Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/q6pqSEbcTlqmRayyanV7tPyo7fs.roa
File: q6pqSEbcTlqmRayyanV7tPyo7fs.roa (raw, json)
Hash identifier: EC2KtAOMCahopm9kPSQwxVqEk8+Lm5s50v5gQFz0rN8=
Subject key identifier: AB:AA:6A:48:46:DC:4E:5A:A6:45:AC:B2:6A:75:7B:B4:FC:A8:ED:FB
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 0195B318BF72C9D65FCF3D00DF0DC12B7EC0
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/q6pqSEbcTlqmRayyanV7tPyo7fs.roa
Signing time: Thu 20 Mar 2025 10:28:18 +0000
ROA not before: Thu 20 Mar 2025 10:28:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43885
IP address blocks: 46.232.174.0/24 maxlen: 24
46.232.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:18:bf:72:c9:d6:5f:cf:3d:00:df:0d:c1:2b:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Mar 20 10:28:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abaa6a4846dc4e5aa645acb26a757bb4fca8edfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:b6:1e:af:c9:2b:51:d9:ff:c3:a4:2c:53:
25:c5:ab:fc:78:0a:af:50:c7:2c:b1:97:b9:5c:e1:
39:b4:69:fa:6a:00:07:6c:88:f2:f8:f0:21:d7:f5:
e7:4e:fe:85:a1:36:7d:05:2e:6a:c7:23:03:f0:21:
f7:90:e0:3f:da:c1:f2:44:8c:c2:cf:bb:5a:45:1b:
b3:43:a3:68:39:7b:09:4b:bd:4a:55:06:bf:88:a3:
3e:0b:4e:1f:0c:50:22:21:ee:a4:9c:f6:7e:5a:6a:
b3:d3:56:fd:7c:56:7d:0c:d2:1d:70:cf:d4:7b:70:
a8:3b:fb:a6:6f:31:6e:32:8d:51:b9:2b:73:15:22:
d6:6b:b7:89:4e:b5:70:36:7c:c6:c1:69:51:ab:8a:
b7:e4:d2:a0:fc:be:f2:d3:af:a8:21:71:42:22:fb:
e7:24:67:4b:3d:05:cb:72:07:8f:fa:a6:91:9f:23:
cb:82:ad:6c:c4:23:a5:7a:55:4a:24:4b:67:5b:0a:
bc:3e:88:4c:b7:38:a9:32:3c:a0:68:72:ab:9b:14:
64:ef:99:89:02:46:43:74:d9:52:4f:90:46:4c:bc:
98:b9:c7:0a:27:f9:35:01:f2:36:84:a6:20:b9:fc:
e6:a0:6f:d8:29:35:2a:8d:39:b3:b4:86:e7:76:aa:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AA:6A:48:46:DC:4E:5A:A6:45:AC:B2:6A:75:7B:B4:FC:A8:ED:FB
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/q6pqSEbcTlqmRayyanV7tPyo7fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.174.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:7e:9e:cf:1c:17:4d:da:70:fc:e8:24:ca:87:19:19:fa:f5:
09:b3:4e:28:57:cf:1e:d4:74:15:c9:85:17:f2:d3:da:87:76:
31:e2:ef:1c:fe:e7:57:36:60:0c:d0:0f:65:38:9d:05:99:88:
5a:2e:3f:dc:76:c6:e1:15:9f:e2:07:04:b1:7d:fe:66:2d:41:
e7:7e:59:49:3b:e9:e1:57:3d:81:12:a0:9c:3c:a2:d5:79:a8:
da:f7:e8:9e:b5:26:5b:55:01:c8:38:27:7d:b8:da:2a:8e:ba:
b6:83:6f:4f:a3:3c:d1:f8:1e:ef:8d:1c:fd:74:75:82:70:ea:
0f:36:b0:ab:2e:6a:25:ad:e2:c0:a4:2f:b2:be:6b:19:f8:da:
df:f9:66:d0:28:f1:86:36:a4:d1:da:7a:b8:2a:e9:db:9b:6f:
39:61:0c:b2:c2:94:5b:1d:af:d7:ef:12:2b:24:e6:72:e5:31:
fb:29:cf:28:5f:ef:74:4c:ea:2a:a0:64:26:43:a6:8d:80:08:
2c:aa:64:4e:a6:2c:95:31:fd:92:1c:86:d5:b0:3a:22:ae:7f:
28:41:26:ee:2c:61:3a:56:2b:6c:52:b4:d2:f2:cf:46:6c:e0:
e2:d5:86:47:cc:b6:0e:73:c0:5b:77:43:94:8e:cc:4e:64:a9:
4a:46:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net