Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/kKXRYJxwMMXbPNKSde4f-CErN8I.roa
File: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (raw, json)
Hash identifier: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=
Subject key identifier: 90:A5:D1:60:9C:70:30:C5:DB:3C:D2:92:75:EE:1F:F8:21:2B:37:C2
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 019423D770AD3C91580E08F42009C7C2A036
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/kKXRYJxwMMXbPNKSde4f-CErN8I.roa
Signing time: Wed 01 Jan 2025 21:48:29 +0000
ROA not before: Wed 01 Jan 2025 21:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43110
IP address blocks: 46.172.64.0/24 maxlen: 24
46.172.65.0/24 maxlen: 24
46.172.66.0/24 maxlen: 24
46.172.69.0/24 maxlen: 24
46.172.70.0/24 maxlen: 24
46.172.71.0/24 maxlen: 24
46.172.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:70:ad:3c:91:58:0e:08:f4:20:09:c7:c2:a0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Jan 1 21:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90a5d1609c7030c5db3cd29275ee1ff8212b37c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:be:55:d0:53:a0:84:48:9d:a2:1e:c5:da:90:
e2:88:6f:83:94:e3:37:78:7a:b0:e5:be:ca:a3:20:
76:e0:4f:cc:2d:08:a9:19:e8:96:2e:5b:9d:fd:38:
71:3c:da:5c:5a:ad:66:2d:4d:31:c4:c0:9a:65:70:
5d:a4:38:67:6e:5d:88:b3:dc:07:20:09:01:bc:cd:
70:9e:b5:f0:d5:6e:f4:bf:8e:c0:68:04:1e:ec:17:
9a:b0:7d:8f:41:66:c9:11:87:80:f9:31:21:07:f5:
80:e8:e3:ed:e5:ee:c1:97:37:49:f1:9a:52:af:ba:
71:cc:a4:85:30:47:1c:ed:f7:79:3a:19:b8:2d:70:
65:79:0b:5d:5a:56:7a:92:3c:dc:76:55:0f:f4:7b:
ab:92:14:1e:36:93:be:fb:cf:65:17:15:25:d3:dc:
f6:6a:dd:01:f1:48:56:66:51:8a:7a:fd:f7:19:15:
27:85:c2:7e:6a:fd:fb:dc:9e:6a:82:61:aa:77:d2:
6d:c1:aa:be:60:e9:8e:a4:7f:21:4b:30:44:dd:12:
08:e3:06:e4:95:ff:f7:6d:c3:84:96:6e:ec:2e:2f:
43:14:32:da:02:38:7c:2c:56:c0:ec:bf:df:1a:88:
c9:4b:cd:e5:2f:8e:f7:74:03:ed:2b:4f:fc:f1:b9:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A5:D1:60:9C:70:30:C5:DB:3C:D2:92:75:EE:1F:F8:21:2B:37:C2
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/kKXRYJxwMMXbPNKSde4f-CErN8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.64.0-46.172.66.255
46.172.69.0-46.172.71.255
46.172.92.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f5:72:c6:9d:18:39:84:4b:1b:0e:5d:eb:e4:bb:c2:f4:e7:
4c:fa:c5:e4:75:e1:66:e1:d0:d7:6e:82:b8:a1:ce:76:6d:a7:
00:80:ad:91:9b:27:f1:3b:4d:55:2e:22:d7:dd:62:4e:6a:29:
2d:c6:35:6b:4e:30:a5:23:ba:54:d0:5c:3e:9f:9f:f7:80:92:
d1:e1:c1:72:6f:b6:28:54:3b:94:2e:56:d2:d8:9f:3a:41:d6:
31:ad:7d:c7:d1:de:fe:90:7e:93:6f:b4:09:a8:e1:c1:4f:33:
f5:b1:73:f8:12:78:36:29:6a:f7:dc:2a:1c:ed:9e:3a:9d:ce:
19:18:6e:63:84:9e:e7:86:e7:5b:d4:e5:8f:45:f1:99:c1:04:
18:54:b5:eb:e4:e6:f4:c5:8c:4c:3c:45:ba:fc:ae:fe:fa:d7:
19:1f:55:3c:2b:dc:95:f2:fb:68:f8:16:20:7c:37:13:bf:ed:
07:f2:0f:7e:ea:44:34:83:74:65:b1:e3:e8:c2:35:5d:bd:d8:
fe:3d:08:af:70:7c:be:9a:ba:c4:ad:20:0f:c2:95:2d:e1:9e:
ba:e2:7b:33:8b:50:d8:79:44:1d:8e:e0:f5:02:26:7a:2a:b2:
2f:09:d8:90:19:c4:f1:67:01:9c:2e:90:e0:f8:10:65:f3:f3:
7d:db:e4:27
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQj13CtPJFYDgj0IAnHwqA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2
ZDIwMzkwHhcNMjUwMTAxMjE0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGE1ZDE2MDljNzAzMGM1ZGIzY2QyOTI3NWVlMWZmODIxMmIzN2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir5V0FOghEidoh7F2pDiiG+DlOM3
eHqw5b7KoyB24E/MLQipGeiWLlud/ThxPNpcWq1mLU0xxMCaZXBdpDhnbl2Is9wH
IAkBvM1wnrXw1W70v47AaAQe7BeasH2PQWbJEYeA+TEhB/WA6OPt5e7BlzdJ8ZpS
r7pxzKSFMEcc7fd5Ohm4LXBleQtdWlZ6kjzcdlUP9HurkhQeNpO++89lFxUl09z2
at0B8UhWZlGKev33GRUnhcJ+av373J5qgmGqd9Jtwaq+YOmOpH8hSzBE3RII4wbk
lf/3bcOElm7sLi9DFDLaAjh8LFbA7L/fGojJS83lL473dAPtK0/88bl9vQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJCl0WCccDDF2zzSknXuH/ghKzfCMB8GA1UdIwQY
MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt
YmFjYWI0NzVlNmNjLzEva0tYUllKeHdNTVhiUE5LU2RlNGYtQ0VyTjhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj
LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAYurEAD
BAAurEIwDAMEAC6sRQMEAy6sQAMEAC6sXDANBgkqhkiG9w0BAQsFAAOCAQEAV/Vy
xp0YOYRLGw5d6+S7wvTnTPrF5HXhZuHQ126CuKHOdm2nAICtkZsn8TtNVS4i191i
TmopLcY1a04wpSO6VNBcPp+f94CS0eHBcm+2KFQ7lC5W0tifOkHWMa19x9He/pB+
k2+0CajhwU8z9bFz+BJ4Nilq99wqHO2eOp3OGRhuY4Se54bnW9Tlj0XxmcEEGFS1
6+Tm9MWMTDxFuvyu/vrXGR9VPCvclfL7aPgWIHw3E7/tB/IPfupENIN0ZbHj6MI1
Xb3Y/j0Ir3B8vpq6xK0gD8KVLeGeuuJ7M4tQ2HlEHY7g9QImeiqyLwnYkBnE8WcB
nC6Q4PgQZfPzfdvkJw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net