Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/6MYFp39ARHMq2YJE5lHJSxTEL30.roa
File: 6MYFp39ARHMq2YJE5lHJSxTEL30.roa (raw, json)
Hash identifier: 5gVWBuoSK8Y4bSXsVg//9ioaebm5O8SmIGV4l8p9YZY=
Subject key identifier: E8:C6:05:A7:7F:40:44:73:2A:D9:82:44:E6:51:C9:4B:14:C4:2F:7D
Certificate issuer: /CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Certificate serial: 01941FFAA264A49EF3B3D27DD58B05B8BBE6
Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/6MYFp39ARHMq2YJE5lHJSxTEL30.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48608
IP address blocks: 46.34.96.0/19 maxlen: 19
46.34.96.0/20 maxlen: 20
46.34.96.0/21 maxlen: 21
46.34.104.0/21 maxlen: 21
46.34.112.0/20 maxlen: 20
46.34.112.0/21 maxlen: 21
46.34.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a2:64:a4:9e:f3:b3:d2:7d:d5:8b:05:b8:bb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8c605a77f4044732ad98244e651c94b14c42f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f4:bc:73:3b:b3:69:c8:a9:f3:a6:79:48:71:
05:74:7b:cc:ed:72:0b:19:bc:99:b7:23:c8:df:34:
7b:82:77:40:80:65:e1:5c:41:5a:cf:4e:4f:c8:29:
f4:36:02:8c:b0:20:7b:ed:ee:4d:5e:f4:bb:04:76:
a3:5c:a3:93:82:c7:81:2f:79:ef:fc:d5:3a:90:90:
9d:76:d1:87:eb:32:cd:9e:e8:a0:ca:a7:64:ee:6e:
5e:39:d0:c1:42:6d:a0:40:01:d3:d2:b6:2a:a4:00:
9d:3a:70:60:54:1a:4e:34:e9:3d:fa:e9:09:9a:07:
eb:c5:88:dd:f1:5a:7b:5d:24:b6:eb:29:69:5f:83:
51:55:3e:19:91:a9:af:d1:5a:e7:b5:c9:99:46:e0:
43:9d:90:f0:fd:ee:b9:b3:50:fc:6e:50:9a:dc:8b:
70:9c:0a:bd:a6:0c:3e:b8:e3:0a:58:11:5a:ab:0f:
9e:aa:a1:8b:d8:4a:93:70:25:b6:fb:4d:ca:aa:0c:
ba:22:db:40:c4:9e:bc:46:ea:33:66:60:0f:ca:c3:
e2:1b:b5:59:d9:63:d5:43:c5:84:12:e9:fc:93:e8:
81:ed:f2:e5:5b:17:f2:16:59:77:09:53:3a:78:ef:
d3:73:c3:68:a8:8d:82:12:9d:8f:87:a5:a8:63:1d:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C6:05:A7:7F:40:44:73:2A:D9:82:44:E6:51:C9:4B:14:C4:2F:7D
X509v3 Authority Key Identifier:
keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/6MYFp39ARHMq2YJE5lHJSxTEL30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.96.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:dd:e9:a4:77:97:02:85:98:02:aa:e8:76:9e:1c:8d:69:e1:
83:f8:3f:44:45:96:a6:e5:b3:1c:56:ae:fb:38:a4:04:5c:5b:
66:4e:9e:c8:be:42:ca:ee:40:07:b7:31:f4:8d:65:6a:b6:42:
a8:0b:2d:9f:53:b1:b6:1e:f5:f5:0d:e3:12:d8:49:97:e8:b5:
eb:e3:34:c9:74:23:a5:71:87:ce:58:92:83:09:7a:a0:83:9c:
93:97:00:da:68:55:29:34:12:79:28:fa:c7:5c:fc:be:5a:6f:
89:0d:e8:80:d7:88:0d:55:cb:30:3e:9a:f0:fb:47:bb:a1:66:
cd:f8:71:b1:b4:48:ee:64:50:31:72:03:d3:06:32:65:bc:1e:
fc:bb:e8:89:9e:61:73:50:87:d4:f4:5c:fc:d9:54:5b:e1:f3:
f5:6e:bf:6f:98:f5:12:b1:43:12:59:3b:5f:2b:71:f7:3d:98:
93:fe:57:df:a0:d8:e7:56:e0:2c:4e:4b:ca:e4:d9:b0:a2:70:
24:63:71:06:00:8b:4b:b5:5e:95:b3:8a:9b:b2:05:ee:49:67:
66:f0:89:e8:1d:bb:4c:15:75:78:30:d6:2a:05:71:bd:fc:c0:
cb:b1:10:5d:dd:6d:c9:36:12:79:09:09:ea:c6:c5:ed:9a:63:
6f:69:6b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net