Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/ptc21Pv_RMZdbmNfwt1t43MswfA.roa
File: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (raw, json)
Hash identifier: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=
Subject key identifier: A6:D7:36:D4:FB:FF:44:C6:5D:6E:63:5F:C2:DD:6D:E3:73:2C:C1:F0
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 01942444CF7AEC217500B8C9B8768058B8C7
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/ptc21Pv_RMZdbmNfwt1t43MswfA.roa
Signing time: Wed 01 Jan 2025 23:47:56 +0000
ROA not before: Wed 01 Jan 2025 23:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196881
IP address blocks: 46.30.137.0/24 maxlen: 24
46.30.138.0/23 maxlen: 23
46.30.138.0/24 maxlen: 24
46.30.139.0/24 maxlen: 24
185.156.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:cf:7a:ec:21:75:00:b8:c9:b8:76:80:58:b8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Jan 1 23:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6d736d4fbff44c65d6e635fc2dd6de3732cc1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a2:6d:f2:d3:ba:05:f6:a1:13:0f:09:0f:5a:
09:53:e0:8d:83:fa:b0:73:06:99:37:d2:f8:ec:0a:
2b:9f:b0:b5:8f:a8:45:89:9d:d2:5d:1d:4f:28:3c:
1c:d7:01:bd:77:54:40:06:07:6e:dc:b9:39:08:52:
c0:34:80:4c:2f:e0:71:64:7d:e8:d5:fc:7c:e4:ed:
6a:c7:ed:0f:cf:c8:35:4e:e1:bd:67:79:56:db:a7:
d1:1e:19:bb:b9:42:40:8e:ec:ec:eb:a9:37:2b:e4:
03:4f:ee:ef:b7:bc:0c:74:4f:54:b3:f9:97:f6:fa:
22:ed:cc:aa:6c:bf:ab:f1:7b:cb:6f:19:e2:7e:98:
63:e7:bf:a1:fc:ec:a3:13:71:42:9e:be:3e:72:1c:
53:02:92:19:93:d0:ae:e8:bb:1e:a1:fc:51:27:4e:
62:f4:9e:82:f1:e0:78:15:23:3c:e4:e5:55:1d:50:
3c:72:38:4f:49:fd:78:be:2a:d2:b8:e8:94:0a:ef:
15:69:95:b2:6f:fe:6b:6d:9c:30:80:a7:ee:ec:af:
ee:c8:05:0c:1e:f8:5d:ea:24:23:b3:ec:45:28:b9:
b9:58:fe:34:0c:d9:7a:b6:85:f4:ba:0f:70:db:b6:
d3:a4:1f:53:dd:73:f5:d9:1f:3e:3a:90:95:ef:b3:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:36:D4:FB:FF:44:C6:5D:6E:63:5F:C2:DD:6D:E3:73:2C:C1:F0
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/ptc21Pv_RMZdbmNfwt1t43MswfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.137.0-46.30.139.255
185.156.104.0/24
Signature Algorithm: sha256WithRSAEncryption
56:5a:ca:dc:e0:5e:d5:ca:ba:3c:9f:da:67:3c:96:23:4d:39:
5f:3e:e9:28:68:cc:94:2d:50:57:d6:66:a9:46:8b:49:2c:8c:
49:f8:c5:92:d9:58:bf:92:ae:c4:fa:38:5e:f2:2e:e2:a9:f3:
83:8c:6f:41:33:23:92:d5:b0:c1:b3:ae:f1:8a:7d:ef:c3:66:
00:2f:11:3b:54:37:47:10:b3:89:83:c8:72:35:f5:5b:5d:d7:
4d:00:77:82:c4:78:99:1b:1b:46:e7:49:9d:1a:d0:19:2a:42:
19:de:e4:72:19:92:86:a4:b6:11:f3:53:59:33:e5:1d:e7:cb:
e5:c5:5d:83:b7:d5:7b:86:74:51:fe:b6:8f:bd:76:e0:90:cf:
2c:c7:22:9e:62:c7:7c:ec:c7:ec:94:d0:26:f1:e9:c7:16:75:
e8:9b:de:22:8a:b7:71:b1:c3:65:66:cb:62:b2:86:b5:7f:1f:
4b:63:89:b2:8e:54:3f:ce:43:92:5e:8b:83:b0:bc:fd:e8:75:
97:39:fc:58:79:3b:30:1c:1b:8e:4f:ef:75:a7:58:f2:be:60:
2d:34:76:da:12:1d:11:59:2b:f5:6e:b6:b7:be:39:f5:a0:a1:
b4:d0:90:99:00:e0:ea:29:25:5c:d8:56:10:e9:e4:0e:99:50:
45:4a:e3:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net