Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/ldODaBOmVHo8BFc3Qw9pGDyJiEs.roa
File: ldODaBOmVHo8BFc3Qw9pGDyJiEs.roa (raw, json)
Hash identifier: rmdsvK470zI9xYT/Ts/JVvHVmj5J/Tw+y1heTWpL5gU=
Subject key identifier: 95:D3:83:68:13:A6:54:7A:3C:04:57:37:43:0F:69:18:3C:89:88:4B
Certificate issuer: /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial: 019427B63AF2537E224EF2891B8664C02081
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/ldODaBOmVHo8BFc3Qw9pGDyJiEs.roa
Signing time: Thu 02 Jan 2025 15:50:41 +0000
ROA not before: Thu 02 Jan 2025 15:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28824
IP address blocks: 46.250.192.0/19 maxlen: 24
185.115.244.0/22 maxlen: 24
213.162.224.0/19 maxlen: 24
2001:4da8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:3a:f2:53:7e:22:4e:f2:89:1b:86:64:c0:20:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Validity
Not Before: Jan 2 15:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95d3836813a6547a3c045737430f69183c89884b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:da:96:8c:21:95:95:3e:9e:f3:dc:4e:16:
50:a4:f4:4c:0e:23:70:2c:4e:60:27:aa:c6:bf:00:
21:c6:8e:5a:01:df:37:d4:8b:01:45:68:67:c3:91:
dc:bf:eb:df:49:44:dc:2b:51:84:f8:46:b3:d0:2d:
17:eb:02:2e:36:c3:8b:e4:43:4b:69:78:c9:ac:da:
f6:aa:96:21:78:ef:89:74:17:2f:ea:50:29:09:54:
1e:c8:0a:34:e5:9c:15:e2:ec:39:71:de:c7:cb:cc:
1e:23:e1:3e:67:00:a2:3f:06:5e:50:33:71:bb:ca:
3d:14:21:17:8e:fa:e2:69:e4:5f:89:70:65:b1:89:
ba:fe:75:ce:f0:74:b2:0e:a7:8f:3d:13:c9:15:46:
62:f9:e5:1a:49:32:4a:d4:cc:60:a0:bc:3e:c6:f8:
19:62:b0:e9:4e:27:40:76:4c:af:94:64:e3:7a:ed:
c7:78:ad:91:47:fd:2e:7d:65:f2:48:dc:4f:f1:af:
3d:03:78:55:f6:1f:5b:46:13:e8:b7:5a:85:38:22:
90:d5:f0:88:c5:cd:2e:ee:d1:94:65:7d:8a:13:10:
ca:80:e9:5c:b2:07:8e:bb:da:df:11:b5:64:2b:46:
e4:5f:48:ab:3b:46:60:bf:9c:e7:ca:e0:19:dc:17:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:83:68:13:A6:54:7A:3C:04:57:37:43:0F:69:18:3C:89:88:4B
X509v3 Authority Key Identifier:
keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/ldODaBOmVHo8BFc3Qw9pGDyJiEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.192.0/19
185.115.244.0/22
213.162.224.0/19
IPv6:
2001:4da8::/32
Signature Algorithm: sha256WithRSAEncryption
01:7b:37:50:a4:8e:f3:a5:74:f0:d3:c2:4b:95:ea:dc:25:47:
b6:98:28:2c:19:4e:24:9c:df:bd:f7:4e:48:97:ed:36:58:de:
1b:02:8a:b4:23:bf:10:0c:4b:0f:47:d0:3e:70:36:1a:90:c6:
7d:f6:84:cf:bf:8d:c8:50:cf:b9:54:18:f4:51:fa:a2:e8:bc:
1c:5c:94:2a:e9:14:d0:49:68:64:3a:c5:aa:18:b9:c7:67:ea:
37:e5:5f:ef:21:62:1f:63:d6:5f:5e:9b:39:3a:75:61:94:0a:
ef:73:f4:f6:09:57:b7:12:72:2f:8a:f3:a9:40:b5:cb:6a:15:
5a:5e:61:eb:7d:a4:45:f5:ff:47:9e:2b:7f:98:ba:57:a0:7b:
34:cd:59:02:a5:f0:e2:21:61:ce:75:90:cd:40:e9:31:7c:2c:
ad:af:ae:97:e5:dc:b0:60:22:ef:a7:eb:47:75:9f:a3:6e:5d:
ce:79:2e:c8:3f:66:07:dd:15:76:da:f3:ba:be:87:97:65:1d:
b5:7e:71:32:8f:ad:27:1e:a0:8a:34:f5:5b:e3:90:84:97:61:
ff:bd:b9:6d:77:20:eb:70:0c:5f:80:31:16:82:f5:6a:e0:fd:
e7:f6:2b:98:e3:74:b2:ec:4a:fc:f4:e2:6f:54:ba:86:60:99:
d2:ee:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:34 2025 by rpki-client on console.sobornost.net