Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/1mc01k4JB9mO_uUxoDo8i1hWS0E.roa
File: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (raw, json)
Hash identifier: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=
Subject key identifier: D6:67:34:D6:4E:09:07:D9:8E:FE:E5:31:A0:3A:3C:8B:58:56:4B:41
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 019423D7737F9C33DC286227FFFD562ED271
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/1mc01k4JB9mO_uUxoDo8i1hWS0E.roa
Signing time: Wed 01 Jan 2025 21:48:29 +0000
ROA not before: Wed 01 Jan 2025 21:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210069
IP address blocks: 46.172.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:73:7f:9c:33:dc:28:62:27:ff:fd:56:2e:d2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Jan 1 21:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d66734d64e0907d98efee531a03a3c8b58564b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:cd:7d:f9:ee:64:11:37:24:f3:b7:ce:76:
5d:27:4d:ea:c0:8e:c3:67:f7:b8:90:6a:e1:02:f8:
d5:cb:4b:45:e6:17:08:d8:d8:65:77:92:2f:a1:8c:
46:e8:b6:6c:03:6b:c2:14:ca:77:8b:d2:51:93:87:
00:4f:d7:24:ed:c1:9d:70:c8:a1:9b:79:01:b2:87:
7d:9b:d5:e9:58:a6:5e:d4:59:a6:ca:64:22:07:a9:
7a:d5:2f:f6:11:64:3c:63:70:d5:a6:cf:80:ef:50:
82:3a:af:37:36:a2:c4:f7:5b:95:27:b5:2f:2a:6c:
04:bb:68:cf:dd:c8:d0:ec:bf:77:a3:e2:8a:0d:f9:
f1:44:ba:99:57:12:5b:ef:16:27:8d:ad:14:8c:d7:
cc:ec:f1:83:90:ea:1c:d2:b3:9e:bb:05:f1:ec:68:
d4:dc:a1:87:82:ce:21:a2:4e:3b:ba:3d:4e:4a:3c:
96:c9:12:2a:1e:5a:e0:95:84:26:43:e0:a9:ce:4c:
b7:c2:a7:19:ee:8b:be:68:17:f9:84:c3:1f:30:19:
08:4d:1e:85:3a:1f:07:40:83:c6:76:13:17:15:eb:
2a:28:f2:24:9f:01:cc:40:0d:1c:56:54:b4:92:59:
13:bd:9a:1b:0c:d2:c6:06:13:83:69:69:79:0e:bd:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:67:34:D6:4E:09:07:D9:8E:FE:E5:31:A0:3A:3C:8B:58:56:4B:41
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/1mc01k4JB9mO_uUxoDo8i1hWS0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:df:17:6d:7e:16:cd:08:8e:8e:0f:d3:c6:29:89:84:17:8c:
46:2b:17:3f:8e:35:c2:10:92:5c:89:3d:f3:f6:77:92:16:75:
61:ca:d2:b3:88:83:1e:53:21:10:9c:db:01:64:2e:a9:e8:25:
a4:66:70:ea:e4:4f:9e:c9:78:65:2f:8e:83:7c:cd:c0:0b:83:
e8:c8:41:05:ae:42:12:1d:60:9a:00:40:ae:85:af:59:9c:e4:
e3:71:08:da:6e:b2:3e:33:6b:a6:a7:55:5f:5e:b6:3d:94:4d:
ab:6e:58:b7:49:5b:4e:79:25:0f:7a:fe:a5:78:d5:76:ac:d4:
ee:9a:f9:cb:a1:5e:b8:76:c7:bf:a1:27:ed:5b:d6:77:12:70:
8a:13:37:64:7b:e9:68:88:c1:4d:7f:5d:4c:54:3d:77:b0:18:
cd:c3:73:e9:f8:19:47:e2:46:08:ac:83:df:97:1c:87:8d:7d:
85:bf:0c:fe:ed:76:f6:c4:5d:f7:dd:f6:cb:c2:51:1b:98:7f:
42:e3:bd:34:f1:86:42:b4:0a:cf:40:16:54:66:7d:2f:1f:fb:
1c:d7:44:08:0c:87:7a:75:e3:21:d0:eb:da:fc:c7:b9:6b:e9:
b5:37:66:87:2b:d7:80:10:29:24:38:e8:f1:71:40:a0:25:74:
37:ed:27:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net