Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/T2c08RYIJ-aF9KcWXtGkde8-Pdk.roa
File: T2c08RYIJ-aF9KcWXtGkde8-Pdk.roa (raw, json)
Hash identifier: ugT57+pZzDU4gTFn9+sLNI0YDzkT+2i3eEwIihTAs/U=
Subject key identifier: 4F:67:34:F1:16:08:27:E6:85:F4:A7:16:5E:D1:A4:75:EF:3E:3D:D9
Certificate issuer: /CN=d4074714142f83970148fab0ec3e2117c393c491
Certificate serial: 019541425BED986B31D286E1E5EB835945DD
Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/T2c08RYIJ-aF9KcWXtGkde8-Pdk.roa
Signing time: Wed 26 Feb 2025 07:57:02 +0000
ROA not before: Wed 26 Feb 2025 07:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214095
IP address blocks: 46.235.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:42:5b:ed:98:6b:31:d2:86:e1:e5:eb:83:59:45:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491
Validity
Not Before: Feb 26 07:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f6734f1160827e685f4a7165ed1a475ef3e3dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:b4:f6:85:95:f4:0e:8c:d6:72:c2:e9:65:
ba:23:07:67:5a:87:52:da:06:8e:b4:1b:d0:f5:e7:
5d:d9:9f:ff:33:95:2b:56:3c:7d:a1:7d:3f:83:25:
a6:dd:e3:44:23:2e:1c:8c:0f:fd:8e:bd:07:de:bc:
81:75:a1:07:d1:fc:f1:52:4b:71:85:d9:aa:dc:e7:
92:b1:58:35:e4:67:3a:e9:4e:f8:63:77:7b:94:59:
d9:71:4a:5f:36:2c:73:8b:40:21:2f:37:76:1c:21:
58:1b:dc:1d:7d:2b:93:a7:65:59:8c:ad:85:6a:38:
85:eb:2d:2b:9a:f9:dc:26:3a:20:8a:83:75:bc:3c:
91:20:c9:5c:ac:b7:4a:9d:f8:59:34:f5:03:51:73:
90:8f:8b:a0:95:74:42:ab:e4:60:8c:00:d4:5f:a3:
15:e2:bf:da:50:e3:26:7c:86:90:69:90:c3:d8:ed:
f7:5b:72:c3:5d:e6:7e:25:60:49:8a:b7:3e:e3:e1:
0d:06:47:60:70:b8:fd:ce:cd:7e:b4:a0:61:86:01:
1d:b2:c6:b0:19:89:d7:3e:a4:a3:e4:80:57:d7:03:
2d:69:02:fa:44:b1:c7:ca:e6:bd:60:e0:71:c4:12:
10:36:36:a5:2e:a9:ef:aa:db:40:e4:ff:6f:d0:73:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:67:34:F1:16:08:27:E6:85:F4:A7:16:5E:D1:A4:75:EF:3E:3D:D9
X509v3 Authority Key Identifier:
keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/T2c08RYIJ-aF9KcWXtGkde8-Pdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.15.0/24
Signature Algorithm: sha256WithRSAEncryption
95:bd:68:40:41:ff:31:ae:e1:92:da:75:f8:5b:3e:1e:ca:3c:
26:e8:f8:5e:7e:7a:ab:91:a1:3a:ac:43:c1:e1:11:d3:92:8b:
bc:f6:35:cc:e1:3e:8f:3f:0a:95:87:4c:67:d6:fa:e3:16:e0:
0a:b2:dc:d5:d8:7e:d0:59:51:52:41:78:dc:a0:6f:bc:f5:54:
47:60:f9:9d:85:21:9b:b8:8d:31:b9:e0:d1:0a:79:e3:68:f8:
71:a2:53:5c:fc:7e:03:af:fe:2f:57:2b:c8:4a:05:5c:d6:f2:
42:25:dc:fc:6d:81:ed:70:87:f8:20:c3:c3:d7:a8:67:76:6e:
8c:4b:70:c2:90:82:d2:3c:47:a1:c0:45:16:c3:08:33:08:ec:
d5:7b:45:bb:95:74:b9:de:0f:46:74:9d:c7:cd:69:4a:d5:f3:
b1:7d:12:27:72:4d:64:eb:5b:fb:cb:7f:d5:ae:b3:10:fc:db:
e9:bf:50:b3:8b:29:db:23:fe:be:7b:eb:aa:65:10:66:98:a3:
48:24:b4:4c:a8:7c:df:9f:35:a0:bb:d1:ce:52:d9:d7:3c:51:
70:e9:bf:b7:0a:3e:78:8a:bb:17:f9:a4:c2:f5:da:82:7b:08:
5d:b3:13:a3:e7:db:d4:b0:e2:2f:0f:a9:d1:c7:fa:0a:18:e4:
42:21:ac:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net