Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/DnWgBwSyPonu4ANiqDXcSFS5Sss.roa
File: DnWgBwSyPonu4ANiqDXcSFS5Sss.roa (raw, json)
Hash identifier: l2btTGNwK1K4Uvs9UU8E5RV5U3WcxEKUPo27wW3zozU=
Subject key identifier: 0E:75:A0:07:04:B2:3E:89:EE:E0:03:62:A8:35:DC:48:54:B9:4A:CB
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 019424B38634C5B010953ACEF2DD9CF973EC
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/DnWgBwSyPonu4ANiqDXcSFS5Sss.roa
Signing time: Thu 02 Jan 2025 01:48:52 +0000
ROA not before: Thu 02 Jan 2025 01:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57543
IP address blocks: 46.143.216.0/21 maxlen: 21
46.143.224.0/21 maxlen: 21
46.143.232.0/22 maxlen: 22
46.143.236.0/23 maxlen: 23
46.143.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:86:34:c5:b0:10:95:3a:ce:f2:dd:9c:f9:73:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 2 01:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e75a00704b23e89eee00362a835dc4854b94acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:33:34:75:0e:fa:97:42:b2:ee:20:c3:c2:
d8:90:12:ff:23:31:3e:bc:b0:26:4c:4b:28:eb:94:
ce:53:4d:4f:aa:11:aa:ef:45:ef:38:3d:f1:d9:b0:
9a:1b:a7:00:31:b9:29:94:25:1f:67:a0:37:39:25:
62:a9:cc:76:0e:b3:9d:42:b2:d8:39:a2:0d:96:f5:
3d:bc:64:36:94:5a:5a:d2:5d:8f:cf:30:9f:8c:a4:
99:01:e9:ba:ce:c7:10:ff:34:05:f0:83:3a:9e:2c:
83:4f:2f:db:dc:8c:17:f1:b4:de:fd:5f:60:6a:26:
24:2f:47:88:31:ca:80:0b:37:0e:5d:4f:97:63:a0:
50:62:4c:ea:59:30:4a:a1:c2:fd:2d:0c:e7:86:f7:
48:e8:b4:f4:86:5f:94:35:f9:3b:f0:3e:76:36:c6:
97:03:f2:97:c2:08:a3:02:c6:2c:07:41:2b:5b:19:
b9:27:60:93:07:db:5d:31:4d:00:93:37:ee:cf:a6:
14:d6:b2:46:07:42:12:07:7e:18:e4:ac:60:16:40:
e3:48:fb:bd:b1:bc:26:b0:4f:09:0f:84:8b:45:dd:
69:d3:a6:2d:db:14:dc:fc:16:94:6f:1a:48:85:30:
9e:b2:2f:c7:b0:03:e3:a0:4c:0b:5c:07:b5:2e:e3:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:75:A0:07:04:B2:3E:89:EE:E0:03:62:A8:35:DC:48:54:B9:4A:CB
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/DnWgBwSyPonu4ANiqDXcSFS5Sss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.216.0-46.143.239.255
Signature Algorithm: sha256WithRSAEncryption
9e:03:f2:fe:a6:cf:2e:dd:bb:69:9d:de:8c:fa:f0:14:d4:1c:
b1:e8:6a:50:42:de:7a:2f:90:c7:cc:92:09:ae:7f:b2:e5:9c:
4a:5c:6b:23:46:75:43:a9:a7:cf:8c:21:f4:dc:81:6b:35:95:
23:5a:fe:0c:ee:25:fb:f1:de:6d:36:74:e5:66:80:cf:d8:fb:
e5:d1:c0:c0:24:52:54:41:5a:d8:f3:8b:ec:93:52:fc:8d:fb:
0d:ba:dc:fa:48:c4:e0:f4:15:3b:96:fb:a7:ea:c5:30:52:6a:
fb:f5:31:72:d1:cf:d0:d7:08:52:dd:29:ce:47:06:1e:9b:64:
fb:0c:1d:07:b0:6a:f8:36:ca:17:47:75:e6:8d:32:98:bf:b6:
40:d7:d4:36:0d:22:6e:b9:b7:d0:51:3b:2f:73:72:3e:7b:e3:
f1:89:b9:2c:4a:5d:a2:5f:5f:f5:4f:03:73:13:05:bc:13:49:
cb:06:d4:36:f6:4e:97:8f:21:cb:4f:8f:64:36:0d:93:a2:82:
9e:58:b2:30:83:d7:3e:7a:0c:6c:56:4f:9d:4b:13:22:75:e0:
b9:15:85:45:b4:34:31:3a:c4:d9:20:d7:89:e1:e3:35:c4:bf:
fa:e9:79:bc:81:91:15:db:a4:06:af:cf:34:3d:5e:5c:71:21:
8d:50:cf:17
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQks4Y0xbAQlTrO8t2c+XPsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0
MTUwOGMwHhcNMjUwMTAyMDE0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTc1YTAwNzA0YjIzZTg5ZWVlMDAzNjJhODM1ZGM0ODU0Yjk0YWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoczNHUO+pdCsu4gw8LYkBL/IzE+
vLAmTEso65TOU01PqhGq70XvOD3x2bCaG6cAMbkplCUfZ6A3OSViqcx2DrOdQrLY
OaINlvU9vGQ2lFpa0l2PzzCfjKSZAem6zscQ/zQF8IM6niyDTy/b3IwX8bTe/V9g
aiYkL0eIMcqACzcOXU+XY6BQYkzqWTBKocL9LQznhvdI6LT0hl+UNfk78D52NsaX
A/KXwgijAsYsB0ErWxm5J2CTB9tdMU0Akzfuz6YU1rJGB0ISB34Y5KxgFkDjSPu9
sbwmsE8JD4SLRd1p06Yt2xTc/BaUbxpIhTCesi/HsAPjoEwLXAe1LuNJqwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFA51oAcEsj6J7uADYqg13EhUuUrLMB8GA1UdIwQY
MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt
MjlmMWJlYjJmMjgyLzEvRG5XZ0J3U3lQb251NEFOaXFEWGNTRlM1U3NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy
LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMuj9gD
BAQuj+AwDQYJKoZIhvcNAQELBQADggEBAJ4D8v6mzy7du2md3oz68BTUHLHoalBC
3novkMfMkgmuf7LlnEpcayNGdUOpp8+MIfTcgWs1lSNa/gzuJfvx3m02dOVmgM/Y
++XRwMAkUlRBWtjzi+yTUvyN+w263PpIxOD0FTuW+6fqxTBSavv1MXLRz9DXCFLd
Kc5HBh6bZPsMHQewavg2yhdHdeaNMpi/tkDX1DYNIm65t9BROy9zcj574/GJuSxK
XaJfX/VPA3MTBbwTScsG1Db2TpePIctPj2Q2DZOigp5YsjCD1z56DGxWT51LEyJ1
4LkVhUW0NDE6xNkg14nh4zXEv/rpebyBkRXbpAavzzQ9XlxxIY1Qzxc=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net