Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/BWzUAYzWxehGB0sc7Hoq3s64-5A.roa
File: BWzUAYzWxehGB0sc7Hoq3s64-5A.roa (raw, json)
Hash identifier: Y2Cmk2o0Bi2v58k/tp8mbuKNOVbGQJJqiMnQXIqfVfA=
Subject key identifier: 05:6C:D4:01:8C:D6:C5:E8:46:07:4B:1C:EC:7A:2A:DE:CE:B8:FB:90
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 0194252195D5C03D2AB53C8578C9B885B59D
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/BWzUAYzWxehGB0sc7Hoq3s64-5A.roa
Signing time: Thu 02 Jan 2025 03:49:05 +0000
ROA not before: Thu 02 Jan 2025 03:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42422
IP address blocks: 46.36.35.0/24 maxlen: 24
46.36.36.0/24 maxlen: 24
46.36.37.0/24 maxlen: 24
46.36.38.0/24 maxlen: 24
46.36.39.0/24 maxlen: 24
46.36.40.0/24 maxlen: 24
46.36.41.0/24 maxlen: 24
2a02:25b0:aaaa::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:95:d5:c0:3d:2a:b5:3c:85:78:c9:b8:85:b5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Jan 2 03:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=056cd4018cd6c5e846074b1cec7a2adeceb8fb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:f0:ce:cc:1d:6b:e2:3e:e9:5b:05:58:a1:
76:92:98:29:cf:18:38:b7:c3:c4:57:67:ac:42:51:
be:2f:d7:35:63:fb:3c:26:db:ba:a0:37:a2:a2:db:
97:b1:5f:4e:c9:a8:ab:ce:b3:94:47:99:a0:4b:20:
4d:5a:ca:8c:01:51:5a:81:fb:c0:39:bb:ea:8c:87:
a2:21:15:d5:5e:e4:b0:44:88:b4:a6:30:96:b1:e2:
c9:79:c4:92:7a:05:fa:22:e4:d3:75:12:50:e0:98:
75:78:f7:13:b3:f7:bb:60:36:2f:e3:24:21:39:55:
06:f1:56:01:e4:6c:7f:c8:8d:1c:6b:67:f6:52:05:
7a:5b:6f:5e:bc:e9:26:40:84:ad:16:ea:3d:54:84:
5c:0a:45:54:89:9c:ca:ed:5e:30:5a:ad:64:9b:59:
9b:ba:65:6c:e3:2f:7a:0f:ec:bc:3d:a5:25:c8:5e:
52:23:6c:8c:36:69:f3:a0:7f:d3:1f:5d:3c:2f:d2:
24:6b:aa:e1:df:f4:3c:de:07:65:14:46:7d:68:41:
57:63:a1:f4:16:db:fb:c2:14:e5:c8:21:b2:31:5b:
71:e3:fc:ce:38:da:e0:6f:60:3a:4e:dc:36:de:e6:
6a:83:1b:75:9f:af:ab:f2:fa:31:56:70:af:05:21:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6C:D4:01:8C:D6:C5:E8:46:07:4B:1C:EC:7A:2A:DE:CE:B8:FB:90
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/BWzUAYzWxehGB0sc7Hoq3s64-5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.35.0-46.36.41.255
IPv6:
2a02:25b0:aaaa::/48
Signature Algorithm: sha256WithRSAEncryption
51:0b:84:ca:32:2f:f1:eb:f4:9c:1a:fc:ac:cf:6f:ef:e9:cd:
95:b0:40:c4:c8:77:28:2a:f0:9a:49:03:28:08:5d:05:21:2b:
fb:dd:fc:ff:eb:a2:d5:9c:2f:c2:8f:11:c3:d9:cc:7d:15:d1:
83:1a:1d:03:23:f6:5c:b7:46:ce:5f:22:ad:47:55:44:fc:7d:
ef:87:00:94:8f:28:6c:bf:a7:a1:39:89:c3:62:37:5c:e8:11:
ac:13:2b:1b:d9:62:a3:44:91:61:01:6a:2b:ad:54:52:fc:57:
21:e2:44:2f:57:41:25:bf:09:93:ef:57:17:7c:7c:5e:47:d3:
ed:b5:4e:8a:e7:a2:f1:4b:53:89:fa:7f:d2:96:9f:a8:79:b6:
ce:5c:ef:39:61:ca:14:ec:7f:f1:5a:36:ea:77:f4:cb:d2:0e:
2b:35:5a:aa:9d:69:1e:49:8a:5f:29:1f:bc:81:f9:0b:21:ba:
f0:d0:3b:9e:00:19:c6:0c:c0:f3:01:d8:71:88:d8:07:28:37:
bb:9b:bf:f8:d3:96:20:13:c3:7a:54:07:b5:1e:c0:6a:d3:fd:
99:de:2f:2f:dd:00:55:71:45:7a:28:73:4a:8a:a4:6a:63:24:
74:f2:6b:e3:96:3e:4e:5e:0e:ea:4c:c2:8c:d8:fb:dc:87:0f:
6e:6e:b5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net