Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/uvbuDXpk4-Bz4KCW8l8RvKCLhbc.roa
File: uvbuDXpk4-Bz4KCW8l8RvKCLhbc.roa (raw, json)
Hash identifier: zt3teuYB/LDusbhXT2QHfAUm1rc6x4ed7PIRRp9xlek=
Subject key identifier: BA:F6:EE:0D:7A:64:E3:E0:73:E0:A0:96:F2:5F:11:BC:A0:8B:85:B7
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 01856F9DBD51CA29363FD3F35B79BFF59115
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/uvbuDXpk4-Bz4KCW8l8RvKCLhbc.roa
Signing time: Sun 01 Jan 2023 23:14:46 +0000
ROA not before: Sun 01 Jan 2023 23:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 194.180.232.0/23 maxlen: 24
194.180.236.0/23 maxlen: 24
45.133.112.0/22 maxlen: 24
45.136.24.0/22 maxlen: 24
45.147.8.0/22 maxlen: 24
45.147.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:bd:51:ca:29:36:3f:d3:f3:5b:79:bf:f5:91:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Jan 1 23:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baf6ee0d7a64e3e073e0a096f25f11bca08b85b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:e1:21:38:4a:f7:f7:08:82:81:78:14:83:
c2:1b:46:4e:72:1b:7e:c3:60:5d:ce:38:e4:41:59:
c1:69:05:df:5d:1c:af:50:d1:bb:7b:ac:95:67:cf:
9a:d4:1d:4b:45:33:8f:a4:a8:d2:29:40:9c:cc:ab:
39:9e:4b:14:ff:c0:9e:70:3f:ff:a4:33:00:e2:c6:
e0:19:c5:d7:54:fb:73:5a:12:af:b2:81:11:72:5a:
40:c6:41:b3:52:ab:6e:45:11:96:6b:d0:5c:f7:01:
43:8e:ef:ae:64:f8:af:ab:ad:02:f5:42:ff:15:9d:
ab:dd:dc:27:44:02:d9:8f:96:3e:af:a2:d9:4d:e6:
6d:6b:22:7b:1c:86:0b:a3:d9:cf:55:10:54:63:c7:
81:22:16:f9:b4:89:aa:99:81:f8:c5:65:da:44:0a:
66:00:ea:a6:8a:cb:c5:67:b6:15:9e:39:ce:4c:61:
ef:78:e0:f7:7f:e5:12:40:5d:34:bb:4d:e1:42:9c:
7a:69:c3:b4:02:85:ea:6e:7a:b1:8b:d8:e3:de:dc:
9f:82:d4:18:95:b2:c1:0a:e0:22:33:13:d7:02:be:
79:38:93:05:c9:68:a0:af:06:02:d2:9f:1a:c0:c1:
ed:74:cf:20:90:39:ef:8a:56:f1:74:d2:07:e5:ff:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F6:EE:0D:7A:64:E3:E0:73:E0:A0:96:F2:5F:11:BC:A0:8B:85:B7
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/uvbuDXpk4-Bz4KCW8l8RvKCLhbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.112.0/22
45.136.24.0/22
45.147.8.0/22
45.147.232.0/22
194.180.232.0/23
194.180.236.0/23
Signature Algorithm: sha256WithRSAEncryption
08:55:f4:8e:76:2f:7f:91:1f:69:91:79:21:0e:92:d3:7b:15:
9f:f3:9a:ba:5f:c4:49:0d:1a:51:9b:8b:23:c2:4a:9e:5f:b7:
3f:9b:92:a5:d4:c6:3e:fe:19:22:c8:ba:c9:39:53:e5:e2:e0:
fe:c1:00:7d:c2:93:55:c9:97:16:4e:cd:e8:24:fd:79:c3:49:
d4:3b:bc:1f:6b:fa:54:b5:9a:ae:ca:ef:8e:2e:6b:90:09:aa:
7d:f4:c8:8b:3a:71:47:9f:40:45:78:c8:98:31:a5:97:4c:31:
0d:92:4a:b4:19:1b:41:ce:e8:37:49:99:15:6f:85:a5:ba:4b:
4b:2e:f1:36:ec:a2:d3:1a:56:29:df:4d:80:f4:8f:7c:9b:1b:
59:cd:67:52:67:80:54:5c:4c:7a:c6:d6:e1:bd:5a:69:d6:26:
dd:8f:64:0e:0c:53:3a:4c:13:87:cc:4b:5a:e1:14:ff:2d:b0:
fa:c5:c2:c6:c6:fe:27:5c:db:80:b6:de:ef:bd:ad:51:97:0a:
65:c9:36:5e:2d:ce:58:a3:ff:eb:fb:3f:1b:78:1b:f5:2b:0d:
e8:86:90:82:d0:14:10:b6:0b:18:b4:2e:48:b5:73:e6:02:f8:
68:91:7f:02:31:85:de:86:3c:e6:15:4f:b1:f8:0c:cc:9c:a2:
0c:71:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:37:16 2025 by rpki-client