Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa
File: B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa (raw, json)
Hash identifier: ZF/ZQXZ6OV0r+xXPNKcSMNFa0v6w/gQVQYon3rz/hOA=
Subject key identifier: 07:90:FD:30:60:F9:1C:DC:4C:9F:6C:AD:9F:81:3E:5D:73:5F:15:45
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 019422FBF696D4F7FCAFB59B6062F31677EA
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa
Signing time: Wed 01 Jan 2025 17:48:45 +0000
ROA not before: Wed 01 Jan 2025 17:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396535
IP address blocks: 86.48.44.0/22 maxlen: 22
86.48.44.0/23 maxlen: 23
185.151.204.0/24 maxlen: 24
2a0b:14c0:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f6:96:d4:f7:fc:af:b5:9b:60:62:f3:16:77:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Jan 1 17:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0790fd3060f91cdc4c9f6cad9f813e5d735f1545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:b3:43:2c:1b:c5:9d:85:ce:b6:e3:c1:6c:
8f:8b:f3:b4:5c:33:42:00:87:4d:22:24:34:d5:71:
65:1d:ff:2b:16:5e:99:a1:25:dc:14:d2:d1:0e:94:
38:9a:24:b8:d1:59:0a:5d:38:64:1e:b2:ba:aa:d1:
59:d0:10:6e:c1:e5:dd:cc:d2:75:c2:01:a1:ee:87:
78:bc:aa:95:b3:fb:5a:09:f6:8f:c3:34:9a:6e:0e:
32:1d:d3:a7:dd:e4:55:d8:28:41:df:1b:33:9e:ba:
cc:b6:59:f0:16:d7:49:b9:c4:8a:17:7e:33:09:1d:
fb:a9:09:b4:66:9c:47:a1:6c:87:7f:a3:09:73:c0:
63:a8:a2:99:b0:47:d5:bd:68:ae:4b:40:23:f7:c4:
78:b2:26:f4:80:b2:98:dc:a0:74:43:11:a3:38:b6:
e0:22:93:af:27:9d:3c:af:bb:bc:1e:80:18:e6:a3:
f1:fc:fe:37:1a:8d:34:9d:0d:ad:e1:2e:c8:fc:c4:
c9:e0:3c:c9:e8:40:9f:d8:bf:a1:16:bf:52:0f:7b:
5f:9e:4f:a5:6a:ae:ee:65:a1:4e:8f:ca:19:c8:97:
71:d9:a2:90:05:86:04:3f:43:62:fa:a1:f6:92:2f:
55:69:ae:41:15:15:f3:0e:f1:3f:68:24:12:4e:80:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:90:FD:30:60:F9:1C:DC:4C:9F:6C:AD:9F:81:3E:5D:73:5F:15:45
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.44.0/22
185.151.204.0/24
IPv6:
2a0b:14c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
aa:1b:17:9c:71:ff:70:84:b5:71:46:fd:4c:5d:a7:dc:40:39:
27:af:23:4b:f0:e6:d7:1e:94:8d:35:fb:0b:87:61:63:59:05:
e4:1b:46:4b:05:b7:23:d0:4e:90:de:1e:8a:8f:c0:54:4a:15:
f9:d4:8d:0c:e5:6b:db:16:61:2c:bd:2e:18:8f:c7:e8:fa:a1:
9f:03:16:22:46:d2:2c:3b:d8:0b:8c:ef:d7:92:3f:f3:d6:67:
48:0d:c3:d5:3f:f4:5c:c2:68:a3:d6:fe:5e:ea:0d:8f:b0:e1:
1a:dd:2e:61:9b:49:67:c7:33:30:bf:92:2f:50:8b:4a:3a:6a:
59:63:b1:0f:fb:d9:b6:7e:91:2e:f5:fd:70:24:9b:87:76:05:
26:95:19:5a:ca:3c:0e:f4:48:9f:87:2a:f4:3c:80:9d:23:49:
91:c4:00:17:6b:63:23:a2:27:e5:95:b8:7e:8a:cb:1b:9c:3b:
22:cf:21:fc:e3:6b:97:ff:da:23:fa:b4:0a:5f:f8:7c:5f:91:
54:7b:99:36:23:45:a2:5d:9a:36:01:14:46:b3:3b:32:c4:44:
03:5e:e4:0d:de:b8:ea:82:55:c1:2a:ab:f9:4b:4b:7f:d2:06:
87:17:0f:52:1a:4b:cc:6c:5f:b5:50:2f:2a:e1:1f:61:ca:e9:
69:40:66:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:20 2025 by rpki-client on console.sobornost.net