Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/UDCYuklcdqmp2kt8bHbNSYSwGPU.roa
File: UDCYuklcdqmp2kt8bHbNSYSwGPU.roa (raw, json)
Hash identifier: 4B3vf87J7CaVLCvFHgh0Ro7Rgi6VyCBZoBrvLltJsg0=
Subject key identifier: 50:30:98:BA:49:5C:76:A9:A9:DA:4B:7C:6C:76:CD:49:84:B0:18:F5
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 0188BA1959711E7E340AA70C0AAC81CF8EB6
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/UDCYuklcdqmp2kt8bHbNSYSwGPU.roa
Signing time: Wed 14 Jun 2023 13:30:03 +0000
ROA not before: Wed 14 Jun 2023 13:30:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
46.228.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:19:59:71:1e:7e:34:0a:a7:0c:0a:ac:81:cf:8e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 14 13:30:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=503098ba495c76a9a9da4b7c6c76cd4984b018f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:0c:a3:84:9f:c4:2f:f3:23:9c:79:b3:f1:
81:ef:a0:0e:70:e9:e0:b8:d9:d5:f8:48:21:3c:b9:
d5:d1:a2:ca:a3:22:9c:37:b2:23:50:fc:47:f4:b9:
6b:6c:a5:7e:cf:2a:12:f4:26:0a:2b:30:8f:d4:76:
3c:59:d0:6e:d3:03:8e:09:ef:4a:99:ff:aa:0a:db:
a9:7d:97:5f:89:c6:93:33:68:5a:c3:53:b9:e2:57:
ad:6c:9e:62:e8:83:84:74:a1:f0:4d:8a:43:fb:40:
2b:af:98:f6:57:92:0d:a5:1a:51:52:9d:be:92:cc:
96:fa:02:a1:97:fe:30:5b:8f:51:0d:fc:87:9e:5e:
da:e4:a4:1f:fa:a7:b5:6d:41:8b:e4:98:2b:e8:85:
e3:ea:dc:ac:1e:c1:5e:6f:2b:b8:10:b1:4c:6b:cd:
fb:e8:b6:8a:7e:fb:20:fe:36:dc:27:6b:0b:11:69:
dc:75:ff:0b:2e:b6:89:4a:2c:dd:4d:ec:81:b8:28:
95:9d:69:55:4d:e9:68:01:d6:58:b6:23:af:54:24:
f6:33:d2:33:68:c5:84:7d:cd:6c:ac:64:63:d7:37:
5e:57:af:e5:75:aa:26:f3:a5:2d:2f:24:c3:5a:f5:
cb:1e:75:bc:eb:f9:09:58:3c:ba:45:74:90:82:59:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:30:98:BA:49:5C:76:A9:A9:DA:4B:7C:6C:76:CD:49:84:B0:18:F5
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/UDCYuklcdqmp2kt8bHbNSYSwGPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.135.0-46.228.137.255
Signature Algorithm: sha256WithRSAEncryption
90:f1:9b:6f:9b:92:12:3d:8f:20:88:48:47:23:a8:32:b6:ef:
bd:33:14:b8:21:61:42:d6:f0:aa:76:96:02:b2:3a:47:1e:26:
1b:00:db:3a:bc:e1:ff:9b:30:16:44:df:ff:d8:58:ba:b7:59:
17:b5:0f:4a:42:08:15:8e:79:58:a6:95:02:28:e3:04:5f:67:
ed:25:5c:5b:5d:c8:e2:df:b4:b9:9d:2b:d6:f6:3e:f8:de:77:
aa:54:ab:d3:77:db:ad:02:f2:ad:64:81:8a:a4:39:a1:19:ca:
a2:0a:3e:74:d7:dc:d9:4c:c6:8c:90:a4:f8:9d:54:3e:05:ac:
67:d7:85:d8:8a:9c:05:e3:36:c6:da:9d:25:cb:1d:cc:c0:f9:
f4:2c:80:e0:c9:94:a4:10:aa:54:b1:fb:99:50:f6:ca:16:75:
d0:6c:0d:85:f2:36:4a:3d:82:48:a8:f9:85:54:04:4e:2b:4b:
66:d2:6d:69:54:68:28:c9:0f:4a:66:24:c3:57:63:89:f3:90:
a2:bf:17:dc:e1:ce:c3:74:8a:c6:be:6d:77:eb:a0:7a:01:af:
4a:71:28:b0:74:bc:bf:42:ff:4f:27:22:86:b3:f2:20:eb:5e:
b9:35:cd:55:99:41:97:29:3c:0b:81:13:d0:82:44:61:de:45:
78:30:5f:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:19 2025 by rpki-client