Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/8QONkg1-sVvu25nrTHQAiE7_PVc.roa
File: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (raw, json)
Hash identifier: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=
Subject key identifier: F1:03:8D:92:0D:7E:B1:5B:EE:DB:99:EB:4C:74:00:88:4E:FF:3D:57
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01959DEC6425427B0C39678ADDC279C2212D
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/8QONkg1-sVvu25nrTHQAiE7_PVc.roa
Signing time: Sun 16 Mar 2025 07:47:49 +0000
ROA not before: Sun 16 Mar 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51759
IP address blocks: 46.36.96.0/24 maxlen: 24
46.36.104.0/24 maxlen: 24
46.36.107.0/24 maxlen: 24
46.36.108.0/24 maxlen: 24
46.36.109.0/24 maxlen: 24
46.36.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9d:ec:64:25:42:7b:0c:39:67:8a:dd:c2:79:c2:21:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Mar 16 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1038d920d7eb15beedb99eb4c7400884eff3d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:ea:62:6f:0e:90:1a:7f:7e:f6:b9:b8:5c:
b2:ae:ba:9d:31:e2:7c:17:4c:3c:2c:4d:fc:55:85:
7a:47:78:93:c8:07:40:ec:91:44:30:1a:7f:6c:99:
5c:c1:d3:a9:71:1c:1a:cc:f7:bb:e7:76:3d:15:0d:
db:97:29:25:2f:1a:74:17:86:28:f8:e0:6c:5f:d8:
1b:49:d0:b7:ec:84:d1:18:89:21:58:74:1d:11:ef:
6d:8c:2d:09:2c:4e:f6:69:12:3f:0d:cd:48:1d:53:
dc:84:d4:bc:11:ef:42:6a:18:42:67:6d:ff:d4:11:
6d:4f:d8:98:1d:40:35:16:f3:5f:89:64:ed:05:4d:
14:35:96:aa:35:2c:33:d7:da:9f:25:c3:c7:27:49:
c3:e3:23:5f:a4:48:93:af:df:18:85:64:19:21:48:
d6:ed:b8:cf:e7:18:76:e3:5b:1c:3c:79:a9:97:26:
e5:af:cb:10:fb:cf:79:b5:ff:b1:12:d2:ee:1d:48:
65:fb:52:b6:77:18:e6:9c:70:b4:b9:78:be:4f:84:
fb:a8:4f:d2:4a:e0:85:6e:75:88:de:0e:18:08:4a:
78:de:86:f9:04:d5:7c:90:b9:9e:bf:d2:1c:47:af:
84:52:4b:ba:88:5b:76:fc:20:b4:7a:d7:c4:56:8f:
e7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:03:8D:92:0D:7E:B1:5B:EE:DB:99:EB:4C:74:00:88:4E:FF:3D:57
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/8QONkg1-sVvu25nrTHQAiE7_PVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.96.0/24
46.36.104.0/24
46.36.107.0-46.36.110.255
Signature Algorithm: sha256WithRSAEncryption
44:d9:4e:f1:2c:00:39:f0:5c:31:25:d4:83:8c:7d:8a:61:a2:
69:6d:61:7a:2e:d8:5b:8a:cc:09:98:19:7d:75:be:67:44:2a:
99:d4:58:ab:d7:c5:9f:01:d7:97:e2:9d:aa:e8:11:2f:23:1a:
fa:75:44:c0:bf:41:87:df:ef:e6:0a:df:99:94:d8:c6:3c:8e:
13:54:1c:a4:7b:2a:e8:7f:f3:9e:e2:f8:64:df:85:b2:63:23:
fb:56:b6:9f:f0:e1:89:68:14:be:81:59:56:d3:a4:be:62:5f:
9e:54:55:35:d9:e1:d2:74:cc:e1:82:6e:94:9a:8e:ff:e7:9f:
7d:f0:37:a1:75:28:a3:3c:06:b0:dd:b8:0e:3b:af:f2:b5:9f:
4b:78:84:1b:5a:00:8b:0b:8d:fc:04:4c:79:19:68:36:79:1c:
44:6b:82:16:48:db:84:fb:8b:60:5d:1d:60:f2:f8:30:df:43:
9e:81:b4:e2:e5:bf:8c:01:61:b9:ba:bf:86:2d:20:87:65:c4:
cf:7b:f1:cc:3c:a2:9a:22:bb:2c:c2:53:fe:a0:e3:54:a3:98:
ec:60:cd:fa:e7:4d:8d:7e:f5:e1:51:9b:fa:5b:c7:94:cd:e2:
25:6d:86:c5:ca:a5:3d:62:f6:29:16:3f:a3:31:6e:6b:a1:a3:
5d:49:6c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:13 2025 by rpki-client on console.sobornost.net