Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/qVppuHbTn9DMOoC7WIpn_md_R6o.roa
File: qVppuHbTn9DMOoC7WIpn_md_R6o.roa (raw, json)
Hash identifier: gTYaxERGDbyCNzsbpsusObI12oPDpaR995HLMG2pUvc=
Subject key identifier: A9:5A:69:B8:76:D3:9F:D0:CC:3A:80:BB:58:8A:67:FE:67:7F:47:AA
Certificate issuer: /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Certificate serial: 0194214461FCA9AA22CA07F511198AB2C613
Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/qVppuHbTn9DMOoC7WIpn_md_R6o.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203067
IP address blocks: 46.175.48.0/22 maxlen: 22
46.175.48.0/24 maxlen: 24
46.175.49.0/24 maxlen: 24
46.175.51.0/24 maxlen: 24
46.175.52.0/24 maxlen: 24
46.175.53.0/24 maxlen: 24
46.175.54.0/24 maxlen: 24
46.175.55.0/24 maxlen: 24
185.145.48.0/24 maxlen: 24
185.145.49.0/24 maxlen: 24
185.145.50.0/24 maxlen: 24
185.145.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:61:fc:a9:aa:22:ca:07:f5:11:19:8a:b2:c6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a95a69b876d39fd0cc3a80bb588a67fe677f47aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:79:95:4f:07:8d:cc:16:fd:0e:0f:ae:58:
7b:6c:70:d6:00:25:b1:41:26:34:e7:82:11:1c:6e:
b4:70:55:8f:40:bb:a6:cf:52:37:2c:a7:90:af:3d:
74:bd:08:3d:00:26:50:13:6c:21:9f:fe:24:51:f7:
5d:a0:2e:0b:f9:31:9e:ca:c0:d7:55:02:ba:18:1a:
2b:30:4c:7e:69:16:b9:5a:bb:0e:3e:65:f7:5c:ac:
43:ba:3e:c7:fe:32:92:88:92:0a:1a:9f:63:3f:b0:
cb:1f:a1:a9:ef:67:88:7b:4a:4f:02:5c:21:78:e1:
84:3f:e2:e4:3a:e4:14:4a:1d:a0:60:d3:51:8e:ca:
f3:96:e6:3b:a3:98:b3:d1:96:fe:90:b2:25:5a:39:
32:07:a9:d6:c1:ef:1d:d1:4c:2f:d3:29:b2:bd:46:
bd:87:ec:10:8b:1a:ed:48:83:40:6a:d0:69:e2:91:
a2:0b:71:dd:73:5c:aa:c8:00:b8:c0:44:dc:e2:e0:
00:35:1e:e7:e6:10:a9:dd:a8:5d:70:22:92:59:03:
07:b0:4d:68:b1:f2:3a:05:0a:a3:eb:d7:3c:d1:e9:
41:82:03:b3:ea:b6:64:f1:5b:e9:ab:e2:4c:47:4f:
44:f3:b8:c0:1e:7e:20:70:14:73:e3:b1:d3:d9:0c:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5A:69:B8:76:D3:9F:D0:CC:3A:80:BB:58:8A:67:FE:67:7F:47:AA
X509v3 Authority Key Identifier:
keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/qVppuHbTn9DMOoC7WIpn_md_R6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.48.0/21
185.145.48.0/22
Signature Algorithm: sha256WithRSAEncryption
84:73:a9:eb:54:75:ca:65:71:3a:62:66:e5:fa:ab:b2:e5:0c:
04:20:ed:16:77:4b:ab:59:40:64:6f:26:88:5b:71:0b:2f:93:
19:8f:64:18:ba:5a:42:30:14:34:3c:78:36:82:0c:98:7b:1a:
0a:bc:dd:8d:35:93:40:36:a1:cb:5a:9d:82:16:1f:60:ea:f3:
99:b6:bb:bd:ed:a7:63:af:07:c9:a4:cb:b0:a2:d7:5f:2b:03:
b5:48:f7:9c:19:bb:ba:df:f3:43:0d:05:17:d6:39:69:3b:b4:
75:93:b7:e8:d5:06:a0:f4:ac:6e:60:01:8c:c4:d0:af:44:fc:
a1:2a:8c:b8:93:b4:da:2f:ab:c9:1b:62:e3:6f:a6:1c:82:4c:
88:7b:b0:46:8d:f9:56:a2:93:fc:4d:7c:b1:66:30:51:98:3b:
57:d7:5a:2f:cd:08:9a:c6:fb:04:81:ff:e0:1d:c3:30:fd:62:
05:9a:5d:53:20:c9:17:64:d8:70:7b:c0:cf:c8:73:71:08:db:
d0:ee:45:42:6c:45:52:62:c0:9d:22:d0:cd:a5:17:8a:7f:9c:
1a:1a:3a:92:2b:8e:0b:b4:82:56:b3:cb:ed:ef:26:54:2f:d9:
e2:b5:14:6d:ce:43:50:63:e8:00:7a:db:75:8e:dd:66:a3:47:
0f:5f:b2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net