Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/hPjtiwCLC1o0j8AvpBmtBQU028U.roa
File: hPjtiwCLC1o0j8AvpBmtBQU028U.roa (raw, json)
Hash identifier: HOlWkUmkwwPkAjP8XtxdcNr70UoyoWRPwYz3VVAT2tA=
Subject key identifier: 84:F8:ED:8B:00:8B:0B:5A:34:8F:C0:2F:A4:19:AD:05:05:34:DB:C5
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 0194258F7418B221E355763CA76E2C4923C5
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/hPjtiwCLC1o0j8AvpBmtBQU028U.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215089
IP address blocks: 46.235.8.0/24 maxlen: 24
77.245.157.0/24 maxlen: 24
185.87.254.0/24 maxlen: 24
185.87.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:74:18:b2:21:e3:55:76:3c:a7:6e:2c:49:23:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84f8ed8b008b0b5a348fc02fa419ad050534dbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:ac:97:d1:14:16:95:b6:c4:df:a8:6f:c1:
1b:c9:c6:44:24:29:97:21:99:b2:8d:01:96:5f:df:
20:bf:8a:50:e0:99:ec:60:76:39:21:b0:69:1f:72:
9a:ed:ef:ba:66:d7:3a:bd:86:32:f8:47:60:fc:e1:
9e:23:b0:ee:24:91:d1:29:8a:99:d2:2b:c3:b1:a0:
1a:bb:1f:2a:6e:92:97:b8:f8:80:09:6a:2c:d9:fc:
af:f9:ae:da:63:98:44:65:9d:94:51:aa:16:ae:8f:
87:74:b3:32:2b:e5:ce:5c:ca:8b:a2:bf:d1:19:80:
57:47:91:fe:a1:51:8f:ec:f6:95:d6:11:3f:d9:31:
d1:22:72:cb:9d:11:d5:45:1b:54:c0:d9:78:19:c4:
3e:6f:19:81:86:fa:c0:44:a2:fe:65:c7:a5:9e:e4:
9e:8e:da:ff:cb:f3:5a:42:da:a0:9c:91:ba:99:26:
9f:66:fb:a2:42:0f:1b:86:25:75:2a:8e:ad:33:9c:
de:f6:0c:bd:d3:44:19:3d:a5:be:66:4d:b1:11:8d:
7b:a6:0c:6c:36:79:1b:8f:a5:be:46:71:b6:fe:c3:
1c:16:9b:a5:e9:7b:bb:c1:ed:df:ba:60:1b:49:63:
b1:8e:e1:cb:1c:d7:08:fa:0f:7f:c6:6e:96:ab:89:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F8:ED:8B:00:8B:0B:5A:34:8F:C0:2F:A4:19:AD:05:05:34:DB:C5
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/hPjtiwCLC1o0j8AvpBmtBQU028U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.8.0/24
77.245.157.0/24
185.87.254.0/23
Signature Algorithm: sha256WithRSAEncryption
38:68:7e:68:0f:57:81:8d:89:0d:cf:70:d4:34:57:11:c7:4a:
1c:07:54:2a:98:c4:2e:59:40:c6:06:ec:87:03:4a:d4:38:d7:
3c:2e:31:e4:ea:62:b9:cc:73:43:90:e8:3a:81:e1:1d:c0:8e:
9c:36:50:bc:8c:8d:c8:e9:fb:6e:bc:64:16:c9:db:4d:f2:be:
d2:97:6f:aa:0a:ac:b7:5e:d1:83:d4:07:fd:59:5a:bd:fe:06:
d1:2f:a0:27:0e:d7:4a:c3:b8:c1:1d:fb:03:3a:ac:c2:f9:a0:
c9:cf:21:25:44:ec:55:87:e1:ec:c8:fc:5a:a5:94:ea:72:65:
4a:a2:0a:0c:13:9e:46:97:3c:35:e9:17:ea:f2:7e:72:9d:9a:
76:0d:e2:82:9a:08:2d:ae:90:1f:54:29:66:55:34:6b:ee:d1:
47:3d:53:60:d5:38:e8:a7:0a:1a:61:64:4a:a5:cd:4a:b5:7e:
85:35:8f:a5:6b:b6:80:f0:0c:0c:d8:88:15:8d:dd:60:a5:64:
81:21:1d:f9:87:6c:d6:5d:8e:e6:39:29:1d:95:67:bb:90:0d:
0b:1c:1d:ce:2f:6b:c0:99:ab:0f:f0:f9:ea:76:31:8a:c7:c6:
fe:98:c5:2e:54:30:b1:43:dd:94:03:fb:d6:f2:1f:e2:81:d0:
de:c6:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net