Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/Qoyp_KSFKsVEEg02fUYTNo7SRXs.roa
File: Qoyp_KSFKsVEEg02fUYTNo7SRXs.roa (raw, json)
Hash identifier: mLCh1eZnjR+MrenmFjvdAR50ujw/VIYVRd5MKC5x8OQ=
Subject key identifier: 42:8C:A9:FC:A4:85:2A:C5:44:12:0D:36:7D:46:13:36:8E:D2:45:7B
Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial: 0194206823985403FF1DE3C0197C668CA518
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/Qoyp_KSFKsVEEg02fUYTNo7SRXs.roa
Signing time: Wed 01 Jan 2025 05:48:03 +0000
ROA not before: Wed 01 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24232
IP address blocks: 46.235.104.0/24 maxlen: 24
46.235.105.0/24 maxlen: 24
46.235.106.0/24 maxlen: 24
46.235.107.0/24 maxlen: 24
46.235.110.0/24 maxlen: 24
77.247.2.0/24 maxlen: 24
77.247.3.0/24 maxlen: 24
77.247.6.0/24 maxlen: 24
77.247.7.0/24 maxlen: 24
77.247.12.0/24 maxlen: 24
212.11.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:23:98:54:03:ff:1d:e3:c0:19:7c:66:8c:a5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=428ca9fca4852ac544120d367d4613368ed2457b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:14:8b:be:dc:ed:1c:eb:0d:b0:1e:f6:c3:
c9:c1:ae:39:50:b0:5d:b5:c8:ad:fb:b8:38:e4:55:
46:13:de:ef:5a:fa:b1:83:4d:33:10:43:88:c0:33:
4d:f6:74:d6:76:a9:90:c8:ec:74:06:a8:09:21:30:
81:96:43:00:bc:df:50:0f:56:99:7b:06:94:92:fc:
e3:3f:91:85:0f:80:6f:92:2e:8d:53:aa:fa:c3:bb:
76:fa:95:b2:9e:de:5d:96:3b:8b:74:3b:29:18:cb:
6d:0f:6e:e0:ac:c3:e1:ca:20:0d:21:46:a7:02:09:
8c:b2:60:df:34:a0:0d:42:e1:aa:d0:1a:d9:f3:21:
d2:83:b4:f1:c8:ae:80:c0:89:bf:0e:21:3f:3a:3a:
57:bb:22:99:74:2c:ba:0a:d3:41:35:9a:b3:13:3e:
fe:10:d8:73:1a:94:0e:d8:e4:0e:21:3a:8c:01:e7:
e6:b8:98:3d:c9:f5:98:e6:13:50:ef:77:d3:e6:5f:
90:71:73:ec:8b:bd:be:ef:ab:ec:4f:bd:59:ae:69:
d6:08:2a:fb:9c:fd:45:16:8c:b2:98:a8:9f:cc:a3:
5c:46:df:a3:42:0b:c7:b1:1c:81:8b:96:db:f7:02:
a9:e6:67:cf:c9:3c:dc:7d:de:bb:4e:7a:b3:82:66:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:A9:FC:A4:85:2A:C5:44:12:0D:36:7D:46:13:36:8E:D2:45:7B
X509v3 Authority Key Identifier:
keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/Qoyp_KSFKsVEEg02fUYTNo7SRXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.104.0/22
46.235.110.0/24
77.247.2.0/23
77.247.6.0/23
77.247.12.0/24
212.11.80.0/24
Signature Algorithm: sha256WithRSAEncryption
19:40:ab:a6:57:85:b3:cb:9d:b1:92:c5:e6:4a:60:8a:6e:f9:
e8:2e:ed:12:3f:09:7f:86:31:db:6c:42:ac:06:51:f3:28:b7:
25:f8:e3:c6:95:56:02:c7:ac:3f:e9:50:6b:b6:a5:3d:a2:fb:
e1:b8:11:c5:6d:3b:21:60:43:45:0c:f0:a1:af:6e:9b:f7:8f:
44:a9:f7:24:8d:62:5f:76:a3:6c:70:ee:97:f2:93:95:d9:e3:
54:89:9e:b9:65:71:5e:72:67:4d:8a:90:2b:81:6d:e8:2c:c5:
3e:4e:f4:da:99:74:57:bb:d0:0b:a6:98:f6:ee:f9:ba:b7:fa:
26:4a:22:ba:d2:41:46:ff:7c:d0:3a:50:bb:bd:22:c3:e1:e4:
28:65:40:f6:17:ba:f3:99:18:78:bb:28:ee:20:41:cf:75:63:
f9:62:eb:da:f6:1a:cd:4b:49:30:9c:a5:78:c7:39:6e:47:df:
ce:e8:f1:89:49:46:7f:79:5a:dc:2a:0b:8b:a3:8d:71:bd:4e:
9d:e4:aa:80:cf:7c:93:df:67:c1:d3:4d:6b:74:a6:6f:f4:db:
ce:2b:75:2c:1a:35:c4:df:c9:d8:9a:32:b7:ee:56:fb:03:1a:
2b:43:5f:2a:d5:60:2d:24:a0:0a:db:f9:79:a0:8b:e9:bf:98:
e1:64:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net