Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/_mJV8aX_Qs8QBpHiXiKK8iF0edI.roa
File: _mJV8aX_Qs8QBpHiXiKK8iF0edI.roa (raw, json)
Hash identifier: fDYoIBnVmtW522s9sJLf7723BDfyrSi2LsKN+Lo5R+0=
Subject key identifier: FE:62:55:F1:A5:FF:42:CF:10:06:91:E2:5E:22:8A:F2:21:74:79:D2
Certificate issuer: /CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Certificate serial: 0194221FC628ABFA6CB10B5778F27C4C2255
Authority key identifier: 6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/_mJV8aX_Qs8QBpHiXiKK8iF0edI.roa
Signing time: Wed 01 Jan 2025 13:48:15 +0000
ROA not before: Wed 01 Jan 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15693
IP address blocks: 46.183.248.0/21 maxlen: 21
185.29.60.0/24 maxlen: 24
185.29.62.0/23 maxlen: 23
195.191.120.0/23 maxlen: 23
2a01:8800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c6:28:ab:fa:6c:b1:0b:57:78:f2:7c:4c:22:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe6255f1a5ff42cf100691e25e228af2217479d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:5a:ae:e3:73:db:d0:e5:2b:30:f7:c4:b0:
13:61:ff:78:0b:7e:20:b0:0d:ce:1d:ca:72:c7:68:
b1:71:cc:10:cd:e6:26:87:8d:e9:55:6a:a9:f3:cf:
45:64:28:01:72:ec:4e:6f:d1:f3:a7:1c:7f:96:34:
40:5f:d7:77:05:14:e6:7c:74:58:f0:9c:5b:07:25:
63:d6:ee:cb:ee:8f:c0:68:67:bd:8f:17:9f:6a:58:
d9:94:99:c0:89:c4:e5:41:68:bd:5c:4e:16:63:f9:
9e:bc:89:db:f0:59:16:f9:09:0a:79:7a:21:07:51:
19:af:31:d7:41:22:46:52:0e:87:23:e0:ee:09:77:
ef:bc:74:52:31:63:ea:f4:e8:ae:76:71:88:95:24:
5f:0e:6a:0c:24:72:74:86:17:d2:03:4b:7d:b6:6f:
14:9b:d7:60:49:13:a5:82:6b:d6:f5:4b:f9:7b:ee:
34:2f:fb:26:21:4c:16:2d:d1:ad:09:20:ff:69:2c:
6e:89:2f:bd:15:78:d0:47:8c:c0:06:ab:5a:e2:34:
9f:ee:12:8c:68:3e:5b:29:6c:07:12:ab:09:cb:22:
2c:20:c8:b9:cc:27:c1:27:65:37:85:fd:40:5d:51:
41:9e:84:8a:8a:f6:5a:30:49:8c:06:84:d5:63:78:
40:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:62:55:F1:A5:FF:42:CF:10:06:91:E2:5E:22:8A:F2:21:74:79:D2
X509v3 Authority Key Identifier:
keyid:6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/_mJV8aX_Qs8QBpHiXiKK8iF0edI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.248.0/21
185.29.60.0/24
185.29.62.0/23
195.191.120.0/23
IPv6:
2a01:8800::/29
Signature Algorithm: sha256WithRSAEncryption
3b:e6:bd:14:2a:74:8f:df:2f:ad:60:ec:5f:78:a5:9f:5e:16:
66:7e:f3:1b:70:cd:d9:f1:21:31:3d:7c:50:e7:36:32:01:57:
3f:98:88:df:5e:4c:ef:7a:c4:8a:6b:8b:87:ca:e3:11:94:12:
96:e9:fc:7a:4b:4a:64:d9:a1:a7:28:56:2a:23:d8:e8:4d:73:
85:8f:46:9f:fd:8d:d1:40:9c:f6:39:76:6c:15:83:bf:a2:8e:
bb:ad:f3:f8:d6:c6:05:cb:fa:ff:4a:32:7e:c8:e8:33:5d:a8:
fc:61:a2:d9:bd:37:e9:c4:81:42:dc:43:94:cc:83:f3:12:78:
35:9f:3e:cc:30:b5:eb:08:82:0e:9e:8e:36:9c:0d:84:76:c4:
35:dc:6a:bc:f9:be:4e:a7:7d:59:f9:10:23:0c:75:2d:cf:76:
e5:80:e3:2b:6e:c2:e3:c7:79:6f:ff:b3:19:2f:d4:fe:ad:3d:
98:31:6b:cd:c4:83:5c:af:e6:52:65:fe:a6:f4:e0:e8:72:59:
c9:f9:a5:89:ac:cc:50:73:5b:fd:34:63:fb:07:75:28:c7:0b:
ae:11:d7:d8:d9:05:c8:02:e1:f2:9c:13:8e:5c:2b:1e:3a:bc:
66:92:9a:54:bd:ec:85:9f:00:0f:82:ae:5f:fb:de:84:d2:70:
d3:7b:1a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net