Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/xJ-H39IOSB6XadrNN4evmOK-Bm8.roa
File: xJ-H39IOSB6XadrNN4evmOK-Bm8.roa (raw, json)
Hash identifier: 4175v9gOZ3L5ywBtB3+A8R3L8qZZ5FxiHwK6cbdkSKI=
Subject key identifier: C4:9F:87:DF:D2:0E:48:1E:97:69:DA:CD:37:87:AF:98:E2:BE:06:6F
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 0194252149493B862792085E028026381DAB
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/xJ-H39IOSB6XadrNN4evmOK-Bm8.roa
Signing time: Thu 02 Jan 2025 03:48:45 +0000
ROA not before: Thu 02 Jan 2025 03:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197988
IP address blocks: 46.28.200.0/21 maxlen: 24
95.183.48.0/20 maxlen: 20
95.183.58.0/24 maxlen: 24
2a0c:2240::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:49:49:3b:86:27:92:08:5e:02:80:26:38:1d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Jan 2 03:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c49f87dfd20e481e9769dacd3787af98e2be066f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:72:66:31:79:3b:a5:67:81:eb:39:b6:de:
a0:42:d4:7d:0e:88:94:4c:51:75:7c:1b:27:7d:ee:
8a:b0:01:40:2b:36:d0:21:f5:ee:1a:a5:94:72:98:
5a:31:9a:88:8d:50:57:f6:dc:38:45:38:ac:02:6a:
3a:55:af:db:e7:6f:af:bf:1b:cd:cb:34:0f:35:29:
7a:dd:7f:73:bc:78:96:74:43:d0:a4:fa:e1:ef:00:
bd:3e:12:df:da:bc:af:12:cc:28:a0:9b:10:3a:4d:
43:66:68:6f:c6:6a:72:20:dd:b5:5c:fa:39:70:73:
0e:64:05:87:61:6b:fe:f6:12:e7:4c:e5:7c:8f:f0:
43:71:de:f2:a3:68:e6:cb:56:b2:47:6c:cd:5c:15:
d8:3d:4a:12:24:14:e1:b8:e0:b9:b9:9c:92:98:27:
09:ce:42:ec:88:de:d4:94:70:29:5b:fc:2c:fb:e4:
bc:2d:16:ca:c5:0b:68:59:d6:e9:87:16:94:3e:ce:
8e:ed:83:1f:32:37:9c:59:93:b6:54:11:47:8b:89:
fd:93:66:45:8a:e7:3f:6f:4e:c1:32:fe:44:87:b5:
73:d7:a9:da:51:69:7f:9f:7f:a4:8b:a2:d8:55:42:
30:fe:6e:2f:b8:cc:4a:13:bd:e6:a7:06:5d:60:eb:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9F:87:DF:D2:0E:48:1E:97:69:DA:CD:37:87:AF:98:E2:BE:06:6F
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/xJ-H39IOSB6XadrNN4evmOK-Bm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.200.0/21
95.183.48.0/20
IPv6:
2a0c:2240::/48
Signature Algorithm: sha256WithRSAEncryption
47:30:07:d1:d5:ac:67:3a:62:9f:de:f2:f7:d6:6d:a9:5f:f0:
a1:62:d8:a3:46:00:32:2c:81:0e:7f:0c:38:ef:52:89:8e:c6:
b7:19:0d:e5:66:b1:5e:cd:6a:b8:78:c4:82:a9:e6:13:7a:61:
b4:5d:f1:0c:8c:ef:c8:76:c7:f6:c4:d2:2f:8c:8f:fd:20:c6:
bb:77:cd:5e:7a:d9:37:89:08:c4:fd:be:30:20:a5:9d:9d:f0:
f5:68:01:fc:79:90:09:1d:44:68:b0:3c:c3:da:36:a6:18:cb:
db:50:d8:c9:0e:e1:61:07:30:af:17:fd:c5:11:a4:95:92:5c:
e6:87:da:41:2f:fa:f9:a2:1e:fc:38:fe:2d:21:4e:42:ae:f0:
d1:f8:e6:75:42:54:58:a2:01:b8:38:2e:66:2e:81:03:6c:8e:
54:0a:e2:d9:a4:03:e7:ad:65:90:37:5c:61:d4:df:50:b4:2b:
66:76:e8:bb:bb:d1:d5:12:1d:a8:d5:d0:ff:e4:a2:d6:30:32:
ea:e4:48:cb:f1:55:26:0e:b0:86:79:9c:4f:2f:3c:5b:1a:52:
90:3a:53:88:1f:23:39:82:74:31:48:ad:4b:1b:6b:a9:24:03:
76:c6:d6:0a:60:02:a9:2d:03:23:f0:4c:74:9a:4e:2e:b4:5e:
12:a6:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net