Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa
File: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (raw, json)
Hash identifier: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=
Subject key identifier: 4C:A2:F3:43:76:94:9F:9A:FD:C1:1A:9D:59:66:3F:5F:79:E9:E4:DC
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 019425217CD83C5F729DDE6F35E8FE4A5191
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa
Signing time: Thu 02 Jan 2025 03:48:59 +0000
ROA not before: Thu 02 Jan 2025 03:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207114
IP address blocks: 46.33.32.0/21 maxlen: 21
46.33.40.0/22 maxlen: 22
46.33.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7c:d8:3c:5f:72:9d:de:6f:35:e8:fe:4a:51:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ca2f34376949f9afdc11a9d59663f5f79e9e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ca:9e:62:f5:64:0a:f9:cf:e1:90:74:a5:08:
b2:49:0e:21:39:5c:d7:40:23:16:9f:ae:c5:59:f8:
6e:31:83:5b:8a:cd:5f:7f:25:9e:35:c6:21:0b:f3:
f7:2e:8f:5d:11:db:3d:ac:57:ed:52:2b:16:07:93:
f9:cc:2e:c3:a7:c7:d2:59:fb:81:4f:68:a9:16:c8:
ca:2d:00:82:70:eb:15:f8:4c:77:74:f4:f4:64:e5:
a2:d5:47:d8:b1:27:6f:fb:f2:ff:de:70:a8:34:6a:
67:3b:6a:db:a5:dd:35:10:35:a4:12:9e:99:12:8d:
ff:f9:19:50:34:95:8b:54:4a:0f:d0:57:6f:ef:07:
94:5f:91:aa:aa:72:54:93:f7:02:97:5f:8d:61:d7:
c6:0b:1c:e8:c0:9f:55:1f:4e:99:5f:5f:55:a5:db:
eb:6f:b0:bd:b0:65:97:a6:ab:5a:0f:f4:29:fb:a9:
fd:8a:ab:8b:39:98:18:dd:75:54:e0:03:30:9c:91:
3a:4d:8f:a7:d4:23:15:f4:d1:82:ab:8f:42:97:67:
58:5a:69:c9:be:41:3e:b6:51:4b:95:c7:d8:fc:aa:
3e:21:38:d5:f9:6d:b4:d1:2d:50:9e:01:a4:a3:32:
a7:1e:8e:65:51:b0:75:bc:fa:51:71:a0:a4:03:16:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:F3:43:76:94:9F:9A:FD:C1:1A:9D:59:66:3F:5F:79:E9:E4:DC
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.32.0-46.33.43.255
46.33.56.0/22
Signature Algorithm: sha256WithRSAEncryption
64:ae:88:4f:13:fa:d4:73:2a:7d:a5:f9:9f:53:d9:e5:5e:8d:
30:2c:cb:83:08:84:44:1d:e3:55:0f:42:33:22:e1:f0:18:94:
9d:56:98:62:f5:e3:5e:87:12:99:ca:1c:a9:38:90:05:16:c7:
05:be:33:b2:e8:c7:e0:84:b4:d3:51:06:19:44:02:68:9b:88:
5e:da:38:13:db:a2:69:6c:e4:4d:9c:ff:e4:b5:bd:74:27:c5:
b6:84:3e:14:b8:84:79:c9:d4:91:be:b6:42:68:de:69:6c:7c:
f3:c7:c1:bc:e6:06:67:d1:c2:96:ad:59:16:58:e3:95:2f:75:
33:43:27:a5:a0:4e:7c:00:f5:44:c0:c5:17:9c:0f:a9:99:59:
41:46:95:66:50:5a:2a:a6:d4:8c:56:4e:17:b2:65:9a:82:33:
d4:1e:30:6e:49:46:35:c1:dd:f0:d6:71:05:b0:60:67:06:b1:
7c:66:77:53:90:59:55:69:1d:66:41:62:8c:e9:8d:31:49:83:
10:02:6b:b9:ec:6d:ff:5b:ba:f6:c7:35:55:d0:b8:e9:5d:a6:
72:de:97:d7:16:96:95:38:b7:de:98:a8:41:33:dd:35:c1:50:
54:75:d4:ad:e0:ac:4e:7f:16:9e:ad:ef:2f:b1:b7:5a:3b:eb:
a6:5f:35:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:29 2025 by rpki-client on console.sobornost.net