Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/qoKgk8neCLLMajChHz0fftLejzg.roa
File: qoKgk8neCLLMajChHz0fftLejzg.roa (raw, json)
Hash identifier: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=
Subject key identifier: AA:82:A0:93:C9:DE:08:B2:CC:6A:30:A1:1F:3D:1F:7E:D2:DE:8F:38
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01959DD2C169DED1EA846A2187D687E27339
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/qoKgk8neCLLMajChHz0fftLejzg.roa
Signing time: Sun 16 Mar 2025 07:19:49 +0000
ROA not before: Sun 16 Mar 2025 07:19:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216205
IP address blocks: 46.36.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9d:d2:c1:69:de:d1:ea:84:6a:21:87:d6:87:e2:73:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Mar 16 07:19:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa82a093c9de08b2cc6a30a11f3d1f7ed2de8f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:c0:3f:09:b1:b4:02:94:e4:71:e5:18:44:
a6:53:ed:86:ee:e7:ff:ff:4f:a9:a1:8e:1f:83:88:
4b:3e:97:55:a0:f4:9c:63:51:12:09:4b:b3:e0:25:
c5:44:99:d1:56:25:ed:72:f7:31:64:41:3e:d1:20:
e0:22:b5:e7:8f:b2:7f:af:63:62:ad:46:c1:4b:3e:
89:22:7b:72:da:f9:02:50:50:e9:4c:59:8b:f7:03:
64:44:0b:c3:a7:4b:72:f7:a4:c7:14:3f:8a:70:56:
db:7f:91:4c:6f:05:e4:1b:b0:78:0a:4e:86:43:9f:
54:01:a7:42:6d:2f:79:03:32:73:ef:c0:67:0b:8d:
ed:53:ae:2e:78:52:28:f2:a6:b5:dd:9b:a3:bc:62:
4d:82:10:42:c7:e6:3e:8b:22:f6:55:e0:02:10:0f:
ef:08:ad:a0:46:d2:32:cc:c2:55:82:44:1a:01:14:
5c:39:30:ea:18:c5:e6:fa:da:0a:c8:19:27:a0:59:
bb:cc:ad:4c:9d:ed:cc:6b:37:f2:a0:82:fb:00:c9:
d5:44:04:5e:a6:20:ad:9c:22:a6:73:19:3e:e5:2e:
63:7c:f0:b9:b8:e7:94:a5:e4:24:f8:c1:e3:26:d7:
b7:1a:ea:f8:ff:2c:63:19:4d:0b:7d:da:e2:32:d8:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:82:A0:93:C9:DE:08:B2:CC:6A:30:A1:1F:3D:1F:7E:D2:DE:8F:38
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/qoKgk8neCLLMajChHz0fftLejzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a0:39:7b:38:20:e6:3e:8d:00:f8:a5:29:bf:5a:be:9d:5d:
e0:d6:57:4c:b8:e5:0e:a3:ce:66:23:f0:bd:fd:6d:2c:e3:ba:
eb:90:9f:9a:53:ce:f9:ac:29:26:9e:fd:01:af:b5:0c:45:63:
13:2c:f0:b1:32:85:0f:2f:ad:55:db:81:ea:88:b2:b5:61:13:
8f:b8:58:66:d1:a7:6e:99:d1:2f:ba:3f:27:64:e3:cd:0a:ce:
ce:ed:39:a1:03:b3:53:62:3e:dd:80:a7:96:31:be:b2:5e:74:
55:49:ca:74:e7:f1:f0:9d:0f:47:8b:3b:8f:74:5d:4e:cf:c9:
78:90:0e:f6:32:16:40:ca:3f:92:b8:68:90:be:66:e7:d1:08:
b5:73:d9:3a:ce:aa:6c:ea:58:69:3b:79:b8:07:1b:32:e3:4f:
ff:43:3e:93:35:e7:bf:f0:32:fc:cf:24:a0:a4:f4:cc:cd:e1:
9f:06:60:5b:5e:9c:d5:4d:c7:c4:d5:be:ce:6b:9a:34:e1:7a:
9f:d0:a0:57:da:c5:ce:b0:d1:ed:10:2f:28:21:de:42:16:a6:
ed:aa:91:10:a5:c8:d1:f9:aa:f1:8d:27:cc:4f:f6:47:d9:34:
31:13:f4:fe:58:3d:2b:b2:65:b4:5a:73:89:ec:fb:8d:83:8c:
7c:27:e7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:13 2025 by rpki-client on console.sobornost.net