Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/dcj_O6LOhrZyjlYfbFWKtd8afLs.roa
File: dcj_O6LOhrZyjlYfbFWKtd8afLs.roa (raw, json)
Hash identifier: 6QlVZfYgCQ+Co7hd7hXUtwQRQFR7TWRFQKMzrXC6rV4=
Subject key identifier: 75:C8:FF:3B:A2:CE:86:B6:72:8E:56:1F:6C:55:8A:B5:DF:1A:7C:BB
Certificate issuer: /CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Certificate serial: 019426D9E556C140A4D4223F7EC4C462F176
Authority key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/dcj_O6LOhrZyjlYfbFWKtd8afLs.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52092
IP address blocks: 46.149.112.0/20 maxlen: 20
46.149.120.0/24 maxlen: 24
46.149.121.0/24 maxlen: 24
2001:67c:3b4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e5:56:c1:40:a4:d4:22:3f:7e:c4:c4:62:f1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75c8ff3ba2ce86b6728e561f6c558ab5df1a7cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:3b:b8:7e:99:b8:ab:63:6b:54:83:8b:aa:
12:7e:6d:e2:d1:3f:15:4c:23:35:3b:86:9e:fa:f7:
ad:35:91:8a:a1:48:d2:17:51:53:3b:09:b1:47:20:
2a:67:08:d8:e1:e3:d5:7b:7b:5d:cc:c9:2d:a6:05:
fb:a3:43:09:e1:72:d4:12:1d:7f:a0:d7:b7:f3:d1:
40:e6:4d:e9:cd:47:4b:2e:b9:d6:a3:2e:26:e3:5e:
96:48:26:c4:d5:a9:77:3e:0f:ed:e1:cf:11:b6:9d:
90:9b:1b:05:86:e8:0e:70:de:f9:0b:7f:6c:ac:c9:
e6:75:72:75:93:e8:09:69:a1:f7:87:72:c1:f3:b2:
7a:d4:79:df:3a:8b:ca:34:75:32:fa:88:d8:a8:69:
90:59:72:89:44:0b:71:c4:f7:bf:8a:24:f8:6d:1f:
ed:7a:0f:52:a4:d9:0d:42:af:81:ab:eb:3c:a9:62:
32:20:6d:86:4f:a7:5f:e2:2d:27:30:b7:b2:1c:e2:
2d:98:1e:ad:7f:cb:85:46:4f:07:90:a7:6c:0c:72:
a0:32:61:76:78:50:e2:b0:e5:6e:1d:c0:50:ca:7d:
58:fd:70:38:86:38:a7:a6:0e:59:4a:f3:c8:0d:1b:
0e:2d:a6:a9:18:40:c4:bf:3f:2a:2f:8a:77:31:3b:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C8:FF:3B:A2:CE:86:B6:72:8E:56:1F:6C:55:8A:B5:DF:1A:7C:BB
X509v3 Authority Key Identifier:
keyid:E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/dcj_O6LOhrZyjlYfbFWKtd8afLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.112.0/20
IPv6:
2001:67c:3b4::/48
Signature Algorithm: sha256WithRSAEncryption
62:6c:52:f7:46:12:c2:8f:b8:93:68:f5:c9:2b:0b:78:34:ee:
20:a3:e5:39:c2:e6:bb:0a:e2:13:54:a6:de:6c:37:5a:c4:3b:
da:b5:76:f4:45:7a:10:3e:83:a0:5d:f2:7f:39:40:55:75:64:
39:2e:63:a9:5f:78:1a:61:62:db:fa:bb:65:9e:0b:dc:a7:a2:
11:5f:2e:df:18:06:47:0d:24:12:6b:52:40:94:cc:c4:f4:b3:
b7:e4:7e:ad:45:04:f0:2d:49:9f:7e:f8:ae:25:de:7b:db:9b:
78:07:b3:7e:5a:64:97:0c:d5:79:e3:0b:a7:ba:e5:c6:5e:f6:
fb:46:0d:67:64:4c:80:c5:ef:64:20:89:10:31:40:f3:26:4c:
5a:e7:c5:1b:46:6a:56:64:e3:6a:7b:d8:a0:22:66:db:4f:26:
c8:e9:ee:a1:f9:0c:fd:b7:d6:2d:37:1e:6c:48:3b:ee:fe:3c:
98:62:53:88:99:50:97:8e:b3:c9:b2:77:ee:a6:05:75:ca:8c:
e3:e6:ef:df:d2:23:e5:4c:18:73:11:4a:48:84:e3:82:c9:e1:
d1:39:97:8b:26:29:d6:c2:2f:ba:d3:de:8d:74:c3:f8:f6:9b:
1e:9b:51:25:55:82:53:64:17:04:65:66:79:5c:f1:2b:65:71:
cb:79:58:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net