Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/pifRADlBu6j6f6O_mhAZODBK9K8.roa
File: pifRADlBu6j6f6O_mhAZODBK9K8.roa (raw, json)
Hash identifier: wf5Mnm0Chn5DviXEtClL0BhYrGy9joFRXs7MdUj8krY=
Subject key identifier: A6:27:D1:00:39:41:BB:A8:FA:7F:A3:BF:9A:10:19:38:30:4A:F4:AF
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 019601822A847585020EAF251B8B8B3B80D0
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/pifRADlBu6j6f6O_mhAZODBK9K8.roa
Signing time: Fri 04 Apr 2025 15:53:49 +0000
ROA not before: Fri 04 Apr 2025 15:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214687
IP address blocks: 46.243.136.0/24 maxlen: 24
46.243.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:01:82:2a:84:75:85:02:0e:af:25:1b:8b:8b:3b:80:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Apr 4 15:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a627d1003941bba8fa7fa3bf9a101938304af4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8f:61:da:ce:52:bb:87:f9:94:3b:9a:dc:99:
e3:b4:03:dd:60:6f:57:e6:5d:f9:8a:32:8a:24:99:
86:b1:77:4c:2b:cc:3e:ff:cc:83:b9:08:70:d9:f9:
50:15:23:78:ac:d3:46:cb:f8:64:e4:00:f4:36:e0:
29:a1:cd:b1:1c:cc:16:e8:f0:80:a2:8a:bc:c5:c2:
2c:97:94:f7:72:9f:c6:8d:b6:60:33:eb:b4:e8:6d:
20:a5:26:c8:f1:24:ee:4b:07:16:9d:40:3b:c4:26:
47:cc:18:0d:3a:ba:3a:fe:de:70:88:75:61:fa:37:
41:13:95:92:de:9c:e1:a4:35:63:a3:41:67:55:f9:
b4:37:f2:11:6c:2e:42:34:fb:e8:32:a1:21:f2:be:
79:4c:97:bf:90:99:f6:6e:be:0d:33:8a:3f:38:11:
c1:ab:91:ac:99:84:fe:7e:95:d7:8e:92:da:19:21:
ef:39:ed:9c:4f:d4:33:98:3b:4d:9f:84:15:77:9e:
fe:0f:ed:06:36:07:4a:d1:7b:1a:a0:e7:5f:89:e2:
6c:d1:3d:75:a1:45:3b:72:56:fd:24:ee:a9:fb:42:
42:a4:35:a3:8e:e9:51:99:30:b7:0f:88:26:cc:35:
34:05:c7:fa:fb:ff:6c:82:09:21:35:43:bd:46:d6:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:27:D1:00:39:41:BB:A8:FA:7F:A3:BF:9A:10:19:38:30:4A:F4:AF
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/pifRADlBu6j6f6O_mhAZODBK9K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.136.0/23
Signature Algorithm: sha256WithRSAEncryption
05:4a:a5:b0:e5:a5:e3:81:21:cb:97:b8:0c:1f:c5:34:98:2d:
29:7d:9e:7c:75:91:b0:ed:be:7a:90:79:8e:ac:dd:26:56:e7:
03:3c:89:ce:02:71:bc:fc:ff:10:f1:30:0d:92:79:30:10:36:
94:31:a9:33:ee:d8:c8:76:7e:39:3b:cf:0e:40:dd:32:08:e2:
25:cb:82:d1:45:e1:59:b5:a5:49:41:01:cc:cc:a7:25:c5:5e:
df:18:d2:90:cc:d4:96:e8:74:fb:64:7a:00:35:09:3e:4f:1a:
76:27:6e:1c:12:ff:d9:64:c0:51:4d:2d:c2:4e:76:f1:09:00:
fb:3c:8b:11:7a:c5:b6:86:cb:fa:56:2f:b0:dc:62:98:42:9a:
92:e2:4e:25:73:4e:db:a0:72:4d:d5:3b:12:c6:b4:46:7d:be:
6e:2a:9d:ee:17:81:8d:db:23:4d:a4:64:83:d3:47:a0:9a:5b:
b0:a0:5c:de:9c:d5:ff:41:96:40:24:7d:32:ed:b7:4b:01:99:
45:6b:fd:25:a5:80:4c:12:8c:71:77:e2:8f:5f:70:e9:06:47:
c3:8e:d5:b3:ea:3d:e9:34:2f:ad:39:f8:7f:a1:17:1c:cf:18:
d1:57:2f:11:76:3c:cb:de:3a:33:6a:8c:16:ac:c5:dd:13:25:
e2:bc:4c:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYBgiqEdYUCDq8lG4uLO4DQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjUwNDA0MTU1MzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjI3ZDEwMDM5NDFiYmE4ZmE3ZmEzYmY5YTEwMTkzODMwNGFmNGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8I9h2s5Su4f5lDua3JnjtAPdYG9X
5l35ijKKJJmGsXdMK8w+/8yDuQhw2flQFSN4rNNGy/hk5AD0NuApoc2xHMwW6PCA
ooq8xcIsl5T3cp/GjbZgM+u06G0gpSbI8STuSwcWnUA7xCZHzBgNOro6/t5wiHVh
+jdBE5WS3pzhpDVjo0FnVfm0N/IRbC5CNPvoMqEh8r55TJe/kJn2br4NM4o/OBHB
q5GsmYT+fpXXjpLaGSHvOe2cT9QzmDtNn4QVd57+D+0GNgdK0XsaoOdfieJs0T11
oUU7clb9JO6p+0JCpDWjjulRmTC3D4gmzDU0Bcf6+/9sggkhNUO9RtZj7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKYn0QA5Qbuo+n+jv5oQGTgwSvSvMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvcGlmUkFEbEJ1Nmo2ZjZPX21oQVpPREJLOUs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLvOIMA0G
CSqGSIb3DQEBCwUAA4IBAQAFSqWw5aXjgSHLl7gMH8U0mC0pfZ58dZGw7b56kHmO
rN0mVucDPInOAnG8/P8Q8TANknkwEDaUMakz7tjIdn45O88OQN0yCOIly4LRReFZ
taVJQQHMzKclxV7fGNKQzNSW6HT7ZHoANQk+Txp2J24cEv/ZZMBRTS3CTnbxCQD7
PIsResW2hsv6Vi+w3GKYQpqS4k4lc07boHJN1TsSxrRGfb5uKp3uF4GN2yNNpGSD
00egmluwoFzenNX/QZZAJH0y7bdLAZlFa/0lpYBMEoxxd+KPX3DpBkfDjtWz6j3p
NC+tOfh/oRcczxjRVy8RdjzL3jozaowWrMXdEyXivEzv
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net