Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/uviOxW0K1BsyYbmoNVWx2_9drYE.roa
File: uviOxW0K1BsyYbmoNVWx2_9drYE.roa (raw, json)
Hash identifier: 8ZWrwiRv/EEQMck25bysnhyVxsrgmYlXXulDJp3GbJM=
Subject key identifier: BA:F8:8E:C5:6D:0A:D4:1B:32:61:B9:A8:35:55:B1:DB:FF:5D:AD:81
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 018E0A24B34316952E835CB7D4C8D6301637
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/uviOxW0K1BsyYbmoNVWx2_9drYE.roa
Signing time: Mon 04 Mar 2024 15:46:01 +0000
ROA not before: Mon 04 Mar 2024 15:46:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 46.8.100.0/22 maxlen: 24
46.8.118.0/23 maxlen: 24
46.8.195.0/24 maxlen: 24
46.8.198.0/24 maxlen: 24
46.8.203.0/24 maxlen: 24
188.130.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0a:24:b3:43:16:95:2e:83:5c:b7:d4:c8:d6:30:16:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Mar 4 15:46:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baf88ec56d0ad41b3261b9a83555b1dbff5dad81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:ab:61:c8:4a:d6:1b:c6:c9:8e:59:c4:47:
10:f8:05:ee:a4:c4:49:90:94:79:cb:e5:10:34:08:
04:b9:b6:97:6d:11:5f:33:bd:e9:42:01:a7:c6:ae:
fc:49:dc:cd:0b:75:5d:76:a4:19:fd:85:16:0e:15:
4d:c8:3d:38:ea:17:d5:f9:a2:67:92:4d:73:f0:92:
4d:4e:2f:1f:82:65:e5:b0:80:a4:44:f9:7e:62:75:
2a:73:95:cb:34:ac:19:28:78:9e:4d:88:e0:22:dd:
3a:de:70:c6:81:43:c9:22:28:bd:73:5c:5f:ef:7a:
ba:a3:36:94:c5:da:72:7b:8e:27:7e:d2:55:92:74:
a3:ea:85:52:3f:28:71:4a:a3:12:c8:61:98:f1:7d:
6e:79:45:9a:3f:df:99:c5:e2:aa:92:b9:44:14:fd:
e0:d7:b3:c3:12:94:01:e8:ce:95:0e:ed:8f:69:8d:
73:e1:8a:a4:f5:f7:03:03:14:f9:97:93:5f:7f:8d:
19:5b:a7:e2:0e:56:b0:68:1f:46:c9:d6:55:1e:47:
c3:50:7a:5d:71:bc:82:b6:92:a0:78:bb:a3:53:3f:
13:8e:e4:bd:1e:9d:fc:0d:a4:43:a1:e2:75:79:c6:
4f:bf:2c:51:d7:f3:3a:4f:3e:6c:57:a1:45:41:44:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F8:8E:C5:6D:0A:D4:1B:32:61:B9:A8:35:55:B1:DB:FF:5D:AD:81
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/uviOxW0K1BsyYbmoNVWx2_9drYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.100.0/22
46.8.118.0/23
46.8.195.0/24
46.8.198.0/24
46.8.203.0/24
188.130.224.0/22
Signature Algorithm: sha256WithRSAEncryption
87:4c:29:b7:53:7b:76:d2:1f:74:1c:b2:c7:75:23:74:bb:82:
0d:4c:18:58:f3:64:4b:b7:c1:03:1d:e1:3f:88:96:8b:3f:93:
d4:21:de:42:69:c6:84:98:d9:36:88:55:56:ba:54:1b:54:5f:
a5:1f:60:74:6b:73:4a:b1:25:4c:39:d7:49:9a:1e:49:ec:ae:
4b:b4:bd:cb:f6:09:33:81:95:1f:1b:94:92:a8:38:1a:a0:da:
9a:e7:ea:de:b5:31:56:9e:12:77:2a:35:5b:75:97:78:dc:17:
30:f5:59:8f:8f:fb:2a:b7:23:f0:ea:fd:cd:34:15:aa:c8:f7:
8f:3f:2c:ec:16:c1:09:18:d0:c4:55:c6:36:9a:68:d7:6b:b2:
25:a4:e3:a6:15:3a:19:11:af:32:6d:05:a9:fd:32:ea:d9:26:
0f:84:e1:bb:d5:cb:b1:73:99:9c:fa:c1:29:cf:1f:32:ba:79:
24:60:63:b4:ff:3d:81:92:4b:e6:5d:21:b5:69:15:e3:75:c9:
44:4d:a0:f7:f3:85:78:b2:11:bb:a8:8e:10:b8:54:e6:1e:b5:
9a:5b:5f:1a:f6:08:70:52:df:6a:c8:22:f0:65:1a:14:7d:a6:
10:ed:77:0a:9c:4b:c0:70:ea:ae:39:bc:97:69:af:4a:ed:43:
37:af:dd:8c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAY4KJLNDFpUug1y31MjWMBY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy
NjMxYjIwHhcNMjQwMzA0MTU0NjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWY4OGVjNTZkMGFkNDFiMzI2MWI5YTgzNTU1YjFkYmZmNWRhZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZmrYchK1hvGyY5ZxEcQ+AXupMRJ
kJR5y+UQNAgEubaXbRFfM73pQgGnxq78SdzNC3VddqQZ/YUWDhVNyD046hfV+aJn
kk1z8JJNTi8fgmXlsICkRPl+YnUqc5XLNKwZKHieTYjgIt063nDGgUPJIii9c1xf
73q6ozaUxdpye44nftJVknSj6oVSPyhxSqMSyGGY8X1ueUWaP9+ZxeKqkrlEFP3g
17PDEpQB6M6VDu2PaY1z4Yqk9fcDAxT5l5Nff40ZW6fiDlawaB9GydZVHkfDUHpd
cbyCtpKgeLujUz8TjuS9Hp38DaRDoeJ1ecZPvyxR1/M6Tz5sV6FFQUQ8xQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLr4jsVtCtQbMmG5qDVVsdv/Xa2BMB8GA1UdIwQY
MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt
MzY3MWQ2N2ViOWY4LzEvdXZpT3hXMEsxQnN5WWJtb05WV3gyXzlkcllFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4
LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLghkAwQB
Lgh2AwQALgjDAwQALgjGAwQALgjLAwQCvILgMA0GCSqGSIb3DQEBCwUAA4IBAQCH
TCm3U3t20h90HLLHdSN0u4INTBhY82RLt8EDHeE/iJaLP5PUId5CacaEmNk2iFVW
ulQbVF+lH2B0a3NKsSVMOddJmh5J7K5LtL3L9gkzgZUfG5SSqDgaoNqa5+retTFW
nhJ3KjVbdZd43Bcw9VmPj/sqtyPw6v3NNBWqyPePPyzsFsEJGNDEVcY2mmjXa7Il
pOOmFToZEa8ybQWp/TLq2SYPhOG71cuxc5mc+sEpzx8yunkkYGO0/z2BkkvmXSG1
aRXjdclETaD384V4shG7qI4QuFTmHrWaW18a9ghwUt9qyCLwZRoUfaYQ7XcKnEvA
cOquObyXaa9K7UM3r92M
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:07 2025 by rpki-client