Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/Kc84xCLoopoVZjLsNJRLj2XaVE4.roa
File: Kc84xCLoopoVZjLsNJRLj2XaVE4.roa (raw, json)
Hash identifier: EYoVSxaior1IONB3NcpWKZcJ8AkylxdNSnDbeuoh7e8=
Subject key identifier: 29:CF:38:C4:22:E8:A2:9A:15:66:32:EC:34:94:4B:8F:65:DA:54:4E
Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial: 0194258EEEF99576E67F2D522A2B1A3BDEBF
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/Kc84xCLoopoVZjLsNJRLj2XaVE4.roa
Signing time: Thu 02 Jan 2025 05:48:31 +0000
ROA not before: Thu 02 Jan 2025 05:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197403
IP address blocks: 46.28.152.0/21 maxlen: 21
46.28.152.0/24 maxlen: 24
46.28.153.0/24 maxlen: 24
46.28.154.0/24 maxlen: 24
46.28.155.0/24 maxlen: 24
46.28.156.0/24 maxlen: 24
46.28.157.0/24 maxlen: 24
46.28.158.0/24 maxlen: 24
46.28.159.0/24 maxlen: 24
2a00:7840::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ee:f9:95:76:e6:7f:2d:52:2a:2b:1a:3b:de:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
Validity
Not Before: Jan 2 05:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29cf38c422e8a29a156632ec34944b8f65da544e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:02:0a:d2:cf:f9:61:d2:bc:83:b1:55:ba:
ca:32:c0:81:66:49:8e:72:1b:42:a1:04:e9:88:de:
49:fc:59:07:47:fa:a0:30:69:8d:02:f1:83:76:aa:
b0:11:25:6a:0a:e2:e7:72:43:a7:0f:86:e7:a5:49:
cd:9a:e3:be:3a:e2:b3:79:e7:86:51:af:d0:f5:a7:
5b:ce:17:df:36:c1:2c:39:eb:6f:f2:bc:28:65:ba:
4d:7e:cd:8f:1f:48:b3:7f:ab:be:99:d8:0f:b8:8a:
38:d6:bf:d4:2e:e9:38:b4:0d:7a:67:b1:6d:9b:97:
94:1e:37:20:d9:94:f0:d7:5c:c5:55:d8:1d:c8:a9:
b9:a5:26:43:c7:00:53:5d:5b:b6:fc:bd:52:fd:af:
4e:8b:b9:30:d9:95:db:cb:d6:9c:72:ee:51:7e:a3:
4d:f2:bd:53:73:18:7a:4c:c5:7b:df:07:cb:f9:94:
df:48:bf:8f:17:8a:1e:35:ae:a3:14:52:5e:b9:2a:
0f:64:37:a5:ba:3c:1b:be:d0:58:01:f3:a7:49:27:
2e:41:04:2b:3e:8a:da:80:57:83:9a:01:2e:d9:63:
45:8d:37:cb:29:64:7e:7b:1e:c2:ae:08:e6:cd:f3:
8a:77:30:e5:d0:b0:b9:a9:38:3a:14:ae:8a:15:3b:
f7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CF:38:C4:22:E8:A2:9A:15:66:32:EC:34:94:4B:8F:65:DA:54:4E
X509v3 Authority Key Identifier:
keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/Kc84xCLoopoVZjLsNJRLj2XaVE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.152.0/21
IPv6:
2a00:7840::/32
Signature Algorithm: sha256WithRSAEncryption
67:74:3c:2e:67:67:a8:47:b5:a6:ec:17:49:87:14:64:c9:5a:
52:89:4d:be:c7:e7:b0:4f:45:99:8f:fa:80:e9:23:be:7c:15:
25:3c:1b:0d:28:aa:c2:a5:e7:8f:0e:b3:a5:ae:3b:c4:e5:82:
5c:37:ac:ce:46:1a:be:4c:85:ee:1c:29:83:ae:31:eb:97:8e:
8b:fe:a4:d3:73:9e:d9:a7:e3:ec:f0:6e:e9:46:88:1b:84:16:
e0:ec:4a:3b:e0:c4:ec:b8:d7:10:aa:8e:33:46:58:5e:e8:c9:
65:93:17:7b:3d:77:01:1d:64:30:71:da:8c:7e:df:51:96:b7:
1c:c1:70:34:fb:86:67:ae:0c:f9:68:6d:66:cd:28:1a:84:22:
27:74:00:b5:71:11:78:a3:99:f3:0c:fd:3d:80:d1:8d:84:59:
1b:c1:39:a0:51:12:34:37:49:64:22:ca:da:68:e2:61:5a:f4:
34:b5:6e:b4:60:fe:c3:a0:89:f3:71:ca:44:c0:d7:df:aa:50:
4a:0e:1d:55:79:31:20:f7:6b:44:ad:93:9e:7b:0d:bc:5c:e1:
ab:8e:1a:10:b7:15:71:12:bf:89:99:4c:7c:26:66:7e:13:e7:
36:8d:35:83:f4:9c:f2:f1:58:e1:2e:25:48:c6:50:de:c4:99:
80:40:a7:50
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlju75lXbmfy1SKisaO96/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MGFhZWI1Mzc5MmQ1MjAxNjliY2UyODBjM2RkODZmODM3
NmVjNjMwHhcNMjUwMTAyMDU0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWNmMzhjNDIyZThhMjlhMTU2NjMyZWMzNDk0NGI4ZjY1ZGE1NDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe4CCtLP+WHSvIOxVbrKMsCBZkmO
chtCoQTpiN5J/FkHR/qgMGmNAvGDdqqwESVqCuLnckOnD4bnpUnNmuO+OuKzeeeG
Ua/Q9adbzhffNsEsOetv8rwoZbpNfs2PH0izf6u+mdgPuIo41r/ULuk4tA16Z7Ft
m5eUHjcg2ZTw11zFVdgdyKm5pSZDxwBTXVu2/L1S/a9Oi7kw2ZXby9accu5RfqNN
8r1Tcxh6TMV73wfL+ZTfSL+PF4oeNa6jFFJeuSoPZDelujwbvtBYAfOnSScuQQQr
PoragFeDmgEu2WNFjTfLKWR+ex7CrgjmzfOKdzDl0LC5qTg6FK6KFTv37QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCnPOMQi6KKaFWYy7DSUS49l2lROMB8GA1UdIwQY
MBaAFEgKrrU3ktUgFpvOKAw92G+DduxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDkt
ZDE2NjkxYWQ2OWZhLzEvS2M4NHhDTG9vcG9WWmpMc05KUkxqMlhhVkU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDktZDE2NjkxYWQ2OWZh
LzEvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLhyYMA0E
AgACMAcDBQAqAHhAMA0GCSqGSIb3DQEBCwUAA4IBAQBndDwuZ2eoR7Wm7BdJhxRk
yVpSiU2+x+ewT0WZj/qA6SO+fBUlPBsNKKrCpeePDrOlrjvE5YJcN6zORhq+TIXu
HCmDrjHrl46L/qTTc57Zp+Ps8G7pRogbhBbg7Eo74MTsuNcQqo4zRlhe6Mllkxd7
PXcBHWQwcdqMft9RlrccwXA0+4Znrgz5aG1mzSgahCIndAC1cRF4o5nzDP09gNGN
hFkbwTmgURI0N0lkIsraaOJhWvQ0tW60YP7DoInzccpEwNffqlBKDh1VeTEg92tE
rZOeew28XOGrjhoQtxVxEr+JmUx8JmZ+E+c2jTWD9Jzy8VjhLiVIxlDexJmAQKdQ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:17 2025 by rpki-client on console.sobornost.net