Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/kqmUwVdGk1LkjvL-upU9QhBrTk8.roa
File: kqmUwVdGk1LkjvL-upU9QhBrTk8.roa (raw, json)
Hash identifier: ljaTHQhywA3lYtK1TIsMdme1hiJbfaCWwfGaCBoPJAY=
Subject key identifier: 92:A9:94:C1:57:46:93:52:E4:8E:F2:FE:BA:95:3D:42:10:6B:4E:4F
Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial: 019425FDECEB47D1429240EAB1C9D37F3797
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/kqmUwVdGk1LkjvL-upU9QhBrTk8.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51764
IP address blocks: 46.235.48.0/24 maxlen: 24
46.235.49.0/24 maxlen: 24
46.235.50.0/24 maxlen: 24
46.235.51.0/24 maxlen: 24
46.235.54.0/24 maxlen: 24
46.235.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ec:eb:47:d1:42:92:40:ea:b1:c9:d3:7f:37:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92a994c157469352e48ef2feba953d42106b4e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:af:e2:18:2a:bd:1b:b7:c4:2f:e8:fe:cf:93:
ab:68:27:20:25:70:9b:9a:ee:fe:a4:cc:fe:32:d9:
19:68:50:a7:0d:dd:9e:0a:bd:26:12:d2:50:57:f6:
d2:87:af:ff:5a:12:5a:85:b2:13:97:11:a0:33:57:
57:78:f1:1f:9c:7a:27:c3:9e:72:23:17:89:81:e5:
71:87:55:8b:a8:8d:35:29:ec:d8:13:5d:d4:11:63:
5b:b1:cc:5a:06:36:dc:56:36:63:f1:91:85:03:36:
1a:07:d0:22:39:0c:de:c2:ee:9f:91:0a:67:77:51:
76:e3:0f:cb:85:7a:4b:4c:2a:ef:db:9c:3c:0f:78:
a5:54:de:d1:1e:5f:8c:c9:93:cf:f8:ab:cb:9d:a8:
01:1a:84:63:56:81:b5:ee:77:29:e9:42:75:3b:8f:
af:d0:cd:86:cf:11:d3:67:f0:cb:2b:d9:97:61:b5:
ab:23:45:1c:5f:34:03:be:43:fe:e0:4f:f9:e7:75:
93:01:4e:9c:19:36:cf:2a:4e:2b:34:e6:b7:88:64:
1b:b5:e9:81:83:70:f6:31:32:6b:51:2b:36:12:87:
e6:2e:7a:39:a4:1d:f1:3b:ed:f0:73:0e:e6:a6:fb:
ae:e6:95:8e:3f:dd:5f:3c:48:e4:67:76:8f:8f:93:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A9:94:C1:57:46:93:52:E4:8E:F2:FE:BA:95:3D:42:10:6B:4E:4F
X509v3 Authority Key Identifier:
keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/kqmUwVdGk1LkjvL-upU9QhBrTk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.48.0/22
46.235.54.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:5e:9f:1a:8f:72:a5:1d:62:91:2d:d7:c5:eb:d3:7d:74:0a:
f6:d6:d5:26:35:e8:72:e4:1a:e6:1d:31:ea:f5:d8:2a:16:70:
6a:4e:5d:10:ab:85:b7:be:b3:f0:fd:da:37:9b:25:29:00:12:
5a:ad:d6:69:ea:c4:b6:48:e6:cf:4d:de:f4:a7:f4:91:5e:f1:
3a:5d:72:ed:2d:79:2d:35:cc:a0:7a:98:1e:14:d4:14:79:6c:
d2:87:8e:65:b4:53:70:32:a4:9d:09:76:5a:5f:6b:7d:5d:92:
66:4e:de:c3:5a:d0:3f:99:28:fa:30:b9:a2:95:bc:b1:46:39:
de:e9:b1:7d:28:d1:25:e8:06:c0:6c:3e:20:4b:b2:32:41:f4:
69:86:eb:bd:7b:9c:f9:36:04:c0:5f:a9:1d:89:f2:c4:4c:2e:
c9:ea:78:8d:ac:8b:f9:2d:b7:36:98:f7:fe:e0:70:55:00:0b:
2a:d6:65:39:35:b2:24:12:50:8a:5f:11:1f:93:b8:a9:1c:bd:
b0:8b:06:28:5f:64:97:60:37:43:60:d4:17:49:f2:f5:4a:36:
9e:15:36:27:8c:2e:c8:db:ca:2b:de:b1:42:35:b8:3f:bb:d7:
0b:4e:74:f3:05:df:9f:de:dd:a9:bb:d8:f1:a7:af:bb:36:a0:
50:05:66:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net