Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/cmWG-vH2BvPbA67VsqJqB_jv_zU.roa
File: cmWG-vH2BvPbA67VsqJqB_jv_zU.roa (raw, json)
Hash identifier: jJCpozKn5bF6BPqDVQG5hwKj0Mc2BX9AXUCoDqUsDQM=
Subject key identifier: 72:65:86:FA:F1:F6:06:F3:DB:03:AE:D5:B2:A2:6A:07:F8:EF:FF:35
Certificate issuer: /CN=db6eff73efff81277c2d5d38f0e46d6d12a708d7
Certificate serial: 0194266AAC105D6A3FC431AB78DC1362E7F3
Authority key identifier: DB:6E:FF:73:EF:FF:81:27:7C:2D:5D:38:F0:E4:6D:6D:12:A7:08:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/cmWG-vH2BvPbA67VsqJqB_jv_zU.roa
Signing time: Thu 02 Jan 2025 09:48:32 +0000
ROA not before: Thu 02 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33984
IP address blocks: 46.235.24.0/24 maxlen: 24
46.235.25.0/24 maxlen: 24
46.235.26.0/24 maxlen: 24
46.235.27.0/24 maxlen: 24
46.235.28.0/24 maxlen: 24
46.235.29.0/24 maxlen: 24
46.235.30.0/24 maxlen: 24
46.235.31.0/24 maxlen: 24
78.111.64.0/20 maxlen: 20
81.20.128.0/20 maxlen: 20
85.88.0.0/19 maxlen: 19
2a02:f98::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:ac:10:5d:6a:3f:c4:31:ab:78:dc:13:62:e7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db6eff73efff81277c2d5d38f0e46d6d12a708d7
Validity
Not Before: Jan 2 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=726586faf1f606f3db03aed5b2a26a07f8efff35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:0a:54:0b:10:f9:c8:08:c7:29:11:5b:34:
75:34:d0:8a:b3:80:b5:3a:47:89:6d:21:e5:9f:e3:
04:2f:37:ad:c3:21:fe:af:b2:91:f4:fa:64:c8:55:
2a:56:b3:f8:ed:e3:60:3f:64:54:b6:64:cb:29:c8:
86:a5:53:91:1b:63:d4:89:da:89:8a:75:1b:60:dd:
a3:e9:32:49:43:ff:e1:a7:a0:00:1b:63:70:0d:3f:
07:81:cb:1b:6b:b3:86:d4:9e:9a:ae:c8:cf:7d:68:
e1:07:20:0b:fe:5c:0b:4a:c7:a5:72:da:7f:ab:09:
be:55:51:d5:e0:96:6f:83:64:fe:a7:f5:8c:68:cf:
a0:a8:81:af:ef:b4:8c:94:9a:c0:e2:08:e4:6d:4a:
c4:b9:f9:5a:93:90:15:21:db:48:36:5e:59:62:b9:
ee:c1:f7:96:41:76:23:d6:aa:c3:f6:36:b4:7b:85:
34:29:4c:49:6d:db:2b:8d:7d:55:0e:9d:be:ce:ba:
ef:77:26:d5:36:15:fc:a7:2c:f3:07:20:06:78:81:
55:84:1f:ac:02:fd:fd:5e:38:81:d9:18:b0:58:98:
30:6f:64:9f:b0:e7:9c:3f:b1:3b:1b:d5:79:40:ae:
14:74:a3:9c:b7:4d:d5:df:dd:09:11:c4:ea:5d:86:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:86:FA:F1:F6:06:F3:DB:03:AE:D5:B2:A2:6A:07:F8:EF:FF:35
X509v3 Authority Key Identifier:
keyid:DB:6E:FF:73:EF:FF:81:27:7C:2D:5D:38:F0:E4:6D:6D:12:A7:08:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/cmWG-vH2BvPbA67VsqJqB_jv_zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.24.0/21
78.111.64.0/20
81.20.128.0/20
85.88.0.0/19
IPv6:
2a02:f98::/32
Signature Algorithm: sha256WithRSAEncryption
97:a4:3c:9d:40:c2:c5:3a:a2:65:92:60:64:68:d6:34:66:7a:
e9:de:0d:25:ef:ef:49:61:e1:cb:fb:87:fe:bc:a0:66:8a:1e:
50:58:55:c5:21:58:f2:16:af:ba:0a:d0:1b:3d:fa:e6:51:9a:
e5:32:1d:cc:39:e8:60:15:2a:82:92:5d:79:31:59:59:58:6e:
d7:98:4f:79:8b:b2:65:45:47:3e:e8:6c:6e:ab:bb:6b:b7:dd:
7a:29:fd:c8:4f:f5:fa:57:0c:3e:93:e7:2e:06:cb:0c:57:23:
1b:b8:af:fe:ae:3a:0e:23:0a:94:66:6a:96:85:ab:14:86:5f:
88:fd:cb:f7:ec:da:41:01:15:23:16:09:79:5d:1c:17:bc:0f:
86:e7:07:f9:71:bc:20:1f:33:cc:26:71:ab:55:e8:82:4f:ff:
64:2e:02:ae:c0:05:5b:f0:bf:97:3a:96:7e:43:d1:7a:f0:62:
c7:3d:3b:79:33:d9:1b:70:2d:3b:91:3b:4e:a0:5b:e2:fb:00:
1a:ce:bf:52:e9:32:7b:b6:51:5e:1c:a2:bc:43:52:74:2c:b6:
65:a5:b4:b9:74:ac:8a:a0:b1:fd:df:3e:c4:5d:3b:a6:72:73:
14:bb:cd:e7:14:a9:9c:bd:9d:f5:9b:c9:99:6a:5f:e9:4c:89:
65:9f:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net