Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/SoN9k2cqGxyy_rsm3ydDmcCibzo.roa
File: SoN9k2cqGxyy_rsm3ydDmcCibzo.roa (raw, json)
Hash identifier: ajQGIB+pruVAaKn9625joYHZDBPfoDRUv7Hz6Vm4jnw=
Subject key identifier: 4A:83:7D:93:67:2A:1B:1C:B2:FE:BB:26:DF:27:43:99:C0:A2:6F:3A
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 0195481572AB33FB4C388DA0D2D9AF688E4E
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/SoN9k2cqGxyy_rsm3ydDmcCibzo.roa
Signing time: Thu 27 Feb 2025 15:45:19 +0000
ROA not before: Thu 27 Feb 2025 15:45:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49463
IP address blocks: 5.179.120.0/21 maxlen: 24
31.216.16.0/20 maxlen: 24
46.21.112.0/20 maxlen: 24
46.21.112.0/24 maxlen: 24
46.21.114.0/24 maxlen: 24
46.21.115.0/24 maxlen: 24
46.21.116.0/24 maxlen: 24
46.21.127.0/24 maxlen: 24
185.7.160.0/22 maxlen: 24
2a02:27d0::/32 maxlen: 48
2a02:27d0:100::/48 maxlen: 48
2a02:27d0:1671::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:15:72:ab:33:fb:4c:38:8d:a0:d2:d9:af:68:8e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Feb 27 15:45:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a837d93672a1b1cb2febb26df274399c0a26f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:69:7e:04:49:24:e3:23:63:1c:5a:b1:4f:
e2:7e:d0:50:cc:63:f2:a7:a5:00:0b:70:f4:4d:ff:
d2:cd:df:11:69:d2:98:92:a7:86:36:50:77:b7:bd:
ae:35:a1:e9:c1:85:05:68:ea:e2:30:0b:dd:64:0f:
a0:0d:f0:17:e8:66:d6:c8:a3:92:48:8e:d9:8a:89:
0f:d7:77:0a:9a:fb:1f:a3:30:4a:d4:f5:2a:2b:7d:
2f:2c:6d:9e:6b:52:6a:cc:7a:64:25:56:2e:2d:21:
6b:f9:d5:fa:e8:6f:e6:8b:51:4a:03:a9:4d:71:88:
77:9f:6e:95:eb:a0:48:0e:d4:fb:76:89:aa:01:50:
97:33:ee:74:ca:bd:bc:48:18:e5:84:f5:7f:65:e0:
44:ed:4c:e6:e9:47:0f:eb:fe:e1:76:c0:d7:74:f4:
8e:20:49:cf:8f:e1:0e:e2:f7:7f:57:13:ec:b7:19:
08:78:80:ca:d2:69:34:62:ab:55:cb:26:71:57:81:
18:09:1a:6a:6a:e1:2f:42:09:14:97:f8:a8:67:c2:
2c:54:a0:39:3e:87:a4:4c:da:7e:dc:54:49:61:2c:
f9:29:ae:8b:54:ee:d3:4d:61:68:2c:b8:ca:75:7c:
58:5e:a2:c6:77:a9:c9:c2:41:aa:89:e5:df:58:b3:
f4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:83:7D:93:67:2A:1B:1C:B2:FE:BB:26:DF:27:43:99:C0:A2:6F:3A
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/SoN9k2cqGxyy_rsm3ydDmcCibzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.120.0/21
31.216.16.0/20
46.21.112.0/20
185.7.160.0/22
IPv6:
2a02:27d0::/32
Signature Algorithm: sha256WithRSAEncryption
62:da:90:c7:f0:72:81:8a:31:6d:0c:bd:8e:d0:30:1f:23:2e:
1a:7d:20:a8:8a:9d:92:f2:a1:2c:3f:20:07:95:d6:b7:0d:04:
07:40:71:d0:3e:a6:4d:0d:1b:75:95:10:be:fc:6d:c4:26:43:
58:6a:29:e0:ba:31:84:d1:27:25:d4:e9:7e:42:81:12:03:ce:
7c:41:aa:64:ad:44:60:06:9a:f6:b7:aa:6e:58:37:59:15:58:
a3:07:73:64:15:c5:a2:58:d8:5a:2d:76:45:73:ba:bb:41:e7:
13:bd:52:ac:56:6a:8d:bd:2a:68:83:60:b5:7c:37:3b:51:30:
6d:1d:64:93:1e:84:87:3e:c7:23:9f:41:8c:ca:b4:94:de:aa:
71:40:91:89:e2:f4:de:6a:46:e2:e8:01:15:ad:a2:da:65:0d:
64:62:d6:bc:96:e3:74:a5:86:2c:e4:5e:fd:54:d1:f1:71:7d:
67:ae:aa:e9:12:d7:a8:a5:d5:94:4c:96:ed:65:30:4a:09:ab:
4c:56:05:39:53:f3:12:40:63:41:df:2b:51:28:f1:4e:bd:a4:
6a:34:9d:00:07:c4:c4:0e:03:50:56:e0:08:a1:90:dc:b6:75:
30:3a:21:fd:a3:65:f7:c8:40:1e:59:85:35:e0:19:7c:d7:b0:
6b:6c:95:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net