Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/2c5hJsdBUeeCiChk_4V2w2gh6lU.roa
File: 2c5hJsdBUeeCiChk_4V2w2gh6lU.roa (raw, json)
Hash identifier: D53Q1f7eGpeEwEpkqzHT1XzbHYkVzvcMu+bdTa1FNsw=
Subject key identifier: D9:CE:61:26:C7:41:51:E7:82:88:28:64:FF:85:76:C3:68:21:EA:55
Certificate issuer: /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial: 019421B24275A652D45B5BE9DB989FB8920F
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/2c5hJsdBUeeCiChk_4V2w2gh6lU.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51984
IP address blocks: 46.253.32.0/24 maxlen: 24
46.253.33.0/24 maxlen: 24
46.253.34.0/24 maxlen: 24
46.253.35.0/24 maxlen: 24
46.253.36.0/24 maxlen: 24
46.253.37.0/24 maxlen: 24
46.253.38.0/24 maxlen: 24
46.253.39.0/24 maxlen: 24
185.58.172.0/24 maxlen: 24
185.58.173.0/24 maxlen: 24
185.58.174.0/24 maxlen: 24
185.58.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:42:75:a6:52:d4:5b:5b:e9:db:98:9f:b8:92:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9ce6126c74151e782882864ff8576c36821ea55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:89:c7:ec:d6:cb:fd:6d:cc:8e:5e:1d:89:
58:0d:ad:8b:3b:9f:ab:a8:c1:61:7a:55:6d:7b:47:
d8:3c:b8:51:b6:c7:72:3c:89:fc:47:76:05:27:5f:
de:93:51:70:46:88:25:b6:fc:f3:16:66:77:cf:de:
53:93:f5:a3:a3:d1:14:87:65:40:3c:8e:2a:92:1b:
aa:b6:59:2d:44:af:36:b7:cc:c5:8d:38:f0:e3:5b:
b6:83:ea:99:f3:19:d6:9f:10:ba:f8:3f:67:eb:48:
5d:73:c8:2d:9e:91:5b:9d:6e:dd:28:1c:23:21:06:
c4:fc:ca:62:c6:a8:60:ae:f7:3c:84:4f:fd:1d:96:
de:4a:4f:87:53:48:43:b2:24:6e:9e:f1:b1:b6:3a:
82:87:e5:f9:74:24:88:2b:50:aa:50:06:b9:80:30:
66:9a:64:56:ea:8c:77:fb:b0:69:c5:25:b0:90:6a:
f9:94:7f:18:bb:57:96:8d:d7:0d:af:be:87:e4:55:
dd:da:6b:83:46:71:b1:5d:89:61:71:79:04:73:73:
07:a0:22:71:d7:d8:1a:1d:15:01:45:ba:d1:12:65:
64:ae:b5:de:a7:8f:34:15:56:be:8a:ef:e0:b4:24:
f3:98:5f:3a:c7:b6:d7:a9:6c:0c:df:95:ac:a1:b1:
e0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CE:61:26:C7:41:51:E7:82:88:28:64:FF:85:76:C3:68:21:EA:55
X509v3 Authority Key Identifier:
keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/2c5hJsdBUeeCiChk_4V2w2gh6lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.32.0/21
185.58.172.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:be:d4:c2:34:8d:b7:b8:43:47:fa:52:27:fb:05:42:54:34:
b4:43:39:d7:0f:3f:40:43:c9:d2:7e:82:1c:31:5d:6a:58:a8:
92:e2:a8:8b:62:a3:76:72:e2:62:6c:16:65:75:37:a6:98:58:
f6:7e:2c:74:0d:c0:82:9e:1a:a2:8e:ab:02:db:95:fe:aa:5d:
53:ea:62:a6:a9:f9:60:f1:7f:f9:18:57:f5:35:9b:b8:b0:0e:
6c:6e:af:8b:df:9f:e3:42:9b:22:ac:09:b9:54:4c:56:81:9e:
be:2f:05:c8:df:a9:05:6b:5a:14:07:ed:37:f5:8f:59:a8:88:
f0:6c:ed:b5:d1:5c:8b:d5:24:68:11:20:79:03:51:a5:8c:25:
ed:02:fe:24:e4:8c:86:1c:c5:cf:a0:99:36:6b:16:d4:25:0f:
35:43:43:29:3f:05:94:85:af:d7:96:cd:a6:fc:95:4e:79:8b:
8b:91:5e:03:32:10:d4:92:55:63:72:2f:82:3c:69:a7:0b:7d:
40:03:aa:99:04:91:fd:b2:6a:4f:7d:7e:b9:c1:80:fc:c4:63:
67:14:2b:8c:af:ee:f6:15:bf:1b:a0:57:d5:99:eb:24:7b:21:
22:7e:c8:38:fd:14:ff:cc:a3:9d:a1:c1:7e:9a:50:92:be:8b:
d7:ff:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:10 2025 by rpki-client on console.sobornost.net