Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/h0WesqYfq4oIW4Kmr3rq79DYPvQ.roa
File: h0WesqYfq4oIW4Kmr3rq79DYPvQ.roa (raw, json)
Hash identifier: ehdfKDiSmJBYiwILSnbgVxFwZyYCZeZCngnSSyPuNBI=
Subject key identifier: 87:45:9E:B2:A6:1F:AB:8A:08:5B:82:A6:AF:7A:EA:EF:D0:D8:3E:F4
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 01955AEF15AB4694361CB49B775F85D02DD4
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/h0WesqYfq4oIW4Kmr3rq79DYPvQ.roa
Signing time: Mon 03 Mar 2025 07:36:12 +0000
ROA not before: Mon 03 Mar 2025 07:36:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208783
IP address blocks: 46.227.165.0/24 maxlen: 24
91.200.178.0/24 maxlen: 24
91.213.251.0/24 maxlen: 24
194.48.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5a:ef:15:ab:46:94:36:1c:b4:9b:77:5f:85:d0:2d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Mar 3 07:36:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87459eb2a61fab8a085b82a6af7aeaefd0d83ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:f2:f4:be:77:38:c5:95:99:a1:0a:b3:32:
c2:f8:bd:6c:18:a5:e5:ba:2e:34:62:c4:7c:66:ce:
66:4a:d5:fc:4b:2f:8d:0f:e4:13:d7:80:d0:5f:ca:
d2:c8:ae:1c:a6:c0:c5:24:f4:2d:d7:f1:2f:2d:34:
cf:d4:1e:57:23:fa:4c:c0:49:4d:b8:1f:06:a4:3e:
cf:6a:f6:e1:b9:ee:c6:8b:7d:af:9e:4f:9a:6a:cb:
42:33:e3:b2:b4:33:25:59:08:4a:1f:cc:07:3d:b5:
29:b8:40:88:c9:ec:43:90:1d:12:7e:df:c8:5d:e8:
35:54:ef:a6:6c:26:7c:f6:94:d8:14:c1:ed:17:23:
cf:f5:4e:44:2a:92:0c:d5:d1:44:42:fe:79:d6:f7:
fb:9c:5e:10:45:76:ab:16:d6:61:69:80:06:48:ad:
d9:49:9f:04:5a:e9:13:38:b6:00:b8:b3:ad:b3:92:
11:7c:ad:b4:3e:28:16:51:e7:64:ed:1d:aa:4f:a1:
cb:f7:3a:63:7f:d6:04:92:21:b1:68:3e:69:e2:8f:
45:a6:f5:97:cd:7b:9c:f3:e4:ae:f2:5f:68:a6:2b:
dd:18:87:76:1f:f6:69:a8:f7:ba:40:cb:a9:9f:d0:
15:a3:10:5a:61:c3:99:90:1d:71:77:19:2d:d8:fc:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:45:9E:B2:A6:1F:AB:8A:08:5B:82:A6:AF:7A:EA:EF:D0:D8:3E:F4
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/h0WesqYfq4oIW4Kmr3rq79DYPvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.165.0/24
91.200.178.0/24
91.213.251.0/24
194.48.199.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ec:6b:29:1f:22:83:1e:eb:4c:76:3c:fb:af:58:e2:e6:79:
a4:a4:10:6a:82:17:ea:a5:3f:c6:48:08:c2:47:e5:96:49:84:
f1:99:e5:61:84:97:34:e4:9e:f2:82:bf:32:5c:3b:3b:3b:7e:
d0:a0:41:7d:03:21:43:3e:df:31:96:8c:44:b8:f9:a2:8f:5d:
ab:78:a5:56:cc:f0:fc:04:f1:19:c2:ce:cf:97:bb:ff:7b:e8:
1f:aa:a8:62:ca:ed:d7:98:48:e0:2e:95:49:c0:16:42:53:cf:
a6:66:6f:02:64:32:ed:8a:ae:c5:fc:19:3d:af:db:34:a7:ff:
c4:dc:a0:60:d6:32:1a:ee:ba:c0:6e:92:fb:48:51:48:cf:31:
6a:b3:3b:0e:de:56:5e:47:64:34:30:31:7d:4f:11:4b:ca:2b:
35:f5:ba:b2:93:76:6f:86:a8:1e:10:74:85:b1:fd:f8:cc:76:
52:e8:59:95:84:18:ab:b7:87:8f:09:2c:7a:2a:b0:1b:70:64:
e2:81:79:c5:50:95:9c:29:48:62:77:5c:ec:c8:75:33:11:1a:
0a:61:d6:83:36:b7:dd:38:12:24:d0:e7:c7:48:99:f7:6d:66:
4f:f3:e2:e3:45:cb:aa:6e:d4:c0:b0:96:6b:bf:bc:81:6b:81:
52:a7:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 18:00:53 2025 by rpki-client on console.sobornost.net