Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/4SmPOBdpSKZNKtr78EsOFYPAPOE.roa
File: 4SmPOBdpSKZNKtr78EsOFYPAPOE.roa (raw, json)
Hash identifier: HzixWgbqoGXlXoQ/Uo+IAJ05tBlvGv7rMPAyb2c7P3o=
Subject key identifier: E1:29:8F:38:17:69:48:A6:4D:2A:DA:FB:F0:4B:0E:15:83:C0:3C:E1
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019626CD6F9F70C859D6B5345A8C783607E3
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/4SmPOBdpSKZNKtr78EsOFYPAPOE.roa
Signing time: Fri 11 Apr 2025 21:41:59 +0000
ROA not before: Fri 11 Apr 2025 21:41:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215468
IP address blocks: 176.46.153.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:26:cd:6f:9f:70:c8:59:d6:b5:34:5a:8c:78:36:07:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Apr 11 21:41:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1298f38176948a64d2adafbf04b0e1583c03ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:03:8f:04:af:d8:6c:0c:3c:d6:45:bb:58:
05:c9:00:a2:dc:f7:d1:67:85:70:2b:bc:02:22:8c:
1c:80:bc:ee:b5:e4:45:2b:66:bf:e5:6d:2c:a2:a5:
a9:c7:f5:c0:42:78:a7:45:5f:ee:4b:aa:ad:93:94:
aa:ba:dc:ba:9e:ab:0e:0d:a7:11:c2:14:ef:1d:af:
86:ca:1e:dc:df:83:d1:f5:46:97:31:48:9a:94:60:
f6:76:38:38:4a:bd:8d:4f:09:30:6a:a7:94:06:3b:
b9:e1:09:f7:ce:58:0c:99:f2:b4:21:10:a2:29:7a:
1f:77:c8:f3:5f:40:b8:fc:2b:29:35:a3:f4:4f:0d:
48:76:21:72:97:5e:ad:17:5f:0f:9e:6c:56:07:c7:
45:37:e3:64:79:85:bd:66:6e:b3:07:2c:be:22:e3:
2d:60:23:b5:96:f1:f5:f7:3e:2b:e0:ba:bc:38:5f:
64:94:01:9e:72:78:28:b6:85:5d:00:2b:3f:5e:0d:
57:ee:6f:35:7f:10:9c:1b:b4:64:91:b0:33:6c:96:
20:55:ea:f8:28:d1:13:92:f9:d9:87:62:9b:34:5e:
f9:d7:5a:8e:6e:01:33:5d:74:22:30:bf:61:40:54:
b9:e1:87:f2:6e:e3:8b:95:ce:e2:eb:f4:0f:0b:69:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:8F:38:17:69:48:A6:4D:2A:DA:FB:F0:4B:0E:15:83:C0:3C:E1
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/4SmPOBdpSKZNKtr78EsOFYPAPOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.46.153.0-176.46.154.255
Signature Algorithm: sha256WithRSAEncryption
4c:e6:34:33:47:c7:93:66:e7:25:36:38:e2:e4:5b:e5:fc:c1:
8d:bb:45:af:e4:78:c4:0f:68:38:37:f3:02:5b:96:39:78:d5:
a8:ae:18:ed:14:5a:cc:36:f6:36:a8:f3:7d:e3:54:4f:3a:5b:
17:67:a3:cb:aa:de:c1:44:19:96:d5:87:30:da:8b:c7:d8:fd:
a3:7f:07:25:7f:70:4a:ba:26:47:4f:82:ab:09:4f:e7:db:20:
86:c6:6f:a6:38:0d:92:1d:46:93:c4:6e:0b:1c:20:81:f6:9a:
be:06:22:4c:e5:13:bf:41:06:ce:77:0b:69:71:44:5e:87:54:
5e:f6:03:2a:25:36:c6:fd:e2:12:1a:f9:67:b2:3e:99:69:e9:
e6:f0:d2:b4:72:9f:07:9d:16:76:4f:f5:91:95:e3:1d:e7:cd:
49:c7:6d:81:00:99:39:8e:3c:ac:a3:fe:bd:d2:ca:98:f9:39:
9b:3a:a9:4c:7b:74:51:c6:e4:66:0f:af:ab:57:0f:3f:ea:e3:
f2:e6:26:80:47:dc:95:3f:84:3c:3d:3b:6f:aa:8d:8d:53:71:
9b:05:70:e6:9d:e9:60:dc:7f:7b:ea:d8:57:c8:8e:d7:d7:44:
03:12:c2:4e:4a:b4:d2:15:84:7a:86:ee:ec:9c:dc:98:b5:bb:
6d:8c:75:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net