Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/vSdatVQs0601qTINAZOSvBKTvqI.roa
File: vSdatVQs0601qTINAZOSvBKTvqI.roa (raw, json)
Hash identifier: J4sc3fJ3ayPM9GpaLds0smNkt4N6lvQ+RxikjlgB/Sc=
Subject key identifier: BD:27:5A:B5:54:2C:D3:AD:35:A9:32:0D:01:93:92:BC:12:93:BE:A2
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0195F0B6D8D793A0D8BE9DC162909C494345
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/vSdatVQs0601qTINAZOSvBKTvqI.roa
Signing time: Tue 01 Apr 2025 09:37:49 +0000
ROA not before: Tue 01 Apr 2025 09:37:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29182
IP address blocks: 46.38.152.0/24 maxlen: 24
185.24.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:b6:d8:d7:93:a0:d8:be:9d:c1:62:90:9c:49:43:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 1 09:37:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd275ab5542cd3ad35a9320d019392bc1293bea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:41:3d:f4:e0:b7:16:f2:42:fe:44:fc:2d:
85:cd:0e:bb:e5:62:bd:91:88:95:7a:f7:f7:a2:cc:
47:46:f5:6f:7e:56:74:c8:af:6f:7b:ab:8e:21:38:
df:f1:d1:07:37:c0:57:2c:38:6d:3d:12:93:e9:1f:
30:f4:d5:7c:b4:3c:a7:68:24:98:c7:0b:7a:09:b8:
db:07:05:2f:ee:fb:0b:0d:f5:8c:31:75:42:31:39:
96:5e:5e:a4:a6:83:0e:d4:d9:40:fc:25:fa:3a:82:
8b:20:a7:5c:dc:8c:32:77:0d:dd:20:d7:de:8f:7b:
c6:e6:91:29:f6:7d:b3:48:15:1e:b9:2a:41:8b:f5:
7d:95:5a:7e:c9:20:a6:43:e1:4c:2d:c1:45:9b:f1:
ec:20:23:68:01:3c:e1:cc:0c:b1:50:d2:04:01:88:
33:d5:df:f4:c7:90:0c:f6:55:32:35:66:47:30:a5:
b8:2d:b6:6c:c1:6d:a0:3d:73:d4:dc:d6:86:16:95:
dc:c7:bd:9b:60:29:10:05:e5:74:7c:23:a8:90:c5:
bb:6f:d8:3d:98:ef:70:73:f6:15:e5:0e:a1:d0:31:
9a:7c:7e:06:87:58:63:f6:67:de:c9:6f:fb:e4:68:
06:78:c4:f4:a5:d4:41:3a:2f:a8:f9:4a:88:ba:a4:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:27:5A:B5:54:2C:D3:AD:35:A9:32:0D:01:93:92:BC:12:93:BE:A2
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/vSdatVQs0601qTINAZOSvBKTvqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.152.0/24
185.24.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ec:1e:c7:6f:b8:ba:c9:13:6f:b8:87:a9:d4:22:74:53:df:
03:cc:62:43:83:11:df:7e:14:28:c6:ff:01:25:b2:92:b7:de:
c8:b1:3f:a5:f8:5d:06:b0:1a:73:4b:43:32:1e:d5:ef:51:e2:
4c:4b:ac:b6:56:b3:cd:60:a2:75:8d:9f:6d:6e:ed:07:1b:da:
9e:05:22:0c:0c:22:6a:fc:be:cb:53:17:23:54:6d:da:7e:fc:
06:f9:d3:f8:79:60:f4:21:02:4a:ca:bf:8e:38:99:c3:cb:2d:
c8:02:9f:ec:63:9f:88:8a:d7:ce:c1:20:42:e8:b2:1e:e4:f1:
fb:8c:b3:df:6b:26:c0:32:f8:64:20:28:30:44:21:c7:c4:c3:
e7:57:69:fb:ba:4d:62:6b:b5:f4:6e:b9:ae:db:06:13:5b:27:
e5:8b:ed:f0:64:67:e5:17:21:f9:95:38:6a:93:a9:05:62:21:
60:2f:80:c3:c7:a9:d3:72:3f:b8:38:14:41:23:59:85:17:15:
13:35:64:28:ef:99:bf:f2:17:16:d5:ba:35:63:5c:97:7b:e1:
52:18:96:cb:98:65:d5:b7:a1:7c:04:15:53:30:16:92:df:a8:
44:5d:17:28:5e:4b:d3:a4:fe:8a:1f:5e:a3:e9:38:62:a2:65:
53:fe:39:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:34 2025 by rpki-client on console.sobornost.net