Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/hOyeVPfcUZoI5t0PT0h8hEQnrtQ.roa
File: hOyeVPfcUZoI5t0PT0h8hEQnrtQ.roa (raw, json)
Hash identifier: GeXT9//cL/zNTjZxuaw4Cm/U6jftaxUYi+/QSdMp5D0=
Subject key identifier: 84:EC:9E:54:F7:DC:51:9A:08:E6:DD:0F:4F:48:7C:84:44:27:AE:D4
Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial: 019421445B31AA279850E6855A0A4684EA45
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/hOyeVPfcUZoI5t0PT0h8hEQnrtQ.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38927
IP address blocks: 46.226.80.0/21 maxlen: 21
87.237.120.0/21 maxlen: 21
93.191.48.0/21 maxlen: 21
185.146.236.0/22 maxlen: 22
2a02:420::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5b:31:aa:27:98:50:e6:85:5a:0a:46:84:ea:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84ec9e54f7dc519a08e6dd0f4f487c844427aed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:10:89:18:89:31:1d:68:f0:8b:a8:18:46:
0a:07:cc:da:9d:6e:e6:32:09:a4:f1:b2:69:4d:1c:
f9:a8:c0:67:85:22:01:48:6c:14:4f:45:a6:0f:58:
b7:ad:18:ad:3d:e6:94:ca:88:7f:b6:55:93:29:57:
4a:fa:7b:21:81:82:9b:66:eb:27:ef:0b:5b:0b:b8:
0b:76:0e:95:41:69:87:61:67:b7:48:b2:49:9d:d9:
41:21:a9:ac:4a:ae:68:cc:55:e3:3a:29:64:0f:f5:
63:2e:4d:5f:de:d9:c0:aa:76:58:65:b0:77:b8:48:
97:3c:47:9a:fa:2e:d4:80:c4:09:f6:56:b2:65:96:
04:24:ec:e4:36:b4:20:86:43:bd:97:74:a5:7a:fe:
bf:05:82:e2:4e:65:d4:f0:e9:2a:ab:5a:95:73:80:
b3:fe:07:47:ac:ee:70:31:84:df:41:dd:aa:a0:c5:
51:32:b3:f0:31:c8:9b:c9:64:ee:14:1c:71:6d:d7:
7a:9f:7a:98:ce:61:4e:7f:1f:a6:51:6a:ea:53:9c:
a8:5b:cb:2f:3e:4f:1d:c9:43:74:76:2e:68:36:40:
73:67:e1:8a:48:56:68:92:4f:38:73:66:b3:09:f9:
dd:1b:13:d4:7e:32:4b:40:52:f3:20:0a:ea:d3:a1:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EC:9E:54:F7:DC:51:9A:08:E6:DD:0F:4F:48:7C:84:44:27:AE:D4
X509v3 Authority Key Identifier:
keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/hOyeVPfcUZoI5t0PT0h8hEQnrtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.80.0/21
87.237.120.0/21
93.191.48.0/21
185.146.236.0/22
IPv6:
2a02:420::/29
Signature Algorithm: sha256WithRSAEncryption
34:95:c0:a2:8a:b8:05:84:99:d8:aa:be:19:57:4c:90:01:16:
d4:25:09:30:e5:27:4b:7d:a1:b9:da:8c:42:a8:90:49:5a:70:
84:14:f1:4e:79:d5:c9:29:76:df:9f:87:df:8d:19:b3:0f:fb:
1a:3c:8a:33:b2:bc:6b:86:0f:4c:23:82:3a:44:3b:2c:5a:37:
48:be:16:7d:91:44:1a:b1:3e:be:9d:c1:16:e6:9b:5e:e9:10:
4c:b2:c9:a5:76:ce:ed:45:de:f4:79:0f:36:78:d4:66:de:b2:
51:3a:36:bf:cc:e4:6b:82:44:5c:39:a0:39:88:b0:41:2f:fe:
98:f8:bd:cd:a1:5b:b0:49:1f:79:eb:cb:56:3b:27:c0:2f:22:
69:68:e0:68:99:5c:58:08:fe:08:fe:15:bf:b9:ea:a0:99:61:
c4:45:96:06:02:90:74:c4:e4:83:1b:1b:a6:37:4f:e7:0c:2c:
c2:b0:dc:1d:a0:81:bf:3a:dc:85:d3:ef:f8:1e:78:98:14:1c:
64:8f:be:03:3c:c6:6d:f8:37:1b:74:2c:79:63:f3:2d:77:ab:
a7:bf:20:c9:51:32:51:bf:6d:9c:3c:48:b4:7c:c7:c3:64:8e:
d8:8c:c2:4a:d4:c5:16:f4:be:d9:60:39:0a:ff:fa:e1:8f:08:
ff:49:8b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net