Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/Vv1ze4oV_8jujUNihoptQXR-XLA.roa
File: Vv1ze4oV_8jujUNihoptQXR-XLA.roa (raw, json)
Hash identifier: L3WLtaibPG3x61zfWcu415AL/a1HwynhXMRR//VRus0=
Subject key identifier: 56:FD:73:7B:8A:15:FF:C8:EE:8D:43:62:86:8A:6D:41:74:7E:5C:B0
Certificate issuer: /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial: 0194228E0C74BBFEB29664BEE165D0438207
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/Vv1ze4oV_8jujUNihoptQXR-XLA.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24700
IP address blocks: 46.174.188.0/24 maxlen: 24
46.174.189.0/24 maxlen: 24
46.174.190.0/24 maxlen: 24
46.174.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0c:74:bb:fe:b2:96:64:be:e1:65:d0:43:82:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56fd737b8a15ffc8ee8d4362868a6d41747e5cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:65:0f:b3:d7:8c:60:19:db:a5:71:17:a1:
d8:23:77:88:97:f7:c4:cd:c0:61:bb:d0:9c:27:03:
75:f3:00:15:55:55:b8:c2:61:82:32:8e:8b:7b:3c:
6f:c2:f3:ab:61:13:73:1d:e8:16:48:76:63:6c:a1:
0c:41:71:85:8d:bf:88:0a:8b:31:66:f0:ff:67:ea:
f9:85:d7:fe:03:8c:3c:9e:ba:16:a8:6d:2a:23:00:
c6:ed:e2:45:c3:62:05:8f:01:53:7a:02:d9:a4:d8:
b2:47:21:78:ea:ee:44:ef:ec:8a:ac:d7:f7:d2:02:
1e:98:30:78:ce:68:40:0e:2c:cf:dc:c5:42:30:04:
cc:8b:d7:3b:a4:7d:f8:c1:d9:43:27:ca:20:ea:35:
7a:e9:dd:36:a6:34:91:65:68:0f:7e:bb:a9:5c:6a:
19:b2:74:76:80:d5:7d:22:bb:cf:7c:10:53:19:31:
fc:e1:37:71:5a:40:8b:1f:c1:c0:e3:ed:3b:ff:e4:
33:b9:c1:fd:3b:03:d3:25:d3:3f:28:a6:60:8b:c6:
35:8c:1f:89:17:9c:30:9c:f1:46:15:eb:e5:2f:23:
3b:7c:5c:af:10:33:32:85:cc:a0:18:b4:9c:64:55:
a9:25:0b:10:cc:84:21:de:aa:3a:17:61:ec:84:16:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FD:73:7B:8A:15:FF:C8:EE:8D:43:62:86:8A:6D:41:74:7E:5C:B0
X509v3 Authority Key Identifier:
keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/Vv1ze4oV_8jujUNihoptQXR-XLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.188.0/22
Signature Algorithm: sha256WithRSAEncryption
10:ff:94:68:a0:48:5c:37:35:e5:35:15:c9:04:da:f4:d0:b6:
44:3f:31:ea:b3:71:df:70:5a:23:e8:74:9a:ac:ae:75:cb:41:
f2:6e:0a:06:eb:c6:af:d1:59:d3:4f:58:07:29:0a:02:a4:e2:
36:a8:43:18:1a:86:c2:99:17:2b:09:49:a1:9f:14:3d:43:32:
4e:8c:6e:43:20:03:3b:81:e1:a7:62:51:c4:cf:8f:91:90:42:
e5:e7:0b:0b:e2:8f:57:07:a6:d9:01:e1:10:c1:d4:bb:94:9d:
19:d3:79:b8:f3:fc:98:3c:50:7a:b6:77:33:55:93:98:c1:01:
fd:65:2a:31:e2:de:ed:05:01:a1:43:de:74:cf:22:53:38:98:
cb:8a:d0:be:c0:fb:c8:8a:5b:4b:65:42:5c:1c:34:b1:54:6a:
d8:c8:61:4a:80:13:d8:99:fc:75:ab:e0:e2:f6:fc:90:d0:2a:
f5:74:5b:57:81:9f:ac:0e:e3:d8:45:ae:56:fa:cd:fe:51:7b:
f6:43:aa:70:2b:24:c5:4f:c7:02:d9:59:99:51:44:07:6e:0a:
12:ef:8e:dc:0e:15:af:ad:82:1b:ff:89:ff:9b:16:11:40:a4:
cd:c4:2d:c1:91:57:b1:ca:ed:ce:0d:ea:5e:14:0a:39:af:81:
da:c2:02:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net