Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/M0_KB7YWngkVytRrWSYysj7YJLA.roa
File: M0_KB7YWngkVytRrWSYysj7YJLA.roa (raw, json)
Hash identifier: Wx2mA+u5jzHoEfTRzsY0nX3Oe/9sdMOBfbPWiWl5Xlc=
Subject key identifier: 33:4F:CA:07:B6:16:9E:09:15:CA:D4:6B:59:26:32:B2:3E:D8:24:B0
Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial: 019424B29455C6F4E45695F0AC0C6417F476
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/M0_KB7YWngkVytRrWSYysj7YJLA.roa
Signing time: Thu 02 Jan 2025 01:47:50 +0000
ROA not before: Thu 02 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48789
IP address blocks: 46.238.212.0/22 maxlen: 22
46.238.228.0/22 maxlen: 22
46.238.236.0/22 maxlen: 22
46.238.240.0/21 maxlen: 21
46.238.248.0/23 maxlen: 23
46.239.176.0/20 maxlen: 20
89.191.152.0/23 maxlen: 23
89.191.154.0/24 maxlen: 24
94.101.16.0/20 maxlen: 21
94.101.24.0/21 maxlen: 21
94.141.135.0/24 maxlen: 24
94.141.152.0/23 maxlen: 23
185.174.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:94:55:c6:f4:e4:56:95:f0:ac:0c:64:17:f4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Validity
Not Before: Jan 2 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=334fca07b6169e0915cad46b592632b23ed824b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:19:d6:d2:d7:8e:f5:7f:8a:1d:1d:dc:39:bf:
77:da:71:19:8c:f2:fe:9e:f5:df:30:cb:06:f9:1a:
ee:a1:8f:89:10:44:5d:51:b6:bb:27:a4:2d:c7:df:
e8:a0:83:51:d7:58:4c:7c:33:3d:10:d0:08:5e:56:
0e:40:94:d6:8a:f8:df:95:00:e0:61:44:93:55:6a:
dd:3e:c8:7a:15:fc:29:28:68:3a:8b:be:1f:a1:ae:
0e:6a:16:74:f5:ab:90:15:6b:c9:a1:11:40:41:df:
a8:f0:4c:c0:c1:b6:b6:eb:6d:5d:09:2f:8f:e5:07:
86:fe:fc:6d:63:9a:17:f6:c0:e9:c0:99:20:cc:4e:
1a:13:22:a7:db:2b:9f:1f:b2:1e:e7:1b:1d:61:78:
e8:cf:4c:66:0a:02:86:58:c9:c5:f5:b6:b8:05:16:
a1:9b:6f:0a:27:00:23:3f:ea:1e:e3:a4:2d:cd:f8:
ac:aa:16:69:b3:16:b4:c5:68:3d:09:f2:36:09:48:
aa:d6:15:6e:39:44:ae:6e:50:d8:7b:58:cf:39:cb:
ab:10:86:30:aa:6e:9c:d4:2b:5e:fa:bb:0c:7a:b1:
1c:1a:bc:57:1f:0a:c3:ba:84:2e:0c:99:9d:7b:cc:
bb:a0:64:85:1e:0a:c0:3c:e5:e9:6b:f3:57:53:74:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4F:CA:07:B6:16:9E:09:15:CA:D4:6B:59:26:32:B2:3E:D8:24:B0
X509v3 Authority Key Identifier:
keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/M0_KB7YWngkVytRrWSYysj7YJLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.238.212.0/22
46.238.228.0/22
46.238.236.0-46.238.249.255
46.239.176.0/20
89.191.152.0-89.191.154.255
94.101.16.0/20
94.141.135.0/24
94.141.152.0/23
185.174.152.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:23:87:74:06:07:dc:89:2e:9f:21:f9:83:e4:96:f0:50:80:
eb:ff:dc:f5:39:c6:a4:7c:f0:cd:4d:07:b7:33:fc:43:d9:fa:
64:d7:ed:b6:4d:fc:83:02:57:cc:29:e7:f8:11:b6:31:fc:da:
0e:1e:07:bd:68:7e:e3:4f:02:39:c0:af:43:4b:3d:ca:66:d5:
f1:15:6a:b8:ce:bd:e4:bd:c5:cd:aa:05:f7:a8:5a:1f:05:f7:
95:06:c2:d5:46:1f:98:fb:68:05:d6:b5:86:b0:03:f4:d1:a6:
5e:ca:2a:35:ac:84:14:0f:c1:cd:1b:1d:11:c0:41:cb:c2:e9:
75:c4:d6:84:8a:57:0b:a5:33:5c:19:8a:b0:15:00:a3:60:4b:
bf:d8:38:3d:57:df:ad:ba:ab:ec:52:9e:31:03:30:1c:9c:59:
f9:a9:42:66:40:d5:2f:cf:10:be:36:e9:1f:2f:e6:be:a8:d0:
a1:03:1e:59:e5:f0:3a:71:99:75:8b:b5:34:e4:97:31:8b:9a:
38:20:fe:ef:44:c9:52:12:79:56:44:c3:13:d1:53:10:90:2f:
7e:e7:56:9b:1f:57:90:52:e3:23:78:1b:33:2a:c5:4f:ba:a1:
67:ce:fd:40:52:2c:1c:a4:f9:f2:63:cb:d8:b7:95:46:a4:f4:
4a:d7:ef:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net