Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/nk9GL_Yw8xLvqCVlRt7kMSN6hKg.roa
File: nk9GL_Yw8xLvqCVlRt7kMSN6hKg.roa (raw, json)
Hash identifier: d7NrHkoxSTH4uBK9bcQTGkFksGVN1RlVe0EfGcWaxc8=
Subject key identifier: 9E:4F:46:2F:F6:30:F3:12:EF:A8:25:65:46:DE:E4:31:23:7A:84:A8
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019427905998B6588CD0E0CE3D6B75CAD098
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/nk9GL_Yw8xLvqCVlRt7kMSN6hKg.roa
Signing time: Thu 02 Jan 2025 15:09:19 +0000
ROA not before: Thu 02 Jan 2025 15:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34918
IP address blocks: 46.38.148.0/24 maxlen: 24
212.16.71.0/24 maxlen: 24
212.80.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:90:59:98:b6:58:8c:d0:e0:ce:3d:6b:75:ca:d0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 2 15:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e4f462ff630f312efa8256546dee431237a84a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:37:38:a9:37:ec:06:41:ab:8d:15:0c:b3:54:
e8:e5:5b:cb:33:5f:aa:da:00:50:76:2d:ed:11:9c:
45:16:48:f4:ae:66:8a:1d:dd:ce:c1:7d:d9:f3:20:
7f:8c:d8:cc:f2:93:51:34:6e:e3:2f:66:b6:c6:88:
7d:69:d6:ce:72:62:70:d9:54:5b:f9:62:ff:9c:96:
7d:69:20:dc:d8:93:cf:6f:89:17:5c:ae:bf:09:fc:
fb:e0:19:7c:6d:e2:ee:29:5b:4d:05:34:fc:5c:aa:
63:cf:89:4f:c4:03:4b:b7:86:0b:b3:f5:e4:ad:50:
12:76:93:e8:92:e2:0a:42:d5:5c:90:bd:e4:71:4d:
f9:b3:de:64:84:26:91:6f:14:2e:56:f5:ac:3a:df:
6d:87:80:48:5c:ff:00:a2:c9:c6:00:79:76:e3:0c:
68:6f:39:75:d0:3d:65:04:b9:e3:0c:a9:d8:cf:87:
62:b2:b2:b9:74:03:e9:b9:ff:8c:9a:8c:30:51:4f:
b6:0d:7f:6d:49:31:d0:65:2d:c3:b6:c2:28:23:83:
12:02:5c:83:d9:73:86:d0:5c:4e:09:84:b4:a2:96:
cb:e3:17:39:58:74:2c:4c:fb:94:6b:8c:78:07:76:
26:9a:88:ee:ee:07:46:6e:3d:71:d7:f9:c8:96:5d:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4F:46:2F:F6:30:F3:12:EF:A8:25:65:46:DE:E4:31:23:7A:84:A8
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/nk9GL_Yw8xLvqCVlRt7kMSN6hKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.148.0/24
212.16.71.0/24
212.80.29.0/24
Signature Algorithm: sha256WithRSAEncryption
03:36:36:f1:67:e2:a3:8a:a8:db:aa:cc:1d:2e:aa:24:51:c1:
5f:1e:a1:a4:31:82:b4:c7:c1:c0:04:22:57:25:40:d1:d7:76:
17:ff:c6:50:3d:35:c4:ba:67:f9:8a:67:6a:84:d1:44:79:1f:
85:24:9e:66:0e:4e:53:00:90:a2:26:a5:07:cc:86:4a:d9:cb:
3e:05:06:d7:ae:14:1b:ee:dc:1f:d7:23:6d:eb:e3:b0:a2:e4:
61:9c:26:ee:9b:75:bd:27:65:97:af:50:f8:0b:97:62:6e:e7:
75:86:fa:44:98:ae:fa:19:b7:0c:72:1f:dc:3e:27:8e:cc:be:
4c:51:ec:83:f4:55:93:18:d3:26:a6:07:24:eb:27:92:e2:c7:
08:84:30:92:3f:7e:1d:97:0d:f7:03:e9:44:f1:be:b4:78:e1:
49:f4:a8:82:56:29:4c:6a:6d:6f:2f:e6:3c:7b:fe:bd:c9:c3:
c3:07:4e:79:5a:a5:63:0c:cc:be:55:6c:b5:5d:e3:59:71:e0:
fc:77:ef:b2:32:f7:80:5b:e8:df:99:66:b0:56:aa:ea:2a:c9:
58:56:3b:cf:ca:fe:5d:59:1b:5d:bc:3c:6d:0f:18:7d:a9:c7:
eb:08:4b:3d:7e:5f:65:25:a1:12:6a:7f:77:40:b3:9e:3f:cb:
c0:68:a3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:10:30 2025 by rpki-client on console.sobornost.net