Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/m58bu936joBld4DytknROe5jx80.roa
File: m58bu936joBld4DytknROe5jx80.roa (raw, json)
Hash identifier: NrLcVOqSqVsHWkNiV+l2TPI8nTmNKxpp0ie7MxAwGUE=
Subject key identifier: 9B:9F:1B:BB:DD:FA:8E:80:65:77:80:F2:B6:49:D1:39:EE:63:C7:CD
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 0194221F67EF60799B97E63F82B4DC427C49
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/m58bu936joBld4DytknROe5jx80.roa
Signing time: Wed 01 Jan 2025 13:47:50 +0000
ROA not before: Wed 01 Jan 2025 13:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197369
IP address blocks: 46.16.40.0/21 maxlen: 21
46.16.45.0/24 maxlen: 24
46.16.47.0/24 maxlen: 24
188.240.4.0/22 maxlen: 22
188.240.4.0/24 maxlen: 24
188.240.5.0/24 maxlen: 24
188.240.6.0/24 maxlen: 24
188.240.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:67:ef:60:79:9b:97:e6:3f:82:b4:dc:42:7c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Jan 1 13:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b9f1bbbddfa8e80657780f2b649d139ee63c7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:0a:5d:a0:32:81:bc:14:f9:f9:d0:86:33:
72:40:6a:fd:7d:ce:f7:de:8a:f0:5c:d2:f1:bd:02:
3b:2d:ea:1c:51:ea:c4:bc:95:eb:c2:17:73:45:a9:
37:57:15:44:b0:84:53:84:27:05:62:76:2c:3d:82:
52:1e:5b:64:51:c5:e5:de:82:0f:63:a2:75:6c:54:
8d:62:9d:78:f0:c0:00:ad:9c:4d:9a:be:7c:08:c1:
34:13:36:e9:08:47:47:78:a4:99:9b:ac:e2:4c:db:
60:59:72:03:6e:7b:65:0a:4d:cc:f7:28:61:14:3e:
89:a2:eb:45:d3:8f:b2:e3:ba:6e:93:f0:b7:c3:33:
d3:65:90:f2:62:83:78:fb:94:42:2e:73:8e:40:be:
f3:1c:3a:1b:ff:83:0a:97:b4:2a:8f:6f:aa:22:18:
a8:a5:5e:5d:82:b2:9d:65:ff:0c:c4:33:a0:00:20:
47:aa:4f:66:a3:94:d9:66:32:18:67:3c:61:f9:0d:
ea:41:ca:3f:59:8b:15:bb:1c:e6:e5:a0:9e:87:46:
59:b1:bb:7d:7d:f2:a1:c1:1c:09:35:f9:cf:f8:a0:
dc:0c:bb:fc:24:bd:ff:68:52:72:b3:3a:58:f2:d0:
2d:14:38:28:c1:4d:86:87:cc:a6:84:42:45:9c:84:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9F:1B:BB:DD:FA:8E:80:65:77:80:F2:B6:49:D1:39:EE:63:C7:CD
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/m58bu936joBld4DytknROe5jx80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.40.0/21
188.240.4.0/22
Signature Algorithm: sha256WithRSAEncryption
93:c0:fb:45:98:9e:81:ec:ea:9f:8a:c3:68:48:54:cd:fe:df:
ee:49:22:06:dd:e9:84:36:6e:a1:b3:78:55:51:1e:11:02:0d:
23:06:cc:7b:b9:e1:46:cc:df:55:47:5b:c0:12:87:bd:17:92:
e1:b3:61:70:e2:aa:27:e0:ba:c1:08:f6:dc:38:86:41:96:18:
df:02:75:e5:9e:ef:1e:62:2c:a7:83:f8:95:58:54:96:ec:e1:
6c:bd:7f:d7:88:35:e1:b0:86:76:d8:a8:4f:e6:e6:21:89:5c:
df:83:98:b0:a3:9b:c9:e6:bd:72:93:79:89:a9:97:64:81:04:
24:e6:e4:86:9f:40:5c:a3:ee:26:d8:5b:e1:3b:dd:8a:a7:2f:
5f:6b:25:e4:56:f7:78:3d:01:2a:f6:05:6e:a3:72:68:4a:d1:
92:59:be:06:0f:fb:1a:43:5b:2e:7d:a9:cf:f2:2a:dd:6b:7a:
13:cc:11:69:9c:79:1a:77:3c:fb:d5:d7:4f:40:de:40:53:2a:
55:51:cb:cb:99:48:ba:60:41:4f:c8:9d:35:07:a2:f0:ff:9c:
b2:08:39:26:09:a2:20:b0:65:f3:c4:09:97:89:6e:92:23:37:
ef:52:95:98:20:19:8c:a4:c2:61:d9:ea:3d:2d:b2:f8:5f:09:
56:41:81:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net