Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/PBFDNtiQmYI8zGG7kl8kQ6QSo3w.roa
File: PBFDNtiQmYI8zGG7kl8kQ6QSo3w.roa (raw, json)
Hash identifier: Zn4dyGMYJbfaJjvxLWrM7du9HmyBjKhPRokK9xNb0s0=
Subject key identifier: 3C:11:43:36:D8:90:99:82:3C:CC:61:BB:92:5F:24:43:A4:12:A3:7C
Certificate issuer: /CN=78e7ba8c08853be554c594ded156a6983eba1055
Certificate serial: 0194258FC68445641AC33120B72179C48B9A
Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/PBFDNtiQmYI8zGG7kl8kQ6QSo3w.roa
Signing time: Thu 02 Jan 2025 05:49:26 +0000
ROA not before: Thu 02 Jan 2025 05:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48479
IP address blocks: 46.18.200.0/21 maxlen: 21
46.18.200.0/24 maxlen: 24
46.18.201.0/24 maxlen: 24
46.18.202.0/24 maxlen: 24
46.18.203.0/24 maxlen: 24
46.18.204.0/23 maxlen: 23
46.18.204.0/24 maxlen: 24
46.18.205.0/24 maxlen: 24
46.18.206.0/24 maxlen: 24
46.18.207.0/24 maxlen: 24
151.252.104.0/21 maxlen: 21
151.252.104.0/24 maxlen: 24
151.252.105.0/24 maxlen: 24
151.252.106.0/24 maxlen: 24
151.252.107.0/24 maxlen: 24
151.252.108.0/24 maxlen: 24
151.252.109.0/24 maxlen: 24
151.252.110.0/24 maxlen: 24
151.252.111.0/24 maxlen: 24
185.52.28.0/24 maxlen: 24
185.52.29.0/24 maxlen: 24
185.52.30.0/24 maxlen: 24
185.52.31.0/24 maxlen: 24
185.52.76.0/24 maxlen: 24
185.52.77.0/24 maxlen: 24
185.52.78.0/24 maxlen: 24
185.52.79.0/24 maxlen: 24
2a03:aa80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c6:84:45:64:1a:c3:31:20:b7:21:79:c4:8b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c114336d89099823ccc61bb925f2443a412a37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:f9:2e:f3:53:e6:83:49:39:f7:f7:cf:7e:
df:ee:97:76:84:f3:b5:44:e5:de:db:28:a0:21:05:
91:5c:ed:7f:10:34:a8:1c:f3:67:a6:3a:9f:05:d7:
ad:bb:1d:69:6d:64:a7:7f:40:4f:77:be:3c:fe:92:
9d:cb:76:7b:e9:95:44:10:10:69:37:12:3a:4c:74:
16:35:8d:34:79:90:41:9a:9b:b3:f2:4a:31:7b:0b:
c6:d6:b4:a8:38:82:34:b7:e1:2e:47:b0:71:39:97:
06:1c:0f:87:bb:ac:2a:1b:e1:f8:a0:75:4a:82:38:
4b:cf:a3:b3:8c:db:78:a8:24:73:ec:e4:df:c9:fc:
a9:06:5b:bb:f4:fd:cf:dc:b8:81:2c:12:ce:e0:5f:
4c:44:ce:12:c1:95:c7:6d:81:d6:9f:13:26:a3:88:
33:42:f5:55:33:f3:40:b6:cd:48:5c:5f:77:d5:d4:
96:b5:b9:0d:c7:1c:52:d0:c4:e7:9c:27:ea:a2:23:
bb:4c:c4:13:c4:46:b2:e7:15:1e:ab:10:e7:4b:1b:
6d:12:43:b2:8b:62:8d:68:14:39:cb:3f:f2:92:d6:
aa:85:14:a5:ad:b1:10:a5:d8:f7:00:c5:ba:8c:22:
00:60:1e:c0:30:b9:67:95:f7:1b:84:d2:90:61:44:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:11:43:36:D8:90:99:82:3C:CC:61:BB:92:5F:24:43:A4:12:A3:7C
X509v3 Authority Key Identifier:
keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/PBFDNtiQmYI8zGG7kl8kQ6QSo3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.200.0/21
151.252.104.0/21
185.52.28.0/22
185.52.76.0/22
IPv6:
2a03:aa80::/32
Signature Algorithm: sha256WithRSAEncryption
2f:57:73:ed:cc:4a:66:26:de:8b:03:3b:12:b0:a6:c0:ee:dd:
56:64:2c:f1:f5:c2:dc:5e:64:dd:c0:fe:59:21:05:6d:36:81:
70:bd:de:98:09:64:45:8c:b3:a7:a0:02:55:67:a5:fe:13:9f:
0a:b4:43:38:38:a3:08:ec:b0:69:73:30:1b:80:83:55:d3:c7:
cf:08:64:09:06:5f:91:d4:90:fb:98:64:76:a4:6b:89:b4:2a:
b3:84:eb:e6:1e:94:5a:32:46:8b:6b:6d:b2:26:fc:c0:66:1c:
18:9f:45:ae:ce:a6:81:d2:92:b3:be:4d:7d:55:b3:05:10:52:
af:6d:67:d9:42:a1:c3:69:97:32:3e:bf:8e:3d:d4:2e:15:c8:
bd:b4:1c:ed:d1:52:c2:31:9c:07:1d:67:c1:86:ec:17:ce:da:
a8:8c:00:e7:50:81:f7:1e:48:15:97:f0:97:e8:1b:b7:8b:cf:
9e:54:42:4d:87:bb:d5:be:bb:10:a6:57:f5:e0:0c:5b:95:f0:
6f:ee:77:a9:16:c9:aa:fa:40:29:08:31:98:46:69:79:10:a2:
3b:02:e2:ff:0b:d9:ce:31:f9:ef:c7:3a:e5:d0:5e:70:e9:5f:
07:23:ab:4a:c8:92:bd:98:3c:42:03:5d:8d:06:b2:27:ca:a1:
02:5c:bf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net