Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa
File: LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa (raw, json)
Hash identifier: ZLQQjKLBIHt19Vm7p7ixs8F7wMqUIQn9Y8DFLps+wZU=
Subject key identifier: 2C:B0:61:5C:FE:34:5F:E8:76:52:CA:04:16:FE:DD:91:84:20:D1:64
Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial: 0194252187E97AF4AB374B5088F5C4712B07
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa
Signing time: Thu 02 Jan 2025 03:49:01 +0000
ROA not before: Thu 02 Jan 2025 03:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49821
IP address blocks: 46.175.12.0/24 maxlen: 24
91.215.204.0/22 maxlen: 22
185.236.64.0/21 maxlen: 21
185.236.64.0/22 maxlen: 22
185.236.68.0/22 maxlen: 22
2a0d:9f00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:87:e9:7a:f4:ab:37:4b:50:88:f5:c4:71:2b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
Validity
Not Before: Jan 2 03:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cb0615cfe345fe87652ca0416fedd918420d164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:42:aa:a3:a6:13:b8:c0:29:8b:56:a0:18:
46:5e:95:3a:02:24:8f:80:c6:ea:87:d4:3a:ae:f7:
35:8f:d3:e9:b0:7d:c2:91:12:9f:5f:72:e7:4a:8f:
d6:8a:fb:72:ae:ff:d1:e4:a0:cf:50:d4:be:8b:ec:
02:6c:e5:b5:7e:3c:91:26:47:53:07:31:93:97:aa:
aa:81:84:1d:66:2d:15:f3:71:ea:d3:63:90:13:c4:
99:23:62:f1:1b:31:f3:d0:5e:cc:bc:66:61:b6:c1:
04:cf:64:c7:a3:0e:2e:22:10:19:05:c5:37:43:6d:
b2:b4:71:b8:45:de:ca:a0:ab:7c:b2:af:bf:3f:47:
44:6f:4c:38:90:f0:c7:07:d3:0c:e1:da:52:f6:49:
8b:cf:00:01:b5:62:cc:39:c0:35:1f:3d:55:90:40:
02:db:3f:b4:45:d5:d0:29:03:f9:9b:1e:53:10:8a:
49:c6:f6:61:8c:ee:4e:dd:38:b3:78:34:cc:b5:65:
45:4a:c3:40:2b:ad:97:de:34:ab:c8:b4:69:8b:8a:
92:69:22:73:d8:f1:92:c0:43:83:a3:b5:3f:69:d8:
07:0b:98:51:f5:4c:a1:9a:7b:0b:4b:d4:ca:36:a1:
d3:3e:6b:f4:e9:e8:73:a0:55:e6:68:ab:df:a1:4b:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B0:61:5C:FE:34:5F:E8:76:52:CA:04:16:FE:DD:91:84:20:D1:64
X509v3 Authority Key Identifier:
keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.12.0/24
91.215.204.0/22
185.236.64.0/21
IPv6:
2a0d:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
59:5e:7e:22:53:68:54:04:4a:76:2c:4a:ba:63:5c:ff:88:37:
60:a4:55:2a:56:f5:45:ce:fc:d4:74:0a:a7:f9:1e:71:22:87:
c4:cd:ff:d6:c5:cd:ac:ed:85:72:f9:c9:07:90:e3:15:50:86:
14:6d:07:c2:4a:c6:61:7a:21:0b:83:35:94:5f:24:b6:cc:b2:
88:07:dc:ae:a2:84:86:08:0d:5f:6f:ff:58:be:55:22:d3:5e:
90:1f:ab:df:45:5a:c5:f5:d3:58:ec:02:f7:5e:8f:03:d9:45:
47:2f:ce:32:56:33:5a:51:27:60:7c:90:1e:b7:ba:02:53:5a:
00:d7:86:2b:7e:81:b4:0a:e9:83:43:be:e8:9a:f1:2e:a2:52:
03:f1:85:73:2c:fe:52:a6:c7:dd:57:6f:9c:43:34:52:c8:5f:
dd:5d:bb:07:ac:f1:a2:85:c2:72:89:72:d4:eb:1c:51:6a:9e:
bb:5a:8c:1b:28:47:de:6a:dc:01:53:f4:77:29:62:8d:16:7c:
e6:21:8f:4f:4e:1a:b6:9b:a8:36:98:2d:da:36:d0:94:c6:b2:
84:af:50:3a:d6:cb:33:0d:ad:50:d9:78:e8:26:08:85:2c:9c:
39:28:19:82:2a:a7:00:e4:db:2f:4d:4e:54:86:09:dc:23:cc:
cd:29:fb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net