Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/ATf_uxNGBAFIt4lrn86Vv0BQiTU.roa
File: ATf_uxNGBAFIt4lrn86Vv0BQiTU.roa (raw, json)
Hash identifier: 6LBYj4f2QhUKjYlIldJU6ewnEpmKb1v6j493r3nkZ3Y=
Subject key identifier: 01:37:FF:BB:13:46:04:01:48:B7:89:6B:9F:CE:95:BF:40:50:89:35
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 0190C5FE958061545CC4E27C9986BC98C1C8
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/ATf_uxNGBAFIt4lrn86Vv0BQiTU.roa
Signing time: Thu 18 Jul 2024 13:18:34 +0000
ROA not before: Thu 18 Jul 2024 13:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52142
IP address blocks: 46.174.176.0/24 maxlen: 24
46.174.177.0/24 maxlen: 24
46.174.178.0/24 maxlen: 24
46.174.179.0/24 maxlen: 24
46.174.182.0/24 maxlen: 24
46.174.183.0/24 maxlen: 24
91.210.128.0/24 maxlen: 24
91.210.129.0/24 maxlen: 24
195.69.80.0/22 maxlen: 22
2a03:c940::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:fe:95:80:61:54:5c:c4:e2:7c:99:86:bc:98:c1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Jul 18 13:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0137ffbb1346040148b7896b9fce95bf40508935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:7c:8c:a8:d5:f6:0d:69:24:b0:89:9d:70:
0f:db:c2:61:4d:0c:ab:1b:14:65:da:99:e8:3c:af:
59:14:8a:bf:e6:90:68:a8:07:24:c8:24:8c:70:e5:
54:06:75:28:d6:cd:cf:e4:81:2d:6c:56:4e:f8:1b:
12:87:37:e6:a2:c2:69:27:0f:b8:cd:28:05:c7:99:
6e:eb:bd:7b:51:ac:6a:d6:6f:61:5e:21:2a:b2:a7:
a2:f0:e0:d2:1a:1f:c0:fc:3a:fc:0b:92:50:14:e8:
0f:5d:1d:ba:20:03:07:f7:4b:4f:e5:e6:3e:8c:f9:
f0:08:63:f5:11:3e:10:98:a5:11:ba:df:d4:06:57:
f8:de:af:fd:de:7e:ba:5c:18:56:47:c3:e7:68:15:
e2:98:54:76:bd:df:86:35:e5:b8:0c:91:58:72:29:
35:22:82:5e:4c:65:48:db:cc:e6:dc:b1:02:d4:78:
20:21:d2:35:87:29:90:33:85:97:90:bd:8c:3b:50:
0b:e5:66:61:59:44:42:72:8a:f8:9d:11:6b:9b:15:
ad:f5:62:9b:86:2c:2d:24:df:3d:a4:9f:df:76:bb:
59:df:e2:06:ec:4b:73:64:70:8e:e3:d7:91:89:9b:
e7:83:ce:74:d4:8f:c5:95:a5:57:6a:14:40:e0:68:
a5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:37:FF:BB:13:46:04:01:48:B7:89:6B:9F:CE:95:BF:40:50:89:35
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/ATf_uxNGBAFIt4lrn86Vv0BQiTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.176.0/22
46.174.182.0/23
91.210.128.0/23
195.69.80.0/22
IPv6:
2a03:c940::/32
Signature Algorithm: sha256WithRSAEncryption
86:a4:1c:d7:66:de:20:0c:11:1a:27:21:d7:b6:5e:a4:fe:77:
6e:d7:26:d6:8a:b7:25:9d:e2:a3:4b:3d:94:2c:f3:d0:f1:71:
62:76:4f:13:ee:a0:dc:71:ea:86:55:9f:1d:62:d8:e8:58:6f:
16:38:f3:75:81:42:62:41:a2:40:0a:c7:19:27:ba:81:02:b6:
ec:40:6f:e1:d6:44:7a:72:e5:e1:0c:c1:d1:83:4d:3c:06:b5:
fa:56:e1:cb:53:b6:15:b1:b3:b6:49:23:79:48:e1:58:87:56:
2b:7d:d3:39:06:9b:ea:a6:24:28:2a:a0:2d:3d:f8:07:bc:6b:
70:56:8a:5b:56:18:8c:20:47:9a:ae:05:bf:7c:7a:41:0d:6f:
46:82:ff:cd:c4:6a:93:9b:0b:a4:56:cf:52:51:68:de:20:76:
a0:9a:f9:ea:36:d4:57:9e:a9:b1:77:ad:c6:7a:4c:7f:28:b6:
03:cc:39:1b:fe:15:82:37:ca:71:ad:38:4e:42:b0:1b:b1:fe:
eb:e4:88:82:fd:d0:9e:16:90:3b:ec:42:02:da:3c:5a:9f:ed:
3c:18:f4:54:0a:83:3c:5a:10:70:e5:88:e7:0e:56:67:de:eb:
8c:d2:a6:6e:0b:c0:6d:9f:99:d8:21:87:52:15:e9:1e:aa:4b:
0c:31:fa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 04:43:25 2024 by rpki-client on console.sobornost.net