Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/xPN9YjQh6cWbiBVSRMvIJ-yRdfQ.roa
File: xPN9YjQh6cWbiBVSRMvIJ-yRdfQ.roa (raw, json)
Hash identifier: NF3FvBakkmVr+pBAEq+awbP4Tn7Z+Cmnixhp8Jn6OBo=
Subject key identifier: C4:F3:7D:62:34:21:E9:C5:9B:88:15:52:44:CB:C8:27:EC:91:75:F4
Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial: 019421443D7F2432A8932330172086092EF6
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/xPN9YjQh6cWbiBVSRMvIJ-yRdfQ.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47254
IP address blocks: 46.30.219.0/24 maxlen: 24
46.30.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3d:7f:24:32:a8:93:23:30:17:20:86:09:2e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4f37d623421e9c59b88155244cbc827ec9175f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:e5:ec:05:20:f5:9b:36:4e:57:e5:68:42:
53:c2:3b:99:df:11:0a:11:19:b9:45:ea:e0:bf:67:
32:1f:9c:b8:51:36:6d:9e:50:ad:f6:b5:25:07:87:
c6:14:5b:71:96:d5:8d:61:0f:d5:f6:a5:a4:bb:07:
46:18:e2:83:59:9d:08:1d:c2:2b:e0:f1:8c:49:13:
5c:ab:f5:fa:be:39:49:98:c6:e8:61:93:f5:67:bd:
06:88:28:32:b2:37:76:07:bb:b9:b6:6d:34:66:95:
19:6e:b5:a6:4e:eb:17:3c:f8:f9:ed:e2:8c:ac:d4:
71:a9:5f:ab:fd:f2:86:ba:bc:31:3c:15:a3:df:b7:
11:6d:02:4e:d9:a3:64:33:8d:cf:b9:3d:a4:f7:1f:
5d:97:3b:23:ca:23:5c:6b:80:0d:27:db:e5:9c:45:
87:f5:b6:53:b1:32:71:16:6c:23:40:0c:fa:42:2a:
7b:91:8f:1c:71:b6:2d:02:7d:81:35:2c:f7:56:93:
dc:7e:a7:c4:5e:23:b3:20:8a:59:a1:2e:25:74:2e:
d3:d9:5b:4d:57:58:76:82:65:16:68:b5:b5:3c:6a:
5d:19:bf:cf:6c:f9:a2:ea:e2:02:12:0e:e2:38:2b:
df:1c:aa:7c:d9:fd:49:10:ca:3c:b6:f1:14:10:0d:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F3:7D:62:34:21:E9:C5:9B:88:15:52:44:CB:C8:27:EC:91:75:F4
X509v3 Authority Key Identifier:
keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/xPN9YjQh6cWbiBVSRMvIJ-yRdfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.219.0/24
46.30.221.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d7:a0:21:e5:b1:5e:44:ba:68:bf:2c:3e:22:77:b3:3d:f2:
da:88:f2:7c:0e:03:5b:42:b0:65:2d:26:5a:2c:e3:ba:ca:e5:
0a:5f:7b:d5:1a:cc:bc:1d:ad:f1:11:61:ed:92:5c:0f:fa:4c:
38:5f:79:da:34:7a:de:c1:93:59:22:d5:01:04:1c:6e:1e:04:
b1:d8:32:84:21:e2:79:5f:3c:27:7a:20:bd:7d:e5:a1:54:5b:
d5:5d:b6:9f:42:18:bc:68:01:e6:75:25:14:3f:62:e0:98:37:
5f:1e:ac:37:05:8f:5c:f5:28:e6:13:cd:df:81:a2:59:6f:54:
c0:a2:d0:b2:b6:ed:c7:1a:e6:bf:67:33:7f:10:a0:f4:78:8f:
41:0c:42:a5:9f:77:3d:12:bb:68:65:77:b9:f4:c2:7d:38:3b:
3b:4c:ff:9c:cb:7d:4a:6d:0f:9c:f4:66:4c:3c:f0:b5:ee:a9:
4a:a5:c6:d2:2c:3d:21:e4:b1:5f:bf:f8:75:f9:83:ef:e1:88:
4d:4b:49:3b:00:e0:de:30:06:20:33:0d:95:d6:66:bd:fa:94:
9c:32:6f:0e:c5:6c:94:9a:e3:ae:34:25:c9:28:27:5c:c7:19:
a1:5d:14:de:3a:bf:ee:52:c7:49:4b:ac:a5:9b:0b:12:ac:cf:
f2:1d:48:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net