Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/4CXaOWE7bCIHgvJ-O-13lJjR0RQ.roa
File: 4CXaOWE7bCIHgvJ-O-13lJjR0RQ.roa (raw, json)
Hash identifier: rbo/+MhSEiaustVyWcO7hHR/rz00PL3Z0Vq092G8r9I=
Subject key identifier: E0:25:DA:39:61:3B:6C:22:07:82:F2:7E:3B:ED:77:94:98:D1:D1:14
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 019425218C3A9567ABEB98556F1705CD6DDA
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/4CXaOWE7bCIHgvJ-O-13lJjR0RQ.roa
Signing time: Thu 02 Jan 2025 03:49:03 +0000
ROA not before: Thu 02 Jan 2025 03:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212804
IP address blocks: 46.252.0.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8c:3a:95:67:ab:eb:98:55:6f:17:05:cd:6d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Jan 2 03:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e025da39613b6c220782f27e3bed779498d1d114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:28:ae:35:ad:64:4f:f0:62:f7:4e:6a:bf:
5c:eb:4a:5e:78:61:63:e7:62:8f:26:52:24:54:77:
5f:c2:e2:df:3a:cb:5f:56:5f:0f:ac:c5:20:c2:d1:
d7:37:47:66:70:92:ad:c7:7d:cd:8e:e6:95:f3:3f:
c1:cd:f9:b2:15:6c:df:23:b8:01:43:b5:07:7a:0a:
c6:26:80:04:2e:ea:7d:47:c6:35:55:2c:59:d4:07:
37:c4:95:e7:3e:88:01:2f:01:75:44:60:8d:12:d1:
9c:44:99:b3:f9:e9:7a:10:20:0e:d5:44:a8:b4:63:
06:bc:40:27:40:7e:c0:d2:eb:f3:c2:f6:e9:2d:8c:
87:03:d1:b5:a6:94:f6:48:9f:d5:53:1f:1b:22:6b:
a2:20:d8:b3:0c:5b:8a:fb:8b:7b:51:94:1e:f8:62:
67:43:9b:92:a0:35:a4:f4:50:46:b0:fc:69:ed:c6:
0f:9b:ee:bd:19:c1:7d:87:40:c5:65:cf:73:99:6e:
39:76:c0:02:1d:b8:5c:f4:d9:6a:15:dc:a3:d1:9e:
25:07:e2:50:3c:cf:c1:5a:d7:33:23:f6:e3:ef:e9:
f9:d7:93:59:91:74:6b:2e:c2:69:59:1c:76:bb:81:
45:c8:e9:f7:77:67:15:fc:5d:74:95:1a:99:93:d4:
27:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:25:DA:39:61:3B:6C:22:07:82:F2:7E:3B:ED:77:94:98:D1:D1:14
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/4CXaOWE7bCIHgvJ-O-13lJjR0RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.0.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:f1:42:5b:f8:a8:56:c7:df:03:4d:3a:ad:f0:ca:85:b4:6c:
16:70:38:0b:2c:fa:a7:1c:df:0f:fe:6d:a1:b1:f8:08:6b:70:
84:26:0b:26:6e:bf:ce:18:3f:05:3c:04:b6:d7:f7:93:a1:0e:
86:db:aa:56:6b:a3:de:11:51:85:af:cc:74:15:4a:67:85:a8:
de:e2:ab:4c:66:7e:8d:52:13:4b:07:b1:b7:9c:85:d2:f2:eb:
d5:38:dc:42:f6:7d:c0:03:4b:89:d7:8d:7d:a9:b0:31:b4:05:
e6:a6:b7:9b:d5:b7:14:58:cd:45:a4:a8:36:de:66:f2:91:43:
80:dc:7e:ba:87:ea:a8:e1:14:8d:f9:35:30:51:8b:38:a9:0b:
48:c4:d9:da:a1:d7:c1:68:23:af:64:ab:52:b6:f1:42:79:00:
8e:e1:14:cd:e7:1c:48:ed:44:8b:0a:0c:16:64:91:23:69:31:
95:ed:2b:41:61:00:9a:7a:42:0f:3d:98:f0:73:16:7d:cb:8a:
4b:0c:47:bd:0c:26:f6:f6:82:27:61:66:1d:1c:85:83:20:00:
49:91:c0:eb:c6:f5:01:3f:b0:74:b6:98:fd:7f:32:5d:e1:cd:
0b:b2:f9:ae:cc:68:ed:f0:b7:ea:c3:15:ac:9e:52:81:83:61:
b9:6a:65:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 17:26:06 2025 by rpki-client on console.sobornost.net