Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/r_5d7ThCv4Vhv8YC1BU6003bgwY.roa
File: r_5d7ThCv4Vhv8YC1BU6003bgwY.roa (raw, json)
Hash identifier: P9T8vj8+Q2LopXTSLJaRKiIagzilgVpc+FYXPQ5RHYE=
Subject key identifier: AF:FE:5D:ED:38:42:BF:85:61:BF:C6:02:D4:15:3A:D3:4D:DB:83:06
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 01962EE286695F2DB98D1D5228976E898052
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/r_5d7ThCv4Vhv8YC1BU6003bgwY.roa
Signing time: Sun 13 Apr 2025 11:21:59 +0000
ROA not before: Sun 13 Apr 2025 11:21:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209671
IP address blocks: 46.174.140.0/23 maxlen: 24
185.104.208.0/22 maxlen: 24
2a06:3340::/32 maxlen: 32
2a09:de80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:e2:86:69:5f:2d:b9:8d:1d:52:28:97:6e:89:80:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Apr 13 11:21:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=affe5ded3842bf8561bfc602d4153ad34ddb8306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:92:cd:a2:a8:8d:b2:00:12:92:41:6d:9a:
b7:cd:2f:59:c5:08:b7:3e:c7:21:73:ec:21:ef:0c:
62:82:51:c1:10:9b:6f:df:71:8e:3d:c5:b0:6b:3c:
11:77:16:a0:1e:f5:82:b4:bc:dd:5c:9c:fe:17:94:
9e:50:ca:a2:69:50:26:c2:24:58:2c:65:43:48:e9:
d7:a2:56:9a:35:de:35:f8:44:21:cb:1e:48:bb:cc:
37:5a:67:5b:20:3c:24:5e:13:f5:9a:4a:f5:5b:29:
5f:17:a8:59:fa:f8:72:b2:64:70:8d:a0:33:91:36:
d0:69:38:6e:ff:ff:d1:b4:d4:b1:6a:7e:44:b1:ec:
41:4a:43:52:7c:4e:47:71:34:8c:fa:09:1a:71:8d:
da:7a:e8:bb:b1:4e:46:69:18:4c:f1:44:02:18:1d:
6e:6c:d2:96:59:1f:18:59:75:5d:29:6a:9c:c4:3b:
2d:2e:ea:41:1a:54:b0:78:13:65:11:f4:90:ef:73:
17:29:8f:11:4c:d9:ce:c2:4e:f6:3d:03:c0:ec:08:
9a:1d:86:57:28:00:62:0f:01:1c:f3:dd:b0:4c:3a:
70:51:dd:e8:ca:f7:6d:14:02:dd:84:9c:d8:97:f7:
c0:8a:e6:04:bc:b0:db:96:ce:78:b1:e8:a3:df:f1:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FE:5D:ED:38:42:BF:85:61:BF:C6:02:D4:15:3A:D3:4D:DB:83:06
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/r_5d7ThCv4Vhv8YC1BU6003bgwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.140.0/23
185.104.208.0/22
IPv6:
2a06:3340::/32
2a09:de80::/32
Signature Algorithm: sha256WithRSAEncryption
27:0a:d6:ad:95:ee:07:fb:4d:2c:59:82:ae:99:f6:9c:e5:ca:
2b:31:a1:f5:5f:9c:29:e4:80:0a:0b:60:fe:4e:f7:97:ee:87:
a5:d9:0e:9b:c5:d3:67:bc:27:54:e8:4a:64:6b:11:06:fa:e8:
6c:2f:30:bf:53:2a:bb:8e:25:d6:e8:12:15:94:e9:12:29:c4:
6a:48:9d:eb:15:98:0e:b8:70:0d:b9:95:70:e3:cc:03:35:e3:
8d:e8:a8:f3:66:f5:06:88:ed:7a:38:d3:8e:40:63:b3:86:32:
31:72:54:9d:eb:07:bf:a3:18:d0:f0:d2:87:6d:28:55:f8:bb:
66:37:d0:a9:86:3c:ce:34:e6:2c:86:e9:de:f0:5b:8b:b3:93:
30:d9:89:50:d1:e6:53:dd:ff:d1:34:ce:46:fc:c4:b4:70:df:
fe:2f:a1:25:fc:9f:a6:9c:63:7c:0b:9d:a8:48:0e:39:8e:c5:
cc:cf:00:b5:db:20:97:eb:0d:87:77:d7:22:00:b6:5a:59:3e:
3f:24:7f:c8:a8:d8:22:8a:0f:ab:0e:d5:f5:4a:f7:4e:f6:0a:
72:5e:fd:19:b5:14:8b:a7:54:96:46:25:c5:4a:69:cf:cf:b2:
dd:a6:5b:63:de:d6:30:d5:1b:ae:f2:7d:a9:a6:80:97:85:9c:
47:7c:a2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:52 2025 by rpki-client on console.sobornost.net