Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6ESq8dBPBefUAGRIDCe0mFlXuV4.roa
File: 6ESq8dBPBefUAGRIDCe0mFlXuV4.roa (raw, json)
Hash identifier: N+XYoQVLpKeVJMDKO49PqQYFn2moZcTnmQxLiBCQOpQ=
Subject key identifier: E8:44:AA:F1:D0:4F:05:E7:D4:00:64:48:0C:27:B4:98:59:57:B9:5E
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0194221FFD94473FA53A00A689B160704E1D
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6ESq8dBPBefUAGRIDCe0mFlXuV4.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 46.38.146.0/24 maxlen: 24
46.38.147.0/24 maxlen: 24
46.38.149.0/24 maxlen: 24
109.94.165.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fd:94:47:3f:a5:3a:00:a6:89:b1:60:70:4e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e844aaf1d04f05e7d40064480c27b4985957b95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:1e:9d:78:e3:d2:d4:ee:1e:79:44:bc:e1:
18:c9:b3:10:c8:c0:71:37:f0:4e:42:f3:72:2f:a5:
30:73:1e:e3:98:c5:a6:78:19:a4:a9:56:83:77:03:
da:15:23:b4:79:93:36:06:41:67:d0:72:3e:18:cd:
be:ff:c5:44:14:64:35:ca:85:fe:2d:3c:12:be:80:
38:93:bb:49:d6:df:85:d6:40:63:01:d6:fe:38:e2:
6d:79:7d:7d:33:12:fb:35:ce:75:86:e0:ac:fb:60:
f8:7e:bd:cc:d6:56:cb:92:ac:dd:19:c5:b3:f7:22:
4c:35:15:2f:e1:6d:53:a5:07:c7:98:93:ee:30:3a:
c0:6a:1c:90:ec:5e:82:3c:16:e6:06:83:5c:3e:28:
48:9c:3a:f0:b0:50:b6:ca:5b:54:61:09:85:b9:0a:
23:d9:ad:6b:b2:70:67:4a:6d:bb:5d:e7:1e:ea:d4:
21:14:6b:d9:37:51:f5:0a:07:07:00:ed:db:3b:96:
b0:e2:77:8d:ca:de:3f:f3:49:74:10:9d:96:44:f2:
0e:2c:a1:9a:37:7e:90:f7:87:f3:85:6a:15:d5:3c:
30:33:ce:a5:66:8b:bb:5c:84:56:4b:eb:34:1a:bf:
a8:ff:34:e7:ff:a3:0e:87:f3:35:41:a6:f9:15:66:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:44:AA:F1:D0:4F:05:E7:D4:00:64:48:0C:27:B4:98:59:57:B9:5E
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6ESq8dBPBefUAGRIDCe0mFlXuV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.146.0/23
46.38.149.0/24
109.94.165.0/24
185.29.223.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:51:cc:3c:22:6d:97:c2:3e:1e:81:53:6c:fe:57:83:ad:1a:
93:12:ef:32:78:c4:de:4a:e4:14:68:5a:8c:9f:8b:2d:c0:b0:
44:1c:14:41:34:fb:eb:51:62:db:b5:a3:e4:5a:62:b8:7e:36:
47:14:90:a8:7b:d7:60:3f:96:83:96:0f:2d:e7:e3:59:9a:c4:
c2:0c:f8:da:eb:b5:f2:9f:3c:59:61:82:04:26:58:e9:9c:de:
a1:f6:85:a5:41:6b:2f:6b:b8:41:9e:99:e2:5e:42:fe:6e:40:
ac:0b:7e:fd:76:68:33:1c:6d:65:dc:b9:71:1b:b6:be:03:15:
99:16:b1:da:62:ea:6b:98:d1:12:3e:4c:01:89:4f:57:e6:18:
e9:a2:8f:66:b9:86:2b:92:b2:60:ba:97:ff:5d:47:05:1e:35:
89:b5:64:d7:f6:ae:b6:2c:04:a0:1b:2a:97:81:e0:d0:4d:2e:
a8:c1:ef:d8:30:9e:94:49:2d:d2:6e:af:2e:60:b5:4c:9e:03:
a8:69:26:e9:bc:61:6a:47:55:b4:4a:ec:69:99:fe:9b:8b:b9:
a2:49:46:b9:19:d6:1b:1a:50:8c:c6:8c:88:d3:54:c6:02:d4:
f5:ae:33:21:56:85:5f:6d:14:6e:78:b2:ed:01:e6:e1:41:c2:
1c:d3:ce:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:10:24 2025 by rpki-client on console.sobornost.net