Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/TETu_fLUe48vZB1pOjmaY0SlQQA.roa
File: TETu_fLUe48vZB1pOjmaY0SlQQA.roa (raw, json)
Hash identifier: gDCE6MhOeAd0nfmLm0m4CAZB11EUzJkcQQpOLfihn0E=
Subject key identifier: 4C:44:EE:FD:F2:D4:7B:8F:2F:64:1D:69:3A:39:9A:63:44:A5:41:00
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 01942369752307E87EBAB88BF4C5642B5BB6
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/TETu_fLUe48vZB1pOjmaY0SlQQA.roa
Signing time: Wed 01 Jan 2025 19:48:21 +0000
ROA not before: Wed 01 Jan 2025 19:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42927
IP address blocks: 46.22.160.0/24 maxlen: 24
46.22.163.0/24 maxlen: 24
46.22.164.0/23 maxlen: 23
46.22.167.0/24 maxlen: 24
46.22.168.0/24 maxlen: 24
46.22.169.0/24 maxlen: 24
46.22.170.0/24 maxlen: 24
46.22.173.0/24 maxlen: 24
80.82.16.0/23 maxlen: 23
80.82.18.0/23 maxlen: 23
80.82.20.0/23 maxlen: 23
80.82.22.0/23 maxlen: 23
80.82.22.0/24 maxlen: 24
80.82.25.0/24 maxlen: 24
80.82.26.0/23 maxlen: 23
80.82.28.0/24 maxlen: 24
80.82.29.0/24 maxlen: 24
80.82.30.0/23 maxlen: 23
91.189.248.0/21 maxlen: 21
91.189.250.0/24 maxlen: 24
91.189.253.0/24 maxlen: 24
94.124.0.0/21 maxlen: 21
94.124.0.0/24 maxlen: 24
94.124.1.0/24 maxlen: 24
94.124.2.0/23 maxlen: 23
94.124.4.0/24 maxlen: 24
94.124.5.0/24 maxlen: 24
94.124.6.0/24 maxlen: 24
94.124.7.0/24 maxlen: 24
94.124.8.0/21 maxlen: 21
185.28.16.0/22 maxlen: 22
185.28.16.0/24 maxlen: 24
185.28.18.0/23 maxlen: 23
2a02:f78::/32 maxlen: 32
2a02:f7f:14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:75:23:07:e8:7e:ba:b8:8b:f4:c5:64:2b:5b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 1 19:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c44eefdf2d47b8f2f641d693a399a6344a54100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:0e:17:98:0b:f3:03:4b:b9:7e:06:31:ae:
55:6b:50:a8:0b:82:d4:55:3b:9e:11:3d:a5:c8:ec:
48:ba:ca:13:a4:36:b8:98:60:09:ae:2d:97:4b:83:
83:2e:74:ec:f4:51:50:37:75:af:dc:13:f4:58:4b:
8d:2a:81:d2:88:a6:3b:eb:ac:96:4a:e8:70:27:b6:
a5:4c:34:35:e2:2b:37:a0:db:71:8a:a2:ff:cf:0e:
7e:b0:aa:4d:6a:36:f2:26:73:4e:39:5f:1a:6f:1e:
ac:9b:08:e0:b5:17:0b:c2:ff:4d:d2:b8:25:f1:57:
eb:04:e6:36:b5:d0:29:d1:53:09:3a:3a:b8:b0:e9:
d4:37:83:be:94:79:84:32:ba:41:4d:76:6f:86:a6:
4e:6c:08:92:1c:42:48:0e:65:2e:34:05:da:23:10:
be:e0:05:fb:c4:c4:ca:b1:fa:d1:d5:e2:ba:e9:94:
ce:8b:ce:75:a2:24:7b:98:2d:3e:ad:78:7c:df:59:
60:f1:44:c9:41:ca:85:1a:00:0e:e6:e7:c8:b4:32:
5e:44:c9:c9:53:46:87:fd:10:97:83:a5:95:02:ac:
5d:08:8b:d5:eb:b3:16:09:79:71:76:19:a5:af:ed:
4f:d9:de:89:96:a6:ef:b7:47:26:07:67:0b:00:70:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:44:EE:FD:F2:D4:7B:8F:2F:64:1D:69:3A:39:9A:63:44:A5:41:00
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/TETu_fLUe48vZB1pOjmaY0SlQQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.160.0/24
46.22.163.0-46.22.165.255
46.22.167.0-46.22.170.255
46.22.173.0/24
80.82.16.0/21
80.82.25.0-80.82.31.255
91.189.248.0/21
94.124.0.0/20
185.28.16.0/22
IPv6:
2a02:f78::/32
2a02:f7f:14::/48
Signature Algorithm: sha256WithRSAEncryption
07:8c:19:d8:d8:5a:f7:b8:d4:7d:fb:1a:37:99:0d:fe:13:b0:
71:84:80:30:e7:2f:75:bc:b9:2c:aa:78:22:5b:41:41:06:66:
b6:93:31:5e:13:f6:67:bf:7a:87:77:cc:4a:fb:4d:9d:54:99:
57:b2:44:b1:a4:24:c0:36:d1:c2:cc:53:bb:99:6d:4d:07:94:
0b:93:63:66:bd:1f:87:52:73:5c:94:79:0e:e7:c0:bf:71:32:
b6:9c:69:1a:b5:53:da:c7:94:00:8f:72:10:da:a6:13:5f:05:
40:dd:f1:fa:18:85:f0:a9:c8:53:57:98:db:04:71:f0:1e:5a:
1f:1b:c7:19:c3:0a:4c:9d:27:2a:f4:b8:11:57:59:33:0b:b2:
dd:15:53:b5:a6:25:e1:28:42:85:60:30:d5:3e:e0:b2:f4:dc:
33:cb:da:60:48:3d:92:dc:f8:7a:a8:ed:f8:89:39:84:f2:03:
0c:16:89:09:f9:f8:95:f9:be:16:82:08:5a:5c:5e:3b:de:5d:
8c:b4:7c:e9:17:86:7b:77:ca:43:03:1d:5a:36:7f:a0:7d:8d:
70:15:72:dc:dc:5f:6e:b1:05:6d:d0:23:79:9d:33:6a:c2:eb:
14:c0:eb:79:3c:f7:40:07:11:e8:62:3f:15:a6:19:20:60:81:
1c:07:8e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net