Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/iO6yZ5D7of0MFaqogZYemiuZ76w.roa
File: iO6yZ5D7of0MFaqogZYemiuZ76w.roa (raw, json)
Hash identifier: PHTDVbEdKwH0LDJ7ITv8L3fxTqXrLT8N8JGzjDrPDFE=
Subject key identifier: 88:EE:B2:67:90:FB:A1:FD:0C:15:AA:A8:81:96:1E:9A:2B:99:EF:AC
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 0195F5A1B2DCD06E14DD3D963F461428B086
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/iO6yZ5D7of0MFaqogZYemiuZ76w.roa
Signing time: Wed 02 Apr 2025 08:32:49 +0000
ROA not before: Wed 02 Apr 2025 08:32:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206774
IP address blocks: 46.252.0.0/24 maxlen: 24
46.252.1.0/24 maxlen: 24
46.252.3.0/24 maxlen: 24
46.252.4.0/24 maxlen: 24
46.252.5.0/24 maxlen: 24
46.252.7.0/24 maxlen: 24
46.252.8.0/24 maxlen: 24
46.252.9.0/24 maxlen: 24
46.252.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:a1:b2:dc:d0:6e:14:dd:3d:96:3f:46:14:28:b0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Apr 2 08:32:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88eeb26790fba1fd0c15aaa881961e9a2b99efac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:94:33:e0:3d:4a:7c:36:be:da:76:0a:86:
db:60:b0:93:e0:10:68:c1:2d:36:bc:f9:6d:36:f6:
3b:fe:6e:31:93:f6:02:4b:6d:3d:55:68:f2:1d:ff:
a2:97:c2:88:51:df:b1:aa:30:ff:8d:e7:c1:84:51:
a3:ca:3e:87:12:2d:f5:d2:5c:c0:5f:cd:96:ad:af:
0e:23:9a:2f:07:a8:e3:96:2f:96:58:f9:a8:d8:57:
0c:bd:c2:af:cc:5c:9f:35:d5:82:63:63:58:a1:81:
ce:ce:a6:df:5c:5a:38:fd:8a:3b:39:f8:9b:11:83:
cd:53:92:3d:fc:8a:9a:28:2f:2f:31:0e:28:a4:ee:
7e:b6:46:01:bf:fa:85:8f:0e:cb:3d:e3:83:c7:b6:
06:c1:4e:61:39:2b:87:67:66:ef:36:56:b2:a4:e4:
4e:5b:ef:9d:d7:e8:be:4c:e2:bf:6a:55:ae:d1:f1:
3b:ca:50:7f:1c:73:42:11:ca:cc:db:22:28:da:96:
1d:a5:a7:2f:f0:55:61:cd:57:b4:49:a4:b5:8d:3f:
1d:79:e9:cb:d0:cf:30:86:ea:03:90:ee:98:de:49:
a1:40:73:13:5a:33:2a:cc:ac:e0:0b:68:e8:42:4a:
74:f3:3c:1c:bc:98:5f:39:87:55:92:28:18:f0:31:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EE:B2:67:90:FB:A1:FD:0C:15:AA:A8:81:96:1E:9A:2B:99:EF:AC
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/iO6yZ5D7of0MFaqogZYemiuZ76w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.0.0/23
46.252.3.0-46.252.5.255
46.252.7.0-46.252.10.255
Signature Algorithm: sha256WithRSAEncryption
0f:c5:cf:71:88:b0:a1:4c:83:53:68:2a:22:46:4d:33:af:98:
e4:74:c8:25:51:3d:6b:67:d7:4d:47:25:78:e6:b9:5f:30:23:
01:36:ce:66:dd:8e:f5:0e:67:7f:fe:e7:a3:93:76:7d:44:1b:
c2:03:c8:53:85:b5:d8:9b:be:b1:c7:45:8c:a2:9a:99:47:f4:
3c:d2:54:6c:05:ef:fc:17:a1:0c:9f:df:f2:6d:ec:f7:38:1b:
7c:37:53:78:a4:70:92:3e:66:ae:f8:e5:f4:5f:32:ef:9d:83:
62:15:40:ea:fd:59:eb:21:c2:ac:47:04:26:25:20:e5:e2:99:
a9:fc:3f:04:15:f2:cc:03:44:4f:96:75:a2:85:cf:e7:24:1f:
fc:cb:83:49:f4:ac:00:35:5b:54:01:d9:c4:4e:c5:1e:2f:8c:
50:a6:9d:4c:40:30:10:a9:d4:59:1b:ad:e4:d1:54:28:e3:c5:
ef:67:5f:ff:48:2b:09:34:d4:21:40:43:fb:52:c2:59:d6:47:
b2:0f:8f:6d:ad:aa:57:7b:06:ae:e5:5c:9a:d7:25:42:1b:d6:
b8:c3:d4:16:45:d5:bd:86:eb:32:7a:67:67:75:76:e4:68:f1:
56:a0:d1:32:85:83:33:c0:09:dc:1d:22:0c:89:c8:48:1a:d3:
e7:9f:48:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net