Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Kwj4i4rNyzJUOvELNWnXH3R-jw4.roa
File: Kwj4i4rNyzJUOvELNWnXH3R-jw4.roa (raw, json)
Hash identifier: FGt3z3IlUQQX3L4JhYd4ue2NJONgSL3qDjZtT83LgI4=
Subject key identifier: 2B:08:F8:8B:8A:CD:CB:32:54:3A:F1:0B:35:69:D7:1F:74:7E:8F:0E
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 019424B3839BB3A4A51964E3252AA25EE892
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Kwj4i4rNyzJUOvELNWnXH3R-jw4.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49970
IP address blocks: 46.143.193.0/24 maxlen: 24
46.143.196.0/24 maxlen: 24
46.143.200.0/24 maxlen: 24
46.143.201.0/24 maxlen: 24
46.143.246.0/24 maxlen: 24
46.143.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:83:9b:b3:a4:a5:19:64:e3:25:2a:a2:5e:e8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b08f88b8acdcb32543af10b3569d71f747e8f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:59:80:74:f0:e1:9c:e7:8e:0f:cb:2b:9d:1f:
0f:c6:d3:d2:c8:e0:48:a5:32:61:32:b7:97:ab:15:
d8:eb:c5:fe:e7:f2:e1:86:c6:11:85:1b:75:e0:e6:
be:0c:33:54:63:26:27:c0:5b:33:61:d6:3b:b2:bb:
f7:b6:8b:30:d6:61:c2:20:52:a0:8e:fa:4a:1a:1d:
0d:d8:09:2e:4a:e3:c3:d5:7f:bb:57:24:1c:53:96:
6b:bb:bf:7e:82:cb:be:42:0b:b2:86:4f:88:7a:63:
f3:4e:a5:e5:27:46:db:7e:94:14:13:c2:26:35:b4:
0b:8c:ae:7a:4e:e8:2d:32:d6:09:95:e9:e7:d6:38:
06:e4:8e:b0:08:d8:6b:3c:09:34:5f:78:e1:51:2e:
a5:5f:f6:7e:56:43:51:a6:40:5a:74:73:4a:7d:ad:
ce:e8:f5:27:3e:93:44:6f:60:f7:b1:b8:d9:79:58:
15:ba:ed:4d:93:4a:90:a1:b5:04:18:97:b8:fb:3d:
6d:7e:15:7f:9d:43:f8:56:1f:d3:84:b9:bf:6e:e0:
44:04:1f:0f:54:f5:e3:e1:21:96:fe:d2:27:f1:83:
30:d7:b3:35:76:02:99:55:fa:48:f1:3b:3c:ac:e2:
2a:27:e1:4e:f7:6a:72:2f:ed:5f:20:a9:0a:25:7a:
6c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:08:F8:8B:8A:CD:CB:32:54:3A:F1:0B:35:69:D7:1F:74:7E:8F:0E
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Kwj4i4rNyzJUOvELNWnXH3R-jw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.193.0/24
46.143.196.0/24
46.143.200.0/23
46.143.246.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:7c:03:0f:bd:0e:0a:be:08:6e:bb:fc:9b:ab:dc:67:08:fb:
ce:2e:75:62:f5:68:7a:9f:30:eb:76:47:cc:2b:ed:07:b7:88:
75:ba:30:a4:fd:a5:f0:29:0f:06:61:54:c6:9d:12:92:6e:b0:
c9:a6:a7:cc:6c:b0:3b:ba:21:2a:ee:01:9b:66:ee:00:27:72:
ed:4a:07:de:22:85:59:66:f0:44:9b:c2:7c:ed:f6:c6:88:d9:
48:6d:4d:ab:b4:da:5c:ac:9b:59:5e:71:2d:fd:a1:d1:8e:07:
84:28:c0:0b:5c:1a:1f:93:fc:60:6b:cd:d3:67:5d:c1:28:dd:
13:aa:4c:bb:62:a6:54:75:80:f4:80:0b:00:8a:a8:6f:21:45:
72:54:49:48:c0:dd:81:e8:01:49:7b:14:46:32:bf:7c:5d:49:
4c:76:ce:d9:43:13:50:f9:b0:0f:a2:2c:b5:be:69:4a:29:36:
67:88:84:ab:b6:af:a0:17:5a:f1:a8:0a:ee:1f:57:3b:f8:f8:
ed:f9:ce:ef:e7:76:8f:cd:61:54:d0:80:0c:46:4f:82:84:db:
ba:66:5f:b8:2f:41:76:af:e8:cc:5e:ac:fa:56:c7:49:96:72:
36:50:77:d0:e4:5f:32:41:67:02:bc:50:fb:11:d3:a6:a2:bf:
11:1e:bc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net