Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/GvWU7eZamVvazZtWUoco1OLF2MQ.roa
File: GvWU7eZamVvazZtWUoco1OLF2MQ.roa (raw, json)
Hash identifier: 9kEJ/d7rwclzCBcSORu1ByXHG+IDCNPxceZqglg+1Hw=
Subject key identifier: 1A:F5:94:ED:E6:5A:99:5B:DA:CD:9B:56:52:87:28:D4:E2:C5:D8:C4
Certificate issuer: /CN=52a59bf043080306359f5a29491f545b07051c05
Certificate serial: 01942747E38BB1EB2508F5DB707999E39281
Authority key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/GvWU7eZamVvazZtWUoco1OLF2MQ.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28716
IP address blocks: 46.183.232.0/21 maxlen: 21
185.133.216.0/22 maxlen: 22
185.133.216.0/24 maxlen: 24
185.133.217.0/24 maxlen: 24
185.133.218.0/24 maxlen: 24
185.133.219.0/24 maxlen: 24
2a03:9c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e3:8b:b1:eb:25:08:f5:db:70:79:99:e3:92:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a59bf043080306359f5a29491f545b07051c05
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1af594ede65a995bdacd9b56528728d4e2c5d8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:64:a9:9b:ef:e3:bf:25:56:07:ab:14:cb:
86:92:32:a3:c5:2c:dc:db:d0:44:6c:65:15:2e:fc:
7a:2f:9d:90:c7:cb:a0:1f:41:3d:69:45:64:5a:54:
31:6f:db:0e:af:7a:20:c8:9b:5e:f8:cf:ef:50:e2:
6d:08:a9:c8:12:12:1e:18:0a:67:cf:17:75:b3:d6:
a2:20:6f:25:e9:cf:0a:58:02:9b:9f:91:ca:33:a1:
f0:63:8c:53:e7:0d:4a:66:d9:09:22:6a:b9:cc:81:
78:96:2d:15:cc:0e:21:84:92:96:6c:e2:79:50:8e:
0f:d8:51:4a:fe:2f:ac:e2:89:a7:eb:a9:40:38:c8:
9a:7f:6c:f4:74:ce:c9:48:43:b7:dc:e9:33:c8:b7:
25:a1:8c:cb:2c:e8:17:c3:aa:9e:02:36:b0:de:d7:
d8:3b:cc:7a:3c:45:5c:f0:4b:fe:fd:08:5c:9f:ed:
27:dd:5c:47:b5:91:96:61:46:ef:eb:7b:73:2c:21:
88:11:ae:0d:d6:f1:6b:8c:cc:42:d2:c6:2d:70:f9:
49:82:5a:42:88:12:1c:00:3c:38:49:ed:c4:3a:06:
ab:a2:b6:ef:c5:85:1a:1b:1a:38:11:05:e4:12:1b:
a7:a1:97:79:28:05:19:d0:58:86:84:16:52:15:29:
34:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F5:94:ED:E6:5A:99:5B:DA:CD:9B:56:52:87:28:D4:E2:C5:D8:C4
X509v3 Authority Key Identifier:
keyid:52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/GvWU7eZamVvazZtWUoco1OLF2MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.232.0/21
185.133.216.0/22
IPv6:
2a03:9c0::/32
Signature Algorithm: sha256WithRSAEncryption
34:80:51:41:2c:42:9a:24:fe:8b:21:18:65:74:8a:1f:d5:0d:
1c:04:8f:b6:3f:e0:8f:ca:5e:b1:da:d5:f6:ad:66:1b:15:9b:
4e:02:ba:79:61:f2:44:3f:4e:1b:37:93:d4:c1:2b:0e:35:e6:
00:34:ec:e5:c7:a5:ce:54:ff:16:e2:c4:89:3c:cb:fb:f0:54:
df:7b:fb:59:88:f4:9a:86:36:11:18:fc:4f:33:8d:d8:86:ee:
a8:3c:7d:59:19:79:cf:fc:d8:22:5b:7b:eb:fa:e1:8a:b6:00:
53:d5:c4:bd:8c:ce:31:bb:51:80:7d:14:57:d6:fa:71:f8:14:
10:28:7a:82:2d:7a:06:4c:d4:56:66:62:b8:0d:af:96:fa:03:
1a:d6:33:9d:5d:08:c6:ea:29:58:b2:3f:56:c1:1a:f5:66:02:
1e:bc:f3:7c:b5:8d:c5:05:78:85:70:33:74:2a:73:ae:d0:4d:
49:85:76:dd:63:07:77:7b:ac:b1:62:62:9d:4c:af:3d:c6:e5:
7c:e9:1a:d2:58:16:9e:6a:e6:d3:55:b8:92:52:e2:4d:82:67:
69:32:85:ac:1b:8b:b2:f6:6e:e5:a4:58:8f:40:de:37:cd:42:
93:92:78:b8:51:e4:43:b4:80:c6:b9:5c:ac:8d:3a:92:7f:2b:
3b:28:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net