Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/Ra939hYa4qHS53vnLZC8uQUEM-E.roa
File: Ra939hYa4qHS53vnLZC8uQUEM-E.roa (raw, json)
Hash identifier: B/7jSSNr2C5FakUSARiA8ySImCt+J6e0YeVP0cyVsSQ=
Subject key identifier: 45:AF:77:F6:16:1A:E2:A1:D2:E7:7B:E7:2D:90:BC:B9:05:04:33:E1
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 0194266BD742F5FA4E3C7CB0F5EE59D0F18C
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/Ra939hYa4qHS53vnLZC8uQUEM-E.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12931
IP address blocks: 46.35.48.0/20 maxlen: 20
213.182.0.0/19 maxlen: 19
2001:14e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d7:42:f5:fa:4e:3c:7c:b0:f5:ee:59:d0:f1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45af77f6161ae2a1d2e77be72d90bcb9050433e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:5b:54:f6:51:91:9e:92:bd:85:d4:07:fa:
73:0d:67:2d:ba:92:be:e3:0a:67:62:a5:82:99:b9:
3e:29:a2:5d:63:f4:24:69:d5:60:67:33:ae:c3:a6:
ac:94:7e:9e:8f:f2:7a:e4:ee:d2:c3:51:5b:29:80:
8d:0d:c9:38:6a:8b:68:46:bb:df:58:b0:8d:a5:56:
ae:34:36:54:c5:d4:3a:8b:c6:09:1a:46:69:05:fb:
89:d1:73:d3:b8:92:9a:4e:dc:97:09:8d:c7:fa:f0:
29:3a:28:c9:a5:7c:1f:5d:e1:fe:e6:59:b4:43:65:
3e:21:90:59:18:d0:f0:e5:28:fa:f5:85:f5:b0:2e:
fb:96:f7:fe:e5:e5:13:c7:c1:3b:c2:cf:90:ce:36:
2f:26:23:dd:7a:c7:bc:06:4b:41:07:0d:d0:ec:09:
19:9e:22:c1:6f:06:1b:85:a4:0d:fa:bf:32:4f:fb:
67:39:6c:5d:2b:37:d5:9a:76:ce:01:4d:1e:1d:cc:
cb:9f:e2:37:0e:ea:d2:42:84:38:33:60:88:10:94:
0f:a2:aa:d4:f9:a9:b9:80:dd:c4:33:6f:64:5c:09:
5f:a0:66:d4:8a:18:fe:0c:b9:a1:9a:91:60:97:5e:
f6:66:0f:83:40:a6:d4:8a:ae:cd:0e:c5:ea:fe:9d:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AF:77:F6:16:1A:E2:A1:D2:E7:7B:E7:2D:90:BC:B9:05:04:33:E1
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/Ra939hYa4qHS53vnLZC8uQUEM-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.48.0/20
213.182.0.0/19
IPv6:
2001:14e0::/32
Signature Algorithm: sha256WithRSAEncryption
4a:0f:5d:dd:ef:55:19:36:61:b6:7e:aa:78:f9:1c:8d:db:4c:
97:e8:1a:7a:0f:45:b2:a8:85:03:92:ec:ab:d9:fd:37:6a:c7:
d5:f4:ff:65:d2:34:97:58:a9:3d:71:0a:b8:6b:60:6f:0d:80:
b8:84:9a:39:7e:eb:29:09:43:73:cb:85:a3:68:bc:cd:57:f6:
01:b2:55:e9:c2:01:99:28:49:05:b2:4a:af:1f:7a:13:a6:cf:
84:3d:7c:f1:38:e3:8f:9f:c2:b7:56:ca:cd:ed:1d:e7:33:4f:
42:9b:10:3b:d3:f8:db:27:8e:2a:bd:88:ae:d6:dc:17:83:37:
7c:8e:08:8c:36:3a:57:2e:e8:bf:69:d3:db:e8:fd:38:eb:93:
1b:62:c4:b3:c8:c5:71:73:7f:47:37:7a:9c:b3:0e:f6:41:bb:
d4:e6:03:65:d1:9f:1d:99:81:2b:7f:dd:bd:6a:1d:63:49:98:
1b:24:88:77:41:b8:c1:40:c3:12:d3:6e:6f:1f:41:10:64:57:
06:53:c1:fc:26:f5:75:c3:9a:d4:7e:60:34:e6:bd:cc:c3:0d:
f6:6f:72:d1:d6:d9:fb:91:23:1a:42:d6:4a:81:20:ca:08:e9:
c6:80:d8:02:bb:1b:23:90:55:b5:97:1b:ef:a1:5b:1b:be:49:
05:8c:47:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net