Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/28jtotP5jGQZrgfC9dom7mrNVOE.roa
File: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (raw, json)
Hash identifier: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=
Subject key identifier: DB:C8:ED:A2:D3:F9:8C:64:19:AE:07:C2:F5:DA:26:EE:6A:CD:54:E1
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 019424459C2B3795C57FB6373129648E2E85
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/28jtotP5jGQZrgfC9dom7mrNVOE.roa
Signing time: Wed 01 Jan 2025 23:48:49 +0000
ROA not before: Wed 01 Jan 2025 23:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43591
IP address blocks: 46.245.152.0/21 maxlen: 24
85.117.160.0/19 maxlen: 24
85.117.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9c:2b:37:95:c5:7f:b6:37:31:29:64:8e:2e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbc8eda2d3f98c6419ae07c2f5da26ee6acd54e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:83:65:78:11:5c:7c:3e:8b:ba:ed:8c:de:
91:00:00:29:ce:47:a3:10:03:f5:b4:cc:06:12:76:
9a:d1:fb:a6:9d:da:3d:0b:33:07:c0:19:7c:b7:1f:
d2:60:0d:20:d8:6a:65:a9:a8:7c:cc:4c:6d:2f:8e:
22:96:b4:f6:cd:3a:9c:e1:d0:ff:cc:73:fd:62:67:
ad:de:6b:de:9f:84:ee:66:c2:1e:dc:4a:47:57:ef:
6f:42:84:01:cf:6e:8a:7d:16:12:06:7b:07:ec:a3:
e3:67:a0:a3:70:37:ca:1d:63:c0:17:98:33:99:a1:
44:f8:1c:cb:35:d0:13:32:2b:77:af:1d:f7:28:e6:
8a:1f:36:fa:3c:6c:9d:68:08:fe:d5:14:49:5e:86:
3a:98:fd:d6:59:7b:4e:b5:c7:61:5a:4e:8c:ce:88:
2a:69:27:2c:ad:ba:a7:45:99:1c:9b:0b:33:c2:c3:
f4:65:72:29:2b:02:31:c6:82:d7:b4:6b:c1:bc:cc:
1e:aa:2b:19:0c:ae:fb:41:0b:a2:e3:17:6c:7c:97:
1e:1d:e7:4b:d5:51:e1:ec:f0:e5:97:bb:2a:04:14:
38:12:97:62:10:09:14:08:15:e8:c8:31:a7:8a:4d:
e3:42:01:07:35:aa:c5:2c:b9:c9:4f:8b:58:8e:ed:
61:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C8:ED:A2:D3:F9:8C:64:19:AE:07:C2:F5:DA:26:EE:6A:CD:54:E1
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/28jtotP5jGQZrgfC9dom7mrNVOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.152.0/21
85.117.160.0-85.117.223.255
Signature Algorithm: sha256WithRSAEncryption
2c:ce:c7:79:f2:91:df:cd:ac:0e:c8:2b:88:10:39:66:43:b2:
5a:1e:88:bf:d2:68:7c:3e:f8:3c:2b:3f:0b:c6:12:82:53:33:
cf:97:5d:2f:a8:d2:fa:dd:b5:71:05:e6:9f:ba:54:b4:63:7f:
ee:06:b2:84:25:f6:71:22:33:18:35:89:63:ad:c1:58:86:74:
7f:2b:66:0d:33:60:96:ea:4f:52:ac:7f:b3:cf:3a:34:58:2f:
fc:65:fd:90:fe:75:6a:3c:e7:19:05:04:e1:be:4a:f0:b2:4d:
d2:ce:8b:e4:18:7a:18:e6:de:4d:5b:3d:8f:77:08:ea:ca:1c:
8d:15:31:8d:9a:1c:ce:9c:8c:47:47:39:06:a4:94:6a:1a:eb:
25:68:ba:de:fc:8d:30:73:7a:0c:ac:c2:74:cb:2e:98:b0:eb:
da:c4:81:26:b9:20:ac:c9:52:f4:1a:b6:0a:ff:5a:74:c1:ca:
2c:86:48:48:ab:81:76:1f:56:e3:ad:34:b5:2e:ef:88:c2:8b:
28:1c:3a:20:72:0e:79:94:7f:9c:e6:fb:78:ef:e5:e1:eb:e7:
40:07:29:bb:38:6c:78:f9:51:8e:56:21:b8:57:fb:fa:20:fa:
92:40:4e:67:ce:83:be:dd:64:dd:4f:57:db:14:c9:89:0b:0f:
b4:1a:66:aa
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQkRZwrN5XFf7Y3MSlkji6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMmE4YWMzMDI4YjcwOTExY2I2MTExZmZkYTNhMmVmZTU1
ODg2MmQwHhcNMjUwMTAxMjM0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmM4ZWRhMmQzZjk4YzY0MTlhZTA3YzJmNWRhMjZlZTZhY2Q1NGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhKDZXgRXHw+i7rtjN6RAAApzkej
EAP1tMwGEnaa0fumndo9CzMHwBl8tx/SYA0g2Gplqah8zExtL44ilrT2zTqc4dD/
zHP9Ymet3mven4TuZsIe3EpHV+9vQoQBz26KfRYSBnsH7KPjZ6CjcDfKHWPAF5gz
maFE+BzLNdATMit3rx33KOaKHzb6PGydaAj+1RRJXoY6mP3WWXtOtcdhWk6Mzogq
aScsrbqnRZkcmwszwsP0ZXIpKwIxxoLXtGvBvMweqisZDK77QQui4xdsfJceHedL
1VHh7PDll7sqBBQ4EpdiEAkUCBXoyDGnik3jQgEHNarFLLnJT4tYju1h8wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNvI7aLT+YxkGa4HwvXaJu5qzVThMB8GA1UdIwQY
MBaAFHsqisMCi3CRHLYRH/2jou/lWIYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi84NjcyMDktZDM1Zi00OWM0LWE2ZWEt
ODU4ZGQxYjE2MTdmLzEvMjhqdG90UDVqR1FacmdmQzlkb203bXJOVk9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi84NjcyMDktZDM1Zi00OWM0LWE2ZWEtODU4ZGQxYjE2MTdm
LzEvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDLvWYMAwD
BAVVdaADBAVVdcAwDQYJKoZIhvcNAQELBQADggEBACzOx3nykd/NrA7IK4gQOWZD
sloeiL/SaHw++DwrPwvGEoJTM8+XXS+o0vrdtXEF5p+6VLRjf+4GsoQl9nEiMxg1
iWOtwViGdH8rZg0zYJbqT1Ksf7PPOjRYL/xl/ZD+dWo85xkFBOG+SvCyTdLOi+QY
ehjm3k1bPY93COrKHI0VMY2aHM6cjEdHOQaklGoa6yVout78jTBzegyswnTLLpiw
69rEgSa5IKzJUvQatgr/WnTByiyGSEirgXYfVuOtNLUu74jCiygcOiByDnmUf5zm
+3jv5eHr50AHKbs4bHj5UY5WIbhX+/og+pJATmfOg77dZN1PV9sUyYkLD7QaZqo=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net