Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa
File: 2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa (raw, json)
Hash identifier: tlC/Cdti9DOTrW2vJ3/LMhMeuxhFOtOxFl2p6304PGs=
Subject key identifier: DB:23:FB:C0:B2:4C:B9:68:BE:0D:DB:D5:62:DD:22:3E:7A:C3:93:1E
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 019425221A566F11A9A56F717789AD77D758
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51704
IP address blocks: 46.60.128.0/17 maxlen: 24
185.224.12.0/22 maxlen: 24
2a03:c500::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1a:56:6f:11:a9:a5:6f:71:77:89:ad:77:d7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db23fbc0b24cb968be0ddbd562dd223e7ac3931e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:ad:cd:67:c1:e0:77:91:31:86:1f:50:40:
30:33:7b:fd:f7:ba:c8:13:ed:89:49:f8:12:68:84:
78:fd:a1:64:66:4d:ac:32:fc:fc:b0:c8:8e:43:a0:
ca:d1:16:8c:2e:23:dd:35:0d:74:3e:fc:35:13:a5:
48:90:80:f2:5e:c9:1b:96:1f:45:73:f6:ca:12:3a:
ff:00:50:26:50:3e:65:20:99:ab:3e:2a:e2:54:24:
38:38:55:c6:39:3e:90:78:c1:4e:cc:e4:3a:7a:e1:
ac:a9:68:a6:cf:b8:39:fc:cc:4e:82:23:19:b4:1b:
8c:77:90:f6:af:55:68:4c:49:77:0d:14:26:d9:3d:
99:6d:65:a3:8e:a2:9e:d0:60:6c:06:0c:fd:3c:4e:
16:b8:77:55:c7:b9:52:e3:6d:93:cf:3f:65:89:82:
de:4e:88:eb:e4:67:1f:9d:30:8a:58:66:da:ef:c2:
d3:1e:78:4e:3c:6e:a9:5b:ab:4b:18:8f:3c:82:48:
f4:c6:69:9f:4c:f3:9e:f2:cf:1a:ec:73:38:41:34:
00:0a:76:ef:e0:23:2f:c1:15:23:5a:62:98:53:7c:
94:0d:b0:68:de:20:89:86:98:ce:a1:30:67:51:f4:
37:19:81:15:b9:6f:c4:27:95:d1:bd:69:d2:ed:98:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:23:FB:C0:B2:4C:B9:68:BE:0D:DB:D5:62:DD:22:3E:7A:C3:93:1E
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.60.128.0/17
185.224.12.0/22
IPv6:
2a03:c500::/32
Signature Algorithm: sha256WithRSAEncryption
69:67:1d:19:fc:44:e7:51:97:d3:6d:d5:90:6f:4e:78:3f:74:
68:30:eb:74:1a:0a:c6:9f:35:7d:e9:d0:c7:cd:29:4f:a2:8e:
c9:df:86:02:d7:e1:73:17:f6:5e:3d:4b:63:2c:9e:93:e7:47:
81:28:6b:7c:d4:7c:43:af:97:87:92:31:5d:39:20:52:67:e8:
80:74:23:9e:18:e0:a2:66:93:11:3a:a7:d2:71:f7:66:ce:94:
61:ec:af:b8:54:74:ae:5e:cb:af:7c:f1:b2:e9:c7:37:06:1b:
6b:b5:ce:91:08:07:0b:d0:98:d3:26:c9:4a:6c:df:a4:03:9d:
4a:ca:9e:14:57:d1:a4:8b:98:e3:cd:8e:37:be:c9:f8:a2:c8:
49:ea:f9:5b:36:f1:d1:bf:61:02:c0:ac:b1:2f:31:d3:8f:f3:
2e:2e:d8:47:01:01:f4:6c:1e:b5:d4:74:5e:af:ac:78:5b:73:
76:d6:b4:9b:4d:50:60:ce:df:5f:18:db:38:4a:7e:9d:38:6a:
df:3f:82:bd:61:a0:e9:9b:68:33:b3:8e:be:a6:fe:5a:d0:f3:
87:e4:db:d3:0f:25:87:e6:4b:01:47:ca:f3:3a:fd:ee:4d:a0:
32:22:01:85:ba:3e:d9:6a:32:9e:eb:e5:3f:70:b4:15:1e:c5:
bd:b3:83:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:34 2025 by rpki-client on console.sobornost.net