Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/J_KPWS94A8Eq53XJdxKiroji-84.roa
File: J_KPWS94A8Eq53XJdxKiroji-84.roa (raw, json)
Hash identifier: GTnTFufkONZ+paF7QsyBA2C6DvMQ3sNCzirOyYeFAv0=
Subject key identifier: 27:F2:8F:59:2F:78:03:C1:2A:E7:75:C9:77:12:A2:AE:88:E2:FB:CE
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 019423D7C7EDF82DCBCF2AA540C345169F31
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/J_KPWS94A8Eq53XJdxKiroji-84.roa
Signing time: Wed 01 Jan 2025 21:48:51 +0000
ROA not before: Wed 01 Jan 2025 21:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51759
IP address blocks: 46.36.96.0/24 maxlen: 24
46.36.104.0/24 maxlen: 24
46.36.107.0/24 maxlen: 24
46.36.108.0/24 maxlen: 24
46.36.109.0/24 maxlen: 24
46.36.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c7:ed:f8:2d:cb:cf:2a:a5:40:c3:45:16:9f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Jan 1 21:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27f28f592f7803c12ae775c97712a2ae88e2fbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:be:1a:58:54:ec:13:93:06:bb:8f:ba:5d:
55:9c:3b:59:bc:56:52:90:a9:6b:70:a6:f9:cf:3c:
db:a9:92:0f:5e:43:8f:ae:46:c1:6e:ca:45:21:6b:
d9:31:ad:25:b2:99:d4:49:43:9e:a7:2b:15:ae:cc:
bd:aa:3c:39:56:b7:46:7c:95:a8:3c:7b:32:3a:73:
61:d5:df:72:8c:66:c9:f2:eb:01:94:a3:30:7c:0b:
dd:38:4b:de:6b:18:ad:f9:bd:46:71:3c:8c:c1:47:
d5:6c:75:87:4c:b1:0e:35:87:a4:90:69:be:f9:f1:
e1:0e:69:42:df:72:5c:c2:49:34:03:c3:3c:4c:b6:
9c:c8:57:0a:3c:e4:a1:61:14:e5:bf:d3:ee:a9:a8:
10:8c:9c:c7:73:28:eb:32:1c:9d:44:d6:d6:2e:72:
40:c5:ed:40:b6:75:57:0a:59:b9:f5:93:21:c4:96:
ff:ae:90:08:c3:96:7e:91:c2:a4:29:dd:2f:2a:20:
b4:42:76:25:3f:62:cd:8d:1f:32:1d:d5:31:3d:76:
a8:df:4b:59:16:41:ab:7c:a3:13:55:e1:7b:28:78:
f8:f8:95:82:99:6b:a3:7d:09:d0:c0:94:af:e6:2e:
3e:90:04:cf:a5:54:ed:a4:71:04:4a:a9:08:fb:b5:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F2:8F:59:2F:78:03:C1:2A:E7:75:C9:77:12:A2:AE:88:E2:FB:CE
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/J_KPWS94A8Eq53XJdxKiroji-84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.96.0/24
46.36.104.0/24
46.36.107.0-46.36.110.255
Signature Algorithm: sha256WithRSAEncryption
6d:3a:6e:9b:9e:ac:c3:27:7b:25:20:bd:c4:54:75:80:f7:0c:
2a:84:e0:86:ff:65:52:6f:0c:9c:f8:f1:c0:ed:00:1f:56:c2:
a7:4a:ec:30:6d:cc:b1:79:a3:e9:f0:b9:73:b7:48:f4:7f:fb:
c8:b5:4e:f8:e6:c4:31:17:9a:11:61:e4:01:e8:a1:10:d2:c6:
1d:01:4b:d0:2b:3e:78:05:08:d3:2d:3a:c2:01:7f:b6:4a:f9:
3a:c9:12:cb:54:f7:51:29:79:33:f3:ee:a1:02:1b:1a:05:92:
a2:d6:e2:e7:d2:94:f6:62:b6:86:a7:5f:e5:f0:85:bc:36:93:
6c:a7:13:9e:ed:39:14:75:f6:8b:5b:16:3f:b3:8e:68:e9:11:
43:74:fe:0d:47:8c:0e:b2:59:2a:a5:5d:91:dd:18:df:8f:f5:
4e:ae:d1:d1:dc:6d:84:37:be:dc:da:24:fd:65:00:88:3f:df:
9d:03:e5:6a:97:2f:d1:e3:6e:12:6c:c9:1c:3c:29:4b:93:24:
aa:e8:85:27:d3:0e:39:46:22:51:88:7f:32:54:f1:92:e8:ce:
36:33:76:3c:4a:d2:3a:7d:99:7c:b9:d2:6b:17:11:fa:cb:94:
92:03:da:1b:7b:56:3a:5c:3b:0f:89:35:8c:fa:3d:f9:3d:dc:
9b:b5:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:39 2025 by rpki-client on console.sobornost.net