Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/iX7h5l3sV_d51o_IUpABQgz2jEE.roa
File: iX7h5l3sV_d51o_IUpABQgz2jEE.roa (raw, json)
Hash identifier: 7mUD+DdFdg7I8P+Syen4M+Sxp4GaWG8BiuGQo7fDMq4=
Subject key identifier: 89:7E:E1:E6:5D:EC:57:F7:79:D6:8F:C8:52:90:01:42:0C:F6:8C:41
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 0194214448B51BD52FB34074091D00F0B6C6
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/iX7h5l3sV_d51o_IUpABQgz2jEE.roa
Signing time: Wed 01 Jan 2025 09:48:30 +0000
ROA not before: Wed 01 Jan 2025 09:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201035
IP address blocks: 46.253.240.0/20 maxlen: 24
46.253.240.0/23 maxlen: 23
46.253.240.0/24 maxlen: 24
46.253.241.0/24 maxlen: 24
46.253.244.0/22 maxlen: 22
46.253.244.0/23 maxlen: 23
46.253.244.0/24 maxlen: 24
46.253.245.0/24 maxlen: 24
46.253.246.0/23 maxlen: 23
46.253.246.0/24 maxlen: 24
46.253.247.0/24 maxlen: 24
46.253.248.0/23 maxlen: 23
46.253.248.0/24 maxlen: 24
46.253.249.0/24 maxlen: 24
46.253.254.0/23 maxlen: 23
46.253.254.0/24 maxlen: 24
46.253.255.0/24 maxlen: 24
185.209.104.0/22 maxlen: 22
185.209.104.0/23 maxlen: 23
185.209.104.0/24 maxlen: 24
185.209.105.0/24 maxlen: 24
185.209.106.0/23 maxlen: 23
185.209.106.0/24 maxlen: 24
185.209.107.0/24 maxlen: 24
2a04:1c40::/29 maxlen: 48
2a04:1c40::/30 maxlen: 30
2a04:1c40::/31 maxlen: 31
2a04:1c40::/32 maxlen: 32
2a04:1c40::/33 maxlen: 33
2a04:1c40:c000::/34 maxlen: 34
2a04:1c41::/33 maxlen: 33
2a04:1c42::/32 maxlen: 32
2a04:1c42::/34 maxlen: 34
2a04:1c42::/40 maxlen: 40
2a04:1c42:4000::/34 maxlen: 34
2a04:1c42:c000::/34 maxlen: 34
2a04:1c44::/32 maxlen: 34
2a04:1c47:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:48:b5:1b:d5:2f:b3:40:74:09:1d:00:f0:b6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=897ee1e65dec57f779d68fc8529001420cf68c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ac:2f:34:5e:81:4f:d6:6d:0d:70:a6:b2:45:
70:4a:89:3f:51:a9:5e:2f:a2:7d:2b:44:94:65:4a:
00:31:8f:bb:80:69:37:be:8e:44:8a:ca:b0:df:4d:
80:7e:04:25:78:94:ac:9b:9c:d5:4e:a0:82:b7:8e:
b9:07:9d:a2:d3:be:d6:2f:81:41:b0:38:cf:d3:65:
91:78:3b:db:63:26:e3:9f:8a:02:a5:d4:ea:8f:ef:
26:c1:d4:86:a4:ab:64:21:c6:b1:87:f0:27:88:33:
ba:a5:2f:4c:ba:60:d5:79:9d:39:44:a1:83:9a:1a:
6c:ed:2d:ab:0e:8a:d3:31:f2:b0:a2:22:6b:06:7a:
a8:21:cb:6b:43:2f:ee:04:5a:ef:5d:b4:eb:aa:98:
3d:48:ae:c0:b9:7f:57:c1:71:0e:05:35:1d:a0:65:
c6:37:16:80:55:20:4f:04:4a:b7:13:d0:86:84:dc:
34:e2:cf:28:67:13:5b:55:80:85:68:27:31:d7:83:
02:85:b1:4f:1c:41:83:cc:47:c5:8b:af:50:ad:c1:
24:a3:68:f4:b5:ef:cc:02:a0:a0:ef:dc:1f:d8:4a:
5b:de:3e:06:5f:0e:1e:ff:66:09:ba:85:1e:e8:b6:
60:63:b4:1a:89:97:45:6f:a4:24:02:b0:23:c7:3a:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7E:E1:E6:5D:EC:57:F7:79:D6:8F:C8:52:90:01:42:0C:F6:8C:41
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/iX7h5l3sV_d51o_IUpABQgz2jEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.240.0/20
185.209.104.0/22
IPv6:
2a04:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
14:79:a6:a9:ac:25:f0:3a:07:86:06:78:ff:cf:8f:da:ee:38:
01:40:1d:52:e9:d4:76:3b:aa:f9:69:2c:ef:13:ba:b0:25:cc:
76:ed:78:8b:b8:8c:16:68:0d:d1:e1:3e:45:e2:bd:24:7b:36:
cc:ab:67:5c:3f:2a:2c:8f:59:df:fa:e4:3a:b8:1b:0e:8f:e8:
78:15:15:e2:11:dd:f2:ad:93:75:67:02:4c:ee:a0:d6:22:e1:
78:fb:d6:f7:11:bd:6d:38:7d:cd:1d:e8:29:54:70:a9:b6:2a:
b8:d5:86:14:f9:d5:62:6a:b7:e4:b9:10:30:f2:4d:48:bb:67:
ad:73:b3:8a:04:e1:6f:58:0b:9e:00:40:03:88:12:37:9c:5c:
60:90:c6:ee:84:a6:4a:3d:03:70:e8:1f:61:38:ab:ed:1f:81:
41:56:36:a3:fa:96:0e:fe:bc:6a:c3:10:26:10:58:31:b2:92:
25:bc:d9:ce:b1:61:cf:81:87:e8:49:12:dd:c5:c9:8b:6c:db:
2e:d8:f9:f6:3e:e5:b8:48:7f:83:ef:4d:d7:d2:23:da:21:44:
7b:36:5d:57:ac:82:8e:8c:8a:94:42:fe:c7:21:f7:f9:84:99:
18:40:3d:20:9d:1d:da:e4:68:47:66:f7:45:61:17:d8:26:60:
c6:11:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net