Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/udc46mgp-szqkgSRcIGKFCbr4JI.roa
File: udc46mgp-szqkgSRcIGKFCbr4JI.roa (raw, json)
Hash identifier: JhRkQnx4Eha9Xs6OT104V9KWisTA96XNNv0iCMA2cQI=
Subject key identifier: B9:D7:38:EA:68:29:FA:CC:EA:92:04:91:70:81:8A:14:26:EB:E0:92
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019423D7CE86FEC4A9A046248CAF53427667
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/udc46mgp-szqkgSRcIGKFCbr4JI.roa
Signing time: Wed 01 Jan 2025 21:48:53 +0000
ROA not before: Wed 01 Jan 2025 21:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57814
IP address blocks: 185.104.192.0/24 maxlen: 24
2a01:8640:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ce:86:fe:c4:a9:a0:46:24:8c:af:53:42:76:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 1 21:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9d738ea6829faccea92049170818a1426ebe092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:b3:c5:c8:84:15:72:91:51:0a:c2:67:81:
f1:4d:29:d1:71:6f:75:4c:6c:14:ba:01:a8:1a:f8:
7a:5a:b7:80:d7:3a:3c:e7:2b:c4:64:36:2b:be:1d:
c2:5e:e3:63:ed:64:3d:b2:de:b4:b0:94:4f:cb:a7:
b3:25:6f:b2:2d:77:79:bd:eb:80:62:a9:de:8e:0c:
5c:4a:f6:c7:f6:b4:96:80:76:0a:66:39:d7:5b:44:
d3:79:3d:9a:32:bf:56:7a:29:9b:c6:8d:9e:8b:8d:
5e:52:33:44:e3:26:3c:b9:30:8b:55:fa:da:a8:df:
fa:f6:d6:e6:6d:11:06:1b:45:5b:81:fd:56:eb:40:
13:45:29:a1:c3:46:d0:19:74:9c:78:f7:7b:26:82:
59:4c:2b:1e:93:92:a5:e2:c5:60:2e:cb:2b:2f:94:
33:36:9a:83:60:1e:bf:cb:75:76:14:8f:59:99:9d:
51:31:64:16:de:ba:19:4c:08:98:4c:5a:60:d6:ca:
1a:f8:a3:8d:e0:8d:78:66:6b:28:b9:e6:15:d5:88:
fd:53:54:57:92:be:6f:29:c2:24:25:19:c0:54:52:
7b:3e:55:de:04:43:ef:1e:6c:43:35:a5:dd:e2:0e:
5b:7b:a0:c7:75:51:7c:57:14:77:f2:8d:a5:93:03:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D7:38:EA:68:29:FA:CC:EA:92:04:91:70:81:8A:14:26:EB:E0:92
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/udc46mgp-szqkgSRcIGKFCbr4JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.192.0/24
IPv6:
2a01:8640:10::/48
Signature Algorithm: sha256WithRSAEncryption
8d:8e:17:ec:ed:2a:52:4d:23:31:1d:ee:c7:df:6e:0b:63:ed:
74:c9:08:92:c4:33:02:82:bf:a6:b1:d5:2f:ef:26:9b:96:2a:
b5:f7:08:33:6a:6e:91:c7:83:8b:65:01:c1:fc:d8:61:28:55:
fe:24:0a:5a:51:4b:a5:b0:6f:b6:14:c9:59:c0:02:42:66:94:
5d:fe:fd:5b:d5:ab:47:4f:13:17:4f:37:27:16:59:ca:7c:6a:
98:98:37:62:0b:c4:e0:55:c0:08:dc:64:19:47:07:d9:c5:1d:
d8:fe:53:34:10:9b:93:c1:3f:11:94:a4:9c:7f:b0:3f:36:aa:
ea:d9:56:0d:7b:be:54:50:d7:01:fe:ce:e1:84:f2:f2:db:ff:
0f:53:67:b3:7b:4d:0b:be:22:be:e7:1f:8c:5e:fc:7d:38:3c:
25:a5:c8:2d:4b:97:a0:84:29:1c:97:87:54:a8:76:7b:66:cc:
60:d1:82:d6:ba:e4:c5:e1:60:a0:74:32:cc:86:16:15:cc:9d:
05:dc:99:49:69:0b:39:38:d2:6e:16:34:5d:1c:dd:01:97:99:
f9:2e:7c:6f:0b:e3:ca:70:b7:ed:f0:d1:cf:39:4e:50:90:75:
11:49:79:65:a4:48:ad:82:6b:81:32:d2:cb:51:aa:c6:d5:31:
25:89:5e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:28 2025 by rpki-client