Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SHKySylbVuy-ad0e9r9ZwS28V0Q.roa
File: SHKySylbVuy-ad0e9r9ZwS28V0Q.roa (raw, json)
Hash identifier: 10QegiNdUmupH/9l6DiMNo0t078mLyeU5LZETgcWJcs=
Subject key identifier: 48:72:B2:4B:29:5B:56:EC:BE:69:DD:1E:F6:BF:59:C1:2D:BC:57:44
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2FEE67117B572363510B201E32256
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SHKySylbVuy-ad0e9r9ZwS28V0Q.roa
Signing time: Thu 02 Jan 2025 01:48:17 +0000
ROA not before: Thu 02 Jan 2025 01:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208030
IP address blocks: 46.19.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:fe:e6:71:17:b5:72:36:35:10:b2:01:e3:22:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4872b24b295b56ecbe69dd1ef6bf59c12dbc5744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:ce:5b:4a:2d:31:de:a9:2a:89:76:76:12:
f0:5a:c2:d4:a9:a2:f3:f0:1f:a4:ff:dd:f6:21:39:
2a:06:87:f7:39:cf:5d:60:cc:23:03:f8:35:7d:5e:
4e:bb:50:dd:23:c2:a0:0a:d8:27:e1:30:ac:5e:01:
ae:92:a3:a3:98:8e:a3:ac:f0:f0:8f:26:8f:03:ef:
cf:7f:c7:b7:ca:9b:50:24:68:26:16:4a:41:0f:95:
2e:70:10:b7:66:16:df:c1:a6:11:22:88:1e:3f:da:
b6:10:ce:92:ff:90:7d:b8:e4:b9:be:ec:6f:a3:9e:
87:2e:58:f7:1b:5f:29:d5:a6:3a:3e:31:7b:2d:0b:
f1:af:4e:41:10:2c:46:0b:20:da:68:39:65:0e:dd:
b1:a2:21:3d:ca:70:6e:10:31:f1:62:0a:b3:f3:4b:
92:52:94:94:41:d9:39:0d:00:46:d7:92:54:a1:d8:
42:6c:c0:3c:16:06:45:dd:db:cd:d3:7f:b6:bb:06:
52:07:6e:85:f4:bb:a2:61:4b:4c:60:a4:21:f4:3a:
72:b3:a5:68:2f:62:d4:d2:25:b9:03:7e:90:6c:3f:
82:61:c8:6c:83:3a:a0:f2:4f:08:ae:73:80:ac:8a:
86:46:7e:ca:e4:41:b9:0f:ca:3e:a4:e7:51:08:8d:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:72:B2:4B:29:5B:56:EC:BE:69:DD:1E:F6:BF:59:C1:2D:BC:57:44
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SHKySylbVuy-ad0e9r9ZwS28V0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.200.0/24
Signature Algorithm: sha256WithRSAEncryption
40:4d:3c:97:4a:98:f2:2a:09:9c:7e:aa:16:80:c4:cd:a2:df:
54:68:03:0a:72:ce:13:b2:b8:e6:81:ab:1f:95:aa:c7:34:c6:
5b:13:50:7e:1e:d8:2c:17:83:c4:7c:c4:66:c1:51:77:d1:ab:
b3:d0:af:94:39:63:94:dc:2e:c8:3b:f8:31:37:ee:c9:ff:fb:
62:c5:6c:bf:15:aa:88:de:19:2c:41:0d:69:c5:4e:67:2d:54:
65:34:50:76:e3:14:05:1b:58:dd:8e:2a:8c:1b:39:cf:73:07:
d7:3e:9c:87:97:14:a4:4e:db:76:25:ef:d1:5e:8d:84:eb:5d:
d3:33:96:a6:bc:c9:13:c4:28:0d:16:0f:9c:da:ad:55:c7:4c:
cf:2f:cb:b7:3d:d6:ce:28:65:f3:68:94:84:ed:b2:e7:fd:5a:
ef:30:36:41:35:80:86:a6:7f:f5:c9:8c:0c:a9:24:80:b6:d3:
c6:87:cb:46:45:91:d5:2a:a0:52:f5:84:b3:72:6d:6f:c3:61:
3a:3f:95:0c:85:d1:01:c9:3d:d8:4b:c5:af:93:5e:19:83:27:
3e:20:fe:f1:0d:18:75:0a:8c:cb:0d:76:03:2c:64:d1:0a:b6:
27:2b:bd:51:70:59:d7:d6:f8:9d:08:cd:a1:9a:9f:dc:84:09:
03:c1:dc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net