bc:b8:cf:
0f:c8:61:af:5c:e5:6f:e3:1e:35:89:73:78:a4:2c:ae:00:64:
63:32:df:48:cd:4d:d4:1c:bb:d2:9d:a2:36:d6:a1:dc:31:13:
39:a7:d6:bf:05:b8:69:66:a1:e9:46:cd:fa:48:b9:54:c6:86:
c7:52:d3:98:2f:18:e0:4b:bb:16:2b:cf:81:28:7d:3e:d1:20:
e0:28:9e:ed:c3:f3:8f:76:f5:b5:47:b6:b7:73:fe:52:f7:aa:
db:f1:e7:4d:2f:d9:29:aa:1e:80:d5:03:29:49:05:a4:cd:77:
74:95:e4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:22:53 2025 by rpki-client