Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/b__HqKu-AMKs2UTm6p-v2OEs7OA.roa
File: b__HqKu-AMKs2UTm6p-v2OEs7OA.roa (raw, json)
Hash identifier: f7396FR/6MUlNoG4o7cmoviarkI5X6EgtZeJr/g+J2o=
Subject key identifier: 6F:FF:C7:A8:AB:BE:00:C2:AC:D9:44:E6:EA:9F:AF:D8:E1:2C:EC:E0
Certificate issuer: /CN=4aa6dc84f46b690721485a4405bfc939da254969
Certificate serial: 0195B8826BB2E65C7FED1EEB1DEA3E68D410
Authority key identifier: 4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/b__HqKu-AMKs2UTm6p-v2OEs7OA.roa
Signing time: Fri 21 Mar 2025 11:41:49 +0000
ROA not before: Fri 21 Mar 2025 11:41:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197701
IP address blocks: 46.245.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:82:6b:b2:e6:5c:7f:ed:1e:eb:1d:ea:3e:68:d4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa6dc84f46b690721485a4405bfc939da254969
Validity
Not Before: Mar 21 11:41:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fffc7a8abbe00c2acd944e6ea9fafd8e12cece0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:28:a6:66:d2:18:c1:69:7f:33:f8:22:a9:4d:
fe:63:a0:a8:bb:cd:0c:8c:31:5d:04:fb:c6:45:01:
13:e9:3d:23:87:b6:78:34:e8:d0:2c:01:c7:28:51:
32:1f:67:3f:ca:77:6e:db:79:a2:51:de:6a:b1:e5:
b8:6f:ea:28:e3:e2:52:2b:d7:21:a9:04:5f:18:e2:
ac:79:49:61:1b:78:61:db:b6:11:1f:77:22:fa:f6:
6d:90:71:a2:47:10:55:c8:b6:a6:4a:30:c6:25:19:
4f:a7:08:50:6f:f8:d7:a8:39:a3:18:a6:36:7f:27:
aa:cb:29:cc:01:0d:5b:0a:a2:1b:2c:0b:f9:cc:0c:
f7:87:7b:ec:4d:3c:34:a8:43:b9:a1:33:12:1f:ec:
5f:eb:bd:0e:78:1d:ee:87:1a:fd:db:1a:13:19:04:
b6:cd:6c:b2:12:ff:60:85:f7:d8:56:b0:cf:e5:a5:
a2:9a:55:57:4d:c0:ee:c3:94:7b:4e:4a:37:02:1b:
53:cd:ee:a6:1a:5f:76:ad:e0:b6:e8:0a:f9:6f:42:
b7:d5:8e:51:51:b2:d5:13:d8:3d:19:d7:bb:6f:fd:
f9:e0:eb:a0:d1:ba:8d:1f:9a:0d:d6:67:01:fa:24:
91:5c:3e:11:95:d1:1a:33:81:ff:4e:7f:1d:4d:1a:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FF:C7:A8:AB:BE:00:C2:AC:D9:44:E6:EA:9F:AF:D8:E1:2C:EC:E0
X509v3 Authority Key Identifier:
keyid:4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/b__HqKu-AMKs2UTm6p-v2OEs7OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2a:63:de:2e:16:92:75:d8:c7:9b:1d:80:0b:24:77:3d:ce:
c5:89:5c:fe:c1:5e:37:a7:e6:33:d0:4c:2d:30:96:57:f9:89:
92:a0:55:ff:87:07:1b:8f:ce:53:56:fe:70:5d:06:c9:da:79:
4a:db:37:c1:9d:7c:c5:df:55:21:cb:0a:40:f7:b3:c1:34:4a:
e1:b8:69:bf:bd:99:ca:16:b1:7a:9a:d3:58:0c:d8:0d:ef:d5:
b9:53:7f:cd:89:2f:80:ba:1a:55:c0:28:30:ca:61:3d:4b:90:
3d:db:a8:19:4a:cb:b2:81:de:e4:37:a9:98:43:9b:da:df:6a:
70:72:18:47:b9:f7:5d:70:1c:a8:56:f1:40:dd:60:fd:1d:59:
68:97:97:e7:fa:09:e3:19:d8:12:f6:1c:44:f4:c8:81:09:69:
d7:0d:59:25:3d:28:ca:d6:fd:c7:c0:a0:c8:37:57:57:0a:94:
10:e5:db:25:44:ae:62:9c:b9:b6:53:b6:ec:a9:83:09:ca:df:
1b:6e:77:fb:b3:33:cf:20:ac:18:da:6e:9c:9b:5a:ea:83:3c:
ee:0e:2b:f3:de:23:f9:3e:f6:01:f1:f6:82:93:4d:b5:2b:ca:
ce:44:90:7c:1a:58:8c:6a:0a:5c:c3:ee:c8:3d:d8:cc:28:0a:
f6:26:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net