Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/Drm3yVYw97KKXBlf3pxNGzoXJmg.roa
File: Drm3yVYw97KKXBlf3pxNGzoXJmg.roa (raw, json)
Hash identifier: UqWUcKKXRQLVy4D1ELRqLBvncJ5/FKdyjzDDOKgUpAA=
Subject key identifier: 0E:B9:B7:C9:56:30:F7:B2:8A:5C:19:5F:DE:9C:4D:1B:3A:17:26:68
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 01941FFA134ABC160F3EED9710037E37804C
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/Drm3yVYw97KKXBlf3pxNGzoXJmg.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205368
IP address blocks: 46.182.172.0/23 maxlen: 23
46.182.172.0/24 maxlen: 24
46.182.173.0/24 maxlen: 24
46.182.174.0/24 maxlen: 24
185.215.52.0/22 maxlen: 22
185.215.52.0/24 maxlen: 24
185.215.54.0/24 maxlen: 24
185.215.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:13:4a:bc:16:0f:3e:ed:97:10:03:7e:37:80:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0eb9b7c95630f7b28a5c195fde9c4d1b3a172668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:4d:35:a0:ef:0e:6e:58:e7:40:e3:cc:49:
6a:0e:22:43:1f:15:08:7f:aa:56:f4:37:60:cf:5e:
00:6a:3b:cd:9e:12:2b:d6:9c:dc:85:49:b5:90:b2:
09:aa:9d:df:70:6c:71:14:18:cf:41:2f:12:4a:9b:
77:d6:57:de:d3:d9:2c:28:74:6d:0e:3f:b5:28:a5:
92:e7:f8:1d:70:17:2d:2a:32:b7:c4:e3:8c:ee:bf:
ac:37:24:27:45:11:75:a9:37:48:ef:aa:f6:e6:7e:
c3:1c:06:49:7f:cf:93:d3:81:e4:3d:3f:c4:93:93:
61:2f:b4:96:20:08:0e:26:88:e0:94:c4:32:41:fd:
01:67:56:a6:44:47:e9:d1:d1:37:34:da:60:74:3d:
c8:29:4a:39:69:f2:0b:e8:33:ca:57:0c:7e:6a:cd:
05:91:d3:a1:c1:ef:41:0a:7a:c6:75:57:08:36:50:
15:66:ad:43:ce:ed:f4:3b:37:dc:df:ad:ab:bc:51:
07:19:dd:18:11:75:f8:70:11:97:57:5d:5d:8e:63:
3a:29:41:2a:47:b3:6a:7d:18:e2:c5:03:91:3e:ff:
32:e2:6a:45:c8:94:68:88:82:b1:e1:91:8d:20:00:
95:1b:48:1f:3a:19:67:6e:12:0d:9a:8f:c7:ee:a1:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B9:B7:C9:56:30:F7:B2:8A:5C:19:5F:DE:9C:4D:1B:3A:17:26:68
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/Drm3yVYw97KKXBlf3pxNGzoXJmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.172.0-46.182.174.255
185.215.52.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:e9:7d:cc:b1:0b:ce:6d:34:67:38:c1:44:7f:53:93:c2:fe:
8c:4b:7b:5d:e5:f4:e5:ef:ef:12:91:19:80:15:48:90:99:a2:
d8:05:3f:42:64:78:66:f6:80:af:d5:ba:85:c4:62:2d:74:ed:
80:45:7f:45:f9:f2:bc:9b:8a:26:5f:3d:42:6a:5e:9a:ac:34:
53:c9:2e:68:88:4b:04:f5:b5:40:db:7a:e8:df:ac:68:62:eb:
19:91:9b:38:58:1b:f5:e0:e2:04:c3:28:27:9b:d4:65:46:20:
90:01:b5:23:fe:f7:34:df:a8:80:97:c9:df:f0:3b:61:05:b1:
ef:f5:bb:66:40:cc:95:19:32:4e:01:04:32:42:58:a1:39:14:
a6:f4:2c:c2:e5:f2:f5:f9:4e:41:f8:5b:e1:e9:be:23:f4:fe:
cf:8b:73:d0:53:7d:6c:48:12:11:b5:fd:7a:ea:18:b6:5b:47:
ea:0a:c2:3b:43:02:3b:62:f2:0a:89:5b:74:01:0c:6f:1f:72:
64:83:31:cd:33:16:e9:ec:49:f4:90:0e:e3:9d:6e:bb:46:c1:
e7:2d:0b:ff:35:83:37:b7:70:0b:c4:b7:70:57:38:0c:e7:7e:
8b:cc:1d:03:43:be:95:43:c0:fc:1c:01:9b:dd:ec:e4:cb:5c:
00:ad:23:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 25 22:12:50 2025 by rpki-client on console.sobornost.net