Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/FxWyjGUTIC45dat-1Rxw3IG5Eak.roa
File: FxWyjGUTIC45dat-1Rxw3IG5Eak.roa (raw, json)
Hash identifier: VjQJokywMbR3ejkYBNWJHSZbR0fnNPmK9n+7WEsPRYs=
Subject key identifier: 17:15:B2:8C:65:13:20:2E:39:75:AB:7E:D5:1C:70:DC:81:B9:11:A9
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 0194221FA92F81B2A17311B5118E54FDBA61
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/FxWyjGUTIC45dat-1Rxw3IG5Eak.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197240
IP address blocks: 46.30.104.0/23 maxlen: 24
46.30.106.0/23 maxlen: 24
46.30.108.0/24 maxlen: 24
46.30.109.0/24 maxlen: 24
46.30.110.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a9:2f:81:b2:a1:73:11:b5:11:8e:54:fd:ba:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1715b28c6513202e3975ab7ed51c70dc81b911a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:8a:3a:e6:dc:cc:9b:fd:8f:67:93:5d:2d:
50:ee:6d:01:b3:ac:83:fc:04:63:5d:85:d8:5f:e6:
f2:6f:35:e9:ad:c6:8e:ad:5c:0a:de:58:28:73:49:
77:7c:ea:c5:1f:7f:c3:17:62:0c:f7:02:fc:59:b3:
62:61:bd:4c:a2:91:3c:be:09:20:24:c3:56:94:b7:
41:b6:5b:5e:4a:0f:66:42:a8:7b:7f:f4:56:e6:21:
2e:b2:15:cb:e1:4c:71:95:34:69:04:1e:e2:d3:0b:
6e:28:00:b6:e7:bd:a6:77:05:a5:b8:8f:36:91:bf:
33:1c:f0:c1:66:a7:46:da:1b:8a:67:30:f4:82:38:
52:28:fc:9f:86:10:31:1f:d1:60:48:c0:f3:43:db:
1f:ee:d7:2b:96:d6:1b:0a:ce:a9:6c:80:f1:7d:6c:
4d:31:97:69:c6:21:2f:69:ba:f9:68:6c:98:b7:a6:
57:fa:ca:d3:79:f3:8f:b6:ff:25:bc:ae:7f:a2:bf:
78:2e:10:64:8b:f4:e0:c2:4a:28:fd:2d:3d:50:bb:
db:20:c5:5c:db:df:2d:7f:8a:2d:52:bf:a1:8c:60:
70:31:af:be:fd:c8:25:73:93:c9:e3:5c:8c:07:f2:
e6:bc:c5:15:bd:ca:26:4a:70:86:cb:96:d9:b7:69:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:B2:8C:65:13:20:2E:39:75:AB:7E:D5:1C:70:DC:81:B9:11:A9
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/FxWyjGUTIC45dat-1Rxw3IG5Eak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.104.0/21
Signature Algorithm: sha256WithRSAEncryption
96:6a:53:71:40:a9:a3:5d:be:22:d6:de:f5:9a:02:dd:f4:79:
a4:2e:87:a4:80:4b:d4:ed:75:d4:08:75:b6:dc:35:de:ec:66:
a6:01:c7:18:a7:69:56:12:88:bb:b6:37:1d:73:9e:d6:a9:1e:
10:a6:7a:c7:18:7f:c0:bd:df:4c:85:7c:fa:41:a5:ef:76:0c:
00:f4:ce:58:84:66:b3:37:65:52:0f:e0:13:ba:e4:80:4c:4c:
59:88:b1:4a:c9:3f:db:7a:3b:dd:27:89:d5:be:cf:ce:f2:a0:
e6:54:47:98:27:b9:74:20:c7:52:37:b8:d6:ae:74:1f:10:91:
b9:8b:ed:4c:b0:26:5d:9f:19:d6:aa:5e:bc:92:65:dd:9b:c6:
4b:1d:94:e5:15:3f:0a:31:67:59:70:c5:31:04:04:ee:87:73:
cc:4f:31:59:30:e6:32:ab:21:c5:37:80:5d:20:7c:56:b5:a9:
30:3a:13:12:c6:20:66:f3:2e:0e:f6:07:0e:71:3f:44:37:26:
c8:9b:fc:ed:23:f1:eb:c4:e9:d6:50:7e:29:34:1c:4e:bc:26:
e3:15:ef:19:e2:0a:c1:cd:f0:76:da:42:20:db:56:43:50:ab:
b9:9d:76:f5:b7:d7:5d:7f:60:5a:47:4f:a5:77:a3:b4:a3:d9:
f2:3e:60:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:24 2025 by rpki-client on console.sobornost.net