Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/9v9Q_Fmja6A4j05Iq2gqjq-M5SU.roa
File: 9v9Q_Fmja6A4j05Iq2gqjq-M5SU.roa (raw, json)
Hash identifier: dwGW9bQGrIwde0X9cgDKraqOU1dqhmtlu0v0gQZgV1Y=
Subject key identifier: F6:FF:50:FC:59:A3:6B:A0:38:8F:4E:48:AB:68:2A:8E:AF:8C:E5:25
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0196254A2C3CBDA1C8E124FC579F025788F0
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/9v9Q_Fmja6A4j05Iq2gqjq-M5SU.roa
Signing time: Fri 11 Apr 2025 14:39:00 +0000
ROA not before: Fri 11 Apr 2025 14:39:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207952
IP address blocks: 46.8.104.0/24 maxlen: 24
109.248.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:25:4a:2c:3c:bd:a1:c8:e1:24:fc:57:9f:02:57:88:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Apr 11 14:39:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6ff50fc59a36ba0388f4e48ab682a8eaf8ce525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:f1:9e:28:28:dc:bc:f3:b7:06:89:d7:4a:
9b:e0:65:de:fb:95:7a:59:66:44:c9:05:b2:73:21:
39:3c:70:31:c4:15:ea:8f:5d:63:37:0d:73:1e:18:
a7:65:92:07:26:54:b0:8d:88:a7:d5:d0:3e:05:70:
e8:de:83:bf:e1:99:ac:b9:b4:df:41:4f:cc:07:a1:
5c:ea:e8:9e:c1:39:21:80:78:81:fc:c2:0b:d3:25:
b3:15:94:15:19:c5:5f:ff:af:59:dc:b6:49:df:6b:
19:b5:b6:33:41:d6:bf:14:c6:42:d7:87:0f:d5:c7:
74:aa:cb:f3:90:b6:b8:03:6d:12:1d:92:43:ec:5f:
9c:cd:f6:02:94:d9:5c:d2:5f:78:c4:ef:e5:85:d9:
92:32:f5:d1:7a:a1:8d:3f:8f:7d:b8:a8:c4:3f:76:
e9:0d:87:b8:ca:37:75:83:c8:2e:61:d7:a0:e0:ef:
ff:ae:c2:fe:98:f7:6e:6b:4e:df:61:09:30:52:37:
a9:18:76:75:43:8b:1a:7c:8b:2e:42:b8:99:89:eb:
59:ab:bc:7a:f7:a6:59:2b:14:d0:9a:69:5f:ed:74:
4f:13:c1:5b:f8:73:b6:24:bb:41:85:7d:1f:7f:a0:
b1:6e:8a:e2:14:a5:db:05:d4:b6:f5:c1:6b:22:86:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FF:50:FC:59:A3:6B:A0:38:8F:4E:48:AB:68:2A:8E:AF:8C:E5:25
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/9v9Q_Fmja6A4j05Iq2gqjq-M5SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.104.0/24
109.248.57.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3b:15:9b:53:71:f4:eb:be:55:00:48:78:fe:0f:4f:88:89:
3c:57:f5:9c:1a:52:85:74:0e:bc:a2:95:db:a7:46:81:1a:c5:
98:b0:ef:3d:f4:21:c3:f1:53:59:d7:f2:9c:65:6c:83:b7:ef:
ca:23:28:29:aa:d9:e2:1c:57:00:8a:c1:67:cc:c2:6a:17:5e:
35:c5:58:ab:a7:f7:39:22:99:6c:38:a7:aa:7d:90:00:32:08:
d5:53:ce:28:80:01:f6:1f:92:ba:d4:30:b8:54:37:94:29:bd:
20:39:cf:9c:8a:30:f0:87:fa:ef:bd:67:e3:41:44:f2:c1:af:
07:55:b0:76:8c:4c:5f:7e:1a:2d:35:7e:17:40:43:9f:ca:c8:
8d:76:5b:fb:83:c0:47:40:2e:91:99:a6:26:f9:1a:8e:72:31:
85:f5:29:70:6a:13:9f:0a:36:39:f0:70:d2:94:90:ea:46:93:
62:da:58:91:8c:62:44:74:f8:1d:cf:01:ab:7b:62:85:bd:80:
1a:b2:86:ce:dd:c7:15:c9:2d:e6:87:06:b1:41:15:26:57:83:
b7:9c:2e:01:f8:d8:1f:4c:89:c9:45:9b:2a:64:6a:14:71:82:
a5:73:89:92:6e:96:3d:68:f9:ba:6e:36:26:ec:41:20:75:b3:
67:04:2c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:41 2025 by rpki-client on console.sobornost.net