Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa
File: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (raw, json)
Hash identifier: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=
Subject key identifier: 81:F4:1E:CB:1E:90:EE:C8:D2:E1:7A:67:CB:D2:14:43:CB:50:C4:B6
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 0194252165C0A936A3775541234EB24126C3
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa
Signing time: Thu 02 Jan 2025 03:48:53 +0000
ROA not before: Thu 02 Jan 2025 03:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1241
IP address blocks: 46.12.0.0/16 maxlen: 24
46.246.128.0/17 maxlen: 24
62.1.0.0/16 maxlen: 24
77.49.0.0/16 maxlen: 24
79.103.0.0/16 maxlen: 24
130.43.0.0/17 maxlen: 24
188.4.0.0/16 maxlen: 24
193.92.0.0/16 maxlen: 24
194.219.0.0/16 maxlen: 24
195.74.224.0/19 maxlen: 24
212.54.192.0/19 maxlen: 24
212.251.0.0/17 maxlen: 24
213.16.128.0/17 maxlen: 24
2a02:2148::/29 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:65:c0:a9:36:a3:77:55:41:23:4e:b2:41:26:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 2 03:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81f41ecb1e90eec8d2e17a67cbd21443cb50c4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:d5:48:11:6e:87:56:39:74:9d:c8:f0:1e:
c0:69:f0:ce:bf:8d:d4:b3:ee:6d:fe:a0:ea:65:43:
80:4e:32:5a:35:2c:2e:84:dd:e8:c8:af:0c:4d:ec:
a2:0a:67:83:4c:9c:41:57:c2:61:2f:33:ca:6f:ab:
46:36:5d:b5:6f:84:85:0c:da:ab:61:a6:3d:be:33:
1f:65:24:c2:27:32:f3:89:b7:e4:2b:08:8a:53:e4:
cc:fc:dd:10:0a:4c:98:b6:56:53:18:a8:28:16:7b:
71:c8:eb:86:17:28:2e:7c:c5:f9:39:e4:cd:ac:eb:
eb:11:7a:8f:a7:3e:10:2a:c0:33:6c:b8:8d:7a:bd:
97:38:2d:e1:87:58:55:0d:5a:59:45:0b:1d:ec:b0:
ab:b9:0f:5e:0f:1a:fc:27:86:d7:71:79:03:2c:06:
7b:bb:3b:2f:d5:4a:10:42:36:35:58:73:26:69:f8:
04:92:5f:f4:40:21:bb:e8:04:29:da:9c:08:be:a6:
32:60:0f:1f:98:6d:ae:68:e0:ac:99:44:05:59:42:
cc:58:dc:cf:10:c4:2c:a2:6e:66:81:f6:82:26:9b:
9e:9b:55:e5:f0:7e:46:4c:18:28:72:d3:53:d1:22:
86:bb:02:e3:56:90:f2:fe:b0:e9:6a:ca:3c:14:49:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F4:1E:CB:1E:90:EE:C8:D2:E1:7A:67:CB:D2:14:43:CB:50:C4:B6
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.12.0.0/16
46.246.128.0/17
62.1.0.0/16
77.49.0.0/16
79.103.0.0/16
130.43.0.0/17
188.4.0.0/16
193.92.0.0/16
194.219.0.0/16
195.74.224.0/19
212.54.192.0/19
212.251.0.0/17
213.16.128.0/17
IPv6:
2a02:2148::/29
Signature Algorithm: sha256WithRSAEncryption
bd:cc:a2:23:f4:5d:bb:fa:44:64:36:65:74:15:19:89:88:04:
59:8b:f4:1b:df:ba:49:aa:5c:ba:0c:ec:36:fe:ea:64:4b:1e:
a4:c6:79:57:51:a8:db:01:d2:cf:fb:1f:28:2a:7e:f0:d9:95:
5a:47:98:cc:52:28:28:f4:35:9f:cf:01:ac:68:77:f0:f0:8e:
bf:c9:a8:72:1f:da:24:0a:b6:ff:59:22:8c:81:0f:ce:2f:46:
db:0f:cd:b8:ed:39:17:b2:ec:04:1b:39:82:a9:cc:b3:6c:cf:
0e:95:16:52:43:09:dd:a5:ea:d1:d0:fa:ef:3b:07:a1:e1:f4:
1a:7b:fc:63:1a:ba:01:da:7f:9e:60:a4:78:a5:26:06:5e:5e:
85:bc:3e:21:b4:79:b3:51:a0:95:88:78:11:01:e7:10:04:a2:
85:76:e3:0c:ff:88:d4:27:a9:11:a0:bb:bb:9f:b8:9c:9a:a2:
10:f3:3b:42:34:e5:7b:5e:88:d6:02:c5:fb:a0:6f:db:e3:ed:
62:fe:17:c6:1f:da:a5:b7:56:cd:93:a1:86:76:0f:45:29:71:
2b:ea:bf:08:c5:9b:54:8c:bf:f1:3f:fe:20:51:03:67:e5:aa:
f0:58:1c:5a:0b:cb:b7:34:fb:b1:0c:9e:55:42:71:f5:3a:e6:
75:b4:58:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net