Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/TUsdn5UyypZAySyIwD0122dO4hk.roa
File: TUsdn5UyypZAySyIwD0122dO4hk.roa (raw, json)
Hash identifier: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=
Subject key identifier: 4D:4B:1D:9F:95:32:CA:96:40:C9:2C:88:C0:3D:35:DB:67:4E:E2:19
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01959DEC646849A15907FA4089101476C0DC
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/TUsdn5UyypZAySyIwD0122dO4hk.roa
Signing time: Sun 16 Mar 2025 07:47:49 +0000
ROA not before: Sun 16 Mar 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210650
IP address blocks: 46.36.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9d:ec:64:68:49:a1:59:07:fa:40:89:10:14:76:c0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Mar 16 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d4b1d9f9532ca9640c92c88c03d35db674ee219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:52:0f:bc:e5:ef:2a:01:8f:92:23:4d:7d:
bf:54:18:17:c7:d1:d6:44:6e:02:37:bc:ac:12:53:
4b:cd:c7:df:0a:c7:e3:73:31:61:60:db:ac:38:c7:
2b:02:c2:9f:88:40:10:06:52:12:18:57:2f:45:e2:
ba:c7:35:3d:e4:27:d6:7a:c6:4d:fb:f3:07:e7:e5:
a5:ff:af:c0:6f:69:fe:1d:09:2b:d0:6f:fa:03:2a:
da:d9:08:01:8f:5e:23:66:e7:aa:ec:45:71:20:14:
b4:98:aa:14:fb:f6:28:1b:5e:82:62:31:58:a4:a2:
57:be:71:20:fe:19:93:58:fb:83:ff:bd:17:07:ae:
76:0f:1b:c6:2d:54:12:04:71:3b:e3:96:39:87:e2:
6d:ed:12:d9:ef:9b:0e:ca:9c:70:69:e4:8c:40:eb:
6f:be:b2:d5:a9:cd:1b:9a:88:b0:3d:c4:a3:91:c4:
16:4d:11:d1:ff:d9:52:24:67:8e:79:80:61:f6:d7:
68:e2:ae:0d:7c:38:dc:a0:62:63:68:49:34:fe:1e:
cb:91:f9:65:23:12:dd:fa:5e:60:b2:01:2c:59:99:
b5:ee:e6:e1:d7:ed:cf:fa:0f:85:10:7b:25:4a:8c:
7b:06:27:09:5c:66:8e:42:a6:c2:3a:4d:32:36:f0:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4B:1D:9F:95:32:CA:96:40:C9:2C:88:C0:3D:35:DB:67:4E:E2:19
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/TUsdn5UyypZAySyIwD0122dO4hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.111.0/24
Signature Algorithm: sha256WithRSAEncryption
29:49:e4:09:2c:3d:08:5b:10:3c:8f:2d:fa:25:19:f9:c4:5b:
4c:2f:11:46:92:05:92:a7:21:ce:cf:d5:a3:96:a1:cf:b7:9e:
00:f2:01:2a:d5:94:48:b0:eb:ae:15:0c:19:e7:6d:43:e3:4c:
ba:d1:2b:52:55:79:61:83:1b:a1:bb:fa:0d:14:8a:4c:b3:fb:
75:84:fe:b0:37:80:c2:f3:77:3c:5f:8b:bf:80:62:01:b5:ae:
38:a7:72:4f:55:1c:a1:60:3a:14:c7:3a:85:94:7d:fe:e1:af:
17:0a:46:18:04:bf:b0:75:53:f7:ad:52:cb:56:36:7c:43:9a:
06:17:ef:6b:a3:eb:0e:d4:72:35:29:90:d8:4f:26:a3:aa:5b:
a2:cc:8d:ea:88:57:a3:47:5e:c7:62:df:ca:f8:8f:03:e8:54:
a6:af:02:4b:40:bd:f2:68:a5:ca:3d:d3:3a:3c:02:d0:4a:84:
a9:5a:d5:f6:e5:0b:59:67:4c:2e:e6:fd:24:28:34:5f:8e:2e:
2a:1a:57:a6:04:0a:b2:f2:87:d4:7b:47:dd:4d:29:40:ce:85:
8f:44:1a:6b:95:be:4e:c5:b6:37:bc:d3:73:4a:28:80:b5:e0:
c2:83:39:b6:a6:41:1b:45:71:7c:8b:a4:5d:bb:a3:a1:de:e2:
19:f1:90:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:13 2025 by rpki-client on console.sobornost.net