Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/uTecjJ9MBD9OrCIkljj-1cChseI.roa
File: uTecjJ9MBD9OrCIkljj-1cChseI.roa (raw, json)
Hash identifier: wAxDLP/Df+XRnERPTihH1CBtYkYTIMM5iDHe/amYW3M=
Subject key identifier: B9:37:9C:8C:9F:4C:04:3F:4E:AC:22:24:96:38:FE:D5:C0:A1:B1:E2
Certificate issuer: /CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Certificate serial: 0190A11741D2EE9DB854E8E19B85CE9C0B1F
Authority key identifier: 93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/uTecjJ9MBD9OrCIkljj-1cChseI.roa
Signing time: Thu 11 Jul 2024 09:19:34 +0000
ROA not before: Thu 11 Jul 2024 09:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29650
IP address blocks: 45.139.240.0/22 maxlen: 24
79.140.128.0/20 maxlen: 24
82.195.128.0/19 maxlen: 24
84.51.224.0/21 maxlen: 21
84.51.236.0/22 maxlen: 22
84.51.240.0/20 maxlen: 20
212.78.224.0/20 maxlen: 20
212.78.240.0/22 maxlen: 22
212.78.240.0/23 maxlen: 23
212.78.252.0/22 maxlen: 22
212.84.40.0/21 maxlen: 24
2001:1bd8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:17:41:d2:ee:9d:b8:54:e8:e1:9b:85:ce:9c:0b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Validity
Not Before: Jul 11 09:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9379c8c9f4c043f4eac22249638fed5c0a1b1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:6d:f3:a9:64:bf:c8:9e:60:8a:2d:79:2a:
14:dd:61:a1:02:24:ce:bf:35:bb:02:5c:8a:20:bd:
aa:08:23:06:b5:5d:f7:20:d3:56:29:ef:1d:a6:1c:
f6:95:b3:6d:29:3b:16:76:fe:f0:43:c4:a9:6b:5e:
ad:06:2f:ad:fd:4b:dc:7d:87:21:ec:9c:4c:d1:9a:
5a:d6:f3:e6:92:1c:44:e8:88:0c:73:37:70:12:0a:
1d:a1:30:3f:77:1c:8b:3d:24:d9:33:14:57:94:bc:
d5:63:dd:ab:8a:ab:28:eb:7e:52:c1:9c:68:b4:7f:
e6:c5:58:96:9d:fd:e2:76:4e:e1:80:1a:9e:a2:cb:
7a:02:41:7e:da:3e:f3:92:fc:44:d4:69:b9:c7:e7:
ca:55:45:59:58:37:32:06:22:f6:d0:b5:7f:ac:24:
1f:10:6d:5f:43:69:d1:08:6b:20:c7:50:59:24:20:
9b:2c:51:88:44:75:ab:94:3b:25:a0:55:d6:29:e3:
18:aa:a0:b2:93:1f:ca:7a:75:2b:55:c3:52:d7:3b:
c8:cb:a0:db:d3:44:f7:c2:17:58:16:6f:61:9a:0c:
00:a5:2d:50:b8:03:12:c9:2d:16:94:d0:35:11:87:
50:19:82:a3:93:04:02:9c:fa:11:ce:1b:5e:57:51:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:37:9C:8C:9F:4C:04:3F:4E:AC:22:24:96:38:FE:D5:C0:A1:B1:E2
X509v3 Authority Key Identifier:
keyid:93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/uTecjJ9MBD9OrCIkljj-1cChseI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.240.0/22
79.140.128.0/20
82.195.128.0/19
84.51.224.0/21
84.51.236.0-84.51.255.255
212.78.224.0-212.78.243.255
212.78.252.0/22
212.84.40.0/21
IPv6:
2001:1bd8::/32
Signature Algorithm: sha256WithRSAEncryption
b3:d0:35:c2:c7:0b:6e:60:c6:8a:b3:fc:fc:c3:ed:0d:03:6c:
d3:76:c3:0c:28:14:37:19:fe:d7:55:79:dd:af:d7:c0:f8:a9:
07:6c:56:28:58:d6:a7:78:89:a2:5b:93:07:1f:01:93:ba:52:
33:1a:2d:38:46:10:2a:5c:84:b8:7f:54:1b:eb:f0:98:3e:03:
0c:c8:c3:2a:a4:f9:82:eb:b0:45:f0:69:09:1a:d8:09:d2:b3:
6f:d0:5e:cc:4a:d1:b6:0a:f5:a6:0a:93:92:cd:ea:32:7f:b7:
b5:6c:92:54:25:e0:07:08:57:56:cb:a7:d7:d3:dc:7e:ec:cc:
47:83:6d:a6:3b:ac:37:d8:11:6e:38:11:fb:41:8a:f7:2d:22:
82:8d:df:9e:e4:0e:9e:52:30:a0:9c:1a:a3:c4:52:94:63:6e:
f7:3d:59:6d:14:b3:d0:e4:a3:cb:dd:c4:90:b4:ef:82:b7:42:
78:ad:e3:dc:60:1d:35:68:5b:6b:89:dd:43:56:75:1c:f1:06:
4b:55:21:01:52:a8:26:16:61:e0:ff:b5:13:af:1a:cd:f7:2f:
7a:29:f0:23:1e:5a:93:27:18:f0:01:0a:c2:17:2e:0e:0c:8c:
16:3f:7c:5d:18:d5:48:ae:5f:ea:a9:73:df:57:3d:f7:44:e7:
96:51:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:31 2025 by rpki-client