Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/cObImnIoQoiLVyP9x--GVap2GkM.roa
File: cObImnIoQoiLVyP9x--GVap2GkM.roa (raw, json)
Hash identifier: bO+Q27weBg0SDz9xPqlXo6tY9cdxQ8Yt4y7PlrRbjHY=
Subject key identifier: 70:E6:C8:9A:72:28:42:88:8B:57:23:FD:C7:EF:86:55:AA:76:1A:43
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 01957E6011B536534ED737A64AAC2B01AADC
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/cObImnIoQoiLVyP9x--GVap2GkM.roa
Signing time: Mon 10 Mar 2025 04:46:20 +0000
ROA not before: Mon 10 Mar 2025 04:46:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8932
IP address blocks: 46.36.124.0/22 maxlen: 24
46.162.220.0/22 maxlen: 24
178.78.184.0/21 maxlen: 24
185.48.240.0/22 maxlen: 24
2a00:cc40:1::/48 maxlen: 48
2a00:cc40:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:60:11:b5:36:53:4e:d7:37:a6:4a:ac:2b:01:aa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Mar 10 04:46:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70e6c89a722842888b5723fdc7ef8655aa761a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:1b:7e:86:c5:7d:f8:aa:21:1d:51:c5:e4:
bb:56:b8:8c:79:62:fb:69:77:ea:6e:41:78:57:e4:
8f:28:4f:85:42:04:cb:bf:09:e9:59:06:35:d3:c1:
ca:9f:ad:c1:34:07:43:ca:6b:54:a2:5e:4e:dc:50:
7a:89:c4:48:ce:a4:7a:7c:5d:00:7a:37:b2:ff:50:
68:3e:0c:1c:5d:29:d0:97:9a:e4:cb:7c:27:97:2e:
65:22:16:8b:cc:f0:06:f7:f3:42:bc:07:4e:66:b8:
63:04:94:31:ea:80:d4:48:6d:7b:7d:28:d8:60:2e:
41:f8:60:37:d1:cb:75:74:b9:ef:c2:b8:0b:19:59:
c6:76:45:4f:f0:d1:14:43:85:a9:c9:4a:13:18:f6:
e7:bf:75:7e:4e:2a:7c:85:dc:02:3d:82:fc:a6:d6:
30:b3:a3:c5:bc:b3:4f:9a:df:a5:a5:4d:47:16:ec:
d9:c7:ea:05:d0:56:9d:e6:f3:6c:66:57:f2:f1:ed:
fa:3b:5d:50:9b:9f:9c:90:f4:2a:d8:7c:64:63:71:
f4:6f:7c:cf:96:e7:b1:e0:3d:8f:d6:ab:38:65:3a:
9e:63:81:9b:d8:ec:c2:ec:23:c1:a4:20:bd:d0:5b:
3c:ef:28:21:31:70:a6:13:56:b7:0f:2a:be:c0:fe:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E6:C8:9A:72:28:42:88:8B:57:23:FD:C7:EF:86:55:AA:76:1A:43
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/cObImnIoQoiLVyP9x--GVap2GkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.124.0/22
46.162.220.0/22
178.78.184.0/21
185.48.240.0/22
IPv6:
2a00:cc40:1::-2a00:cc40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
04:65:b8:92:f1:5b:f5:d4:39:ed:0d:e5:38:c2:69:2d:b0:e1:
46:1f:cc:79:5b:7a:10:b1:02:ca:22:50:2c:d7:cf:44:f7:17:
10:4d:4d:2f:7b:ba:f0:f6:67:2d:5c:95:73:9d:1e:7f:17:b5:
f6:ea:05:94:1d:92:ff:a4:c7:3f:f8:92:5b:a0:22:cc:81:03:
5b:d3:69:be:23:a5:10:a7:a6:27:95:cc:4f:9f:29:23:7f:d5:
55:9b:48:e2:fa:b3:3f:f9:b7:94:bb:08:32:5b:40:a3:89:27:
6f:a2:cf:d8:a3:50:d7:0b:4f:70:0e:25:e3:f9:2c:dc:2b:39:
94:d4:a5:f0:28:a5:4e:18:8b:e5:bf:b8:9b:27:de:ef:51:10:
a8:af:99:0a:1d:8a:3d:ff:77:f4:c8:0a:b9:ec:31:53:ff:f5:
fe:6d:db:7b:d4:ca:7e:7f:7e:2d:ba:b5:45:f1:65:d6:bf:ee:
82:8f:26:45:e5:c5:11:4a:3a:d3:43:6e:cc:81:36:3c:4f:29:
c4:27:0f:76:a4:a0:ab:c0:b2:66:fb:65:0b:8e:7c:45:15:c6:
34:26:6c:9a:3c:5c:af:26:28:52:f7:d2:a9:54:33:4a:8f:17:
bb:9f:28:9c:ef:70:f8:3b:73:02:d1:00:b6:7f:0e:db:d3:b0:
7d:b4:9b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net