Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/LGIjR37T32om32PNGVlywqITYQM.roa
File: LGIjR37T32om32PNGVlywqITYQM.roa (raw, json)
Hash identifier: PDrBaXBEFkBMQXE+r+pZdqQOvhiNvqlNo622ZzA4QS0=
Subject key identifier: 2C:62:23:47:7E:D3:DF:6A:26:DF:63:CD:19:59:72:C2:A2:13:61:03
Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial: 0194252147E22D069846494F29EEC9659D37
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/LGIjR37T32om32PNGVlywqITYQM.roa
Signing time: Thu 02 Jan 2025 03:48:45 +0000
ROA not before: Thu 02 Jan 2025 03:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48326
IP address blocks: 46.228.208.0/20 maxlen: 20
46.228.208.0/21 maxlen: 21
46.228.216.0/21 maxlen: 21
46.228.221.0/24 maxlen: 24
46.228.223.0/24 maxlen: 27
94.229.32.0/20 maxlen: 20
94.229.32.0/21 maxlen: 21
94.229.40.0/21 maxlen: 21
193.8.84.0/23 maxlen: 23
193.8.84.0/24 maxlen: 24
193.8.85.0/24 maxlen: 24
193.8.92.0/23 maxlen: 23
193.8.92.0/24 maxlen: 24
193.8.93.0/24 maxlen: 24
2a00:b000::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:47:e2:2d:06:98:46:49:4f:29:ee:c9:65:9d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Validity
Not Before: Jan 2 03:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c6223477ed3df6a26df63cd195972c2a2136103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:da:ab:ca:c9:76:c9:94:af:3e:6b:4f:5b:
f0:a8:3b:99:e8:17:00:70:9a:07:f5:5f:c0:09:a5:
c7:fc:96:35:d7:e4:3a:68:03:50:64:35:1b:af:c1:
dc:62:53:73:64:27:a1:23:d0:4c:0f:c4:e2:11:8d:
75:fc:04:18:9b:cc:45:8d:11:be:06:da:c6:3b:91:
f0:89:16:b4:85:2e:0f:ac:f7:be:b0:7a:12:c1:aa:
9a:43:26:e4:e5:72:fe:44:56:06:a2:b5:f5:26:3f:
b1:35:76:5e:06:8f:8b:77:9c:90:d7:db:ad:8a:f1:
d0:6e:c3:70:01:93:eb:7f:7e:24:af:58:dd:bc:93:
e9:fc:95:98:9b:7b:c1:db:10:ff:a2:02:f1:48:78:
18:bf:d7:b4:46:ac:3a:f8:5f:56:13:5d:1b:3b:c1:
f1:de:f1:cb:de:63:ea:ef:5a:3e:16:ca:5d:4e:5a:
58:fe:b8:e4:4c:a9:b1:9f:e2:5d:a2:56:94:85:b0:
de:63:eb:4c:4c:f7:3d:25:22:2d:f4:db:18:ca:d5:
43:d3:bc:88:b3:4e:2d:95:75:5c:b6:54:cd:68:c0:
54:0e:23:27:ee:a3:ca:7c:4e:02:35:dd:27:de:52:
09:f6:ad:5e:0a:81:b6:fa:57:05:1b:04:21:7a:7f:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:62:23:47:7E:D3:DF:6A:26:DF:63:CD:19:59:72:C2:A2:13:61:03
X509v3 Authority Key Identifier:
keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/LGIjR37T32om32PNGVlywqITYQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.208.0/20
94.229.32.0/20
193.8.84.0/23
193.8.92.0/23
IPv6:
2a00:b000::/32
Signature Algorithm: sha256WithRSAEncryption
ab:3c:64:3c:00:e2:cf:ec:6d:4c:8d:f6:c0:74:3e:c7:af:e6:
0d:a4:18:12:b1:d6:ee:48:14:80:5e:2b:99:df:6e:ec:df:65:
83:0c:04:b8:8c:33:ea:b6:cf:4b:46:aa:e8:6b:06:04:2b:70:
5d:b1:8d:83:e5:3d:3f:4e:76:4d:25:f7:f7:48:f4:6a:59:6f:
11:16:3e:69:4b:73:ee:5f:11:ab:aa:21:fa:a8:bf:3d:8a:d5:
8d:5a:1b:98:ba:43:d1:29:54:b1:0d:33:c8:30:93:0c:5c:09:
ca:1f:20:6b:6e:45:4e:79:2b:50:9a:10:99:5e:8a:2b:a9:ff:
0d:eb:19:e7:e8:a1:b9:5c:ca:e6:9f:36:b8:e1:16:b1:f5:cb:
1d:ee:d7:24:d2:44:a5:57:9a:11:24:91:aa:ed:de:bb:a8:7c:
ac:9a:bb:9e:54:30:65:b2:01:ed:ac:15:50:c5:9d:b3:fa:01:
9d:b3:df:b4:e3:3c:a4:b6:4d:f5:60:46:16:c5:84:7c:c5:af:
29:d5:0c:4e:40:82:e7:f2:87:13:0d:6e:32:81:dc:00:d3:9f:
77:17:6c:46:44:b7:8c:03:1e:03:cc:8d:2c:5b:53:a0:16:66:
df:0a:b4:14:66:2d:6b:ae:c1:30:eb:3b:e7:a0:07:e5:ff:85:
ce:0d:df:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net