Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/dFrITcK-gyFXGF4gMBJMUn82DUw.roa
File: dFrITcK-gyFXGF4gMBJMUn82DUw.roa (raw, json)
Hash identifier: JzRq8pBFAlmY9cNlSptGZN7KGuqVF/MkHyhE1GubBM4=
Subject key identifier: 74:5A:C8:4D:C2:BE:83:21:57:18:5E:20:30:12:4C:52:7F:36:0D:4C
Certificate issuer: /CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
Certificate serial: 0195899D1CD42EEFAB29D763538E39B6945E
Authority key identifier: E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/dFrITcK-gyFXGF4gMBJMUn82DUw.roa
Signing time: Wed 12 Mar 2025 09:08:49 +0000
ROA not before: Wed 12 Mar 2025 09:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56403
IP address blocks: 46.235.16.0/22 maxlen: 22
46.235.20.0/23 maxlen: 23
46.235.22.0/24 maxlen: 24
46.235.23.0/24 maxlen: 24
185.194.128.0/22 maxlen: 22
185.194.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:9d:1c:d4:2e:ef:ab:29:d7:63:53:8e:39:b6:94:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
Validity
Not Before: Mar 12 09:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=745ac84dc2be832157185e2030124c527f360d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:63:26:1e:74:02:86:a7:15:2c:75:9c:55:
35:17:3e:52:fb:31:53:e7:71:7f:62:8a:ec:bb:fe:
77:cd:ff:51:78:24:da:79:10:3e:c3:45:e0:7b:0b:
74:dd:7b:f5:c9:35:d2:31:b4:38:76:a4:a4:26:eb:
3c:87:d0:6d:95:d7:b6:0a:de:a8:10:85:06:51:d6:
f4:9d:54:9f:1b:ef:34:11:75:5c:73:9a:94:27:4a:
36:bc:21:7e:da:22:15:95:1d:fc:9d:0c:42:f5:bf:
8a:10:71:9a:ac:06:bf:25:74:9c:9d:a6:16:66:e7:
ee:56:33:f3:86:71:c7:62:0c:68:2a:bf:4c:67:11:
2b:1c:27:3c:2b:e5:5e:94:d8:3b:8f:aa:b6:9a:fd:
f0:49:1c:dc:c5:c8:a5:3a:49:e0:c1:3d:82:18:98:
c8:ef:e9:20:6f:a6:a1:d3:6c:6c:7f:4f:88:39:34:
29:32:f8:df:96:8a:53:52:ba:99:a7:07:e1:5a:aa:
84:8d:4d:56:69:42:1b:06:22:1b:31:84:eb:a4:98:
de:05:11:3d:eb:5f:08:65:37:84:2e:9e:ef:68:84:
a2:f1:4c:40:54:08:f0:03:a5:00:74:ff:86:9d:b7:
aa:a7:e7:e8:24:ca:e8:e3:5e:7e:16:d9:28:a2:c2:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5A:C8:4D:C2:BE:83:21:57:18:5E:20:30:12:4C:52:7F:36:0D:4C
X509v3 Authority Key Identifier:
keyid:E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/dFrITcK-gyFXGF4gMBJMUn82DUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.16.0/21
185.194.128.0/22
Signature Algorithm: sha256WithRSAEncryption
14:4e:6d:e5:38:3b:9d:2b:9b:c8:80:81:d8:4a:9d:b2:35:94:
89:15:91:44:3a:18:17:35:f8:7d:73:00:15:ca:1b:d3:f2:8b:
6c:de:cc:c9:be:ce:2e:e0:b4:21:20:8f:c4:4b:11:04:9f:76:
52:64:4b:94:e9:b0:94:35:27:33:bd:6a:77:37:f5:18:47:e7:
a6:91:de:35:c8:c7:c7:8c:63:00:c7:c6:6f:49:8c:33:ca:55:
de:2d:2e:41:6a:cf:14:33:ab:61:1b:b7:89:a4:34:1f:8f:9f:
6b:91:1b:a8:25:d6:98:12:de:a2:c7:59:29:c0:6b:89:e5:cb:
6b:48:58:87:f8:69:66:c6:00:06:eb:91:34:f6:d1:14:95:6a:
b0:74:15:cf:c2:b1:e5:d9:98:42:9b:3e:56:da:da:ab:3c:3d:
21:d8:54:3d:a5:6c:e5:15:53:4b:06:12:0e:9c:a8:34:19:9e:
a6:23:73:c2:5e:9c:04:b1:19:7a:6e:e5:5d:7f:15:c0:f8:be:
6e:6d:e2:08:50:ee:bc:0f:24:1d:e3:b2:21:08:fb:e4:fc:8c:
4e:b0:5f:81:0b:0f:b8:55:0c:2f:4d:f2:3a:a0:bb:55:12:b1:
3d:f4:47:26:4f:63:a5:b4:2a:7c:62:23:94:66:7a:bb:16:e8:
e9:1a:ae:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net