Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/wub3ojVvtYVNr5_D3zKLLbWF2_M.roa
File: wub3ojVvtYVNr5_D3zKLLbWF2_M.roa (raw, json)
Hash identifier: 0Ivv/JEf+s+UoAgsprFNMguw897KPBdxp9YKz2VJrNg=
Subject key identifier: C2:E6:F7:A2:35:6F:B5:85:4D:AF:9F:C3:DF:32:8B:2D:B5:85:DB:F3
Certificate issuer: /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial: 0194258F7CA2B5FBFBF37644697621CA9149
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/wub3ojVvtYVNr5_D3zKLLbWF2_M.roa
Signing time: Thu 02 Jan 2025 05:49:07 +0000
ROA not before: Thu 02 Jan 2025 05:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38972
IP address blocks: 46.254.24.0/22 maxlen: 22
46.254.24.0/24 maxlen: 24
46.254.25.0/24 maxlen: 24
46.254.26.0/24 maxlen: 24
46.254.27.0/24 maxlen: 24
80.251.144.0/21 maxlen: 21
80.251.147.0/24 maxlen: 24
80.251.150.0/24 maxlen: 24
80.251.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7c:a2:b5:fb:fb:f3:76:44:69:76:21:ca:91:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Validity
Not Before: Jan 2 05:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2e6f7a2356fb5854daf9fc3df328b2db585dbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:9e:9a:b2:01:e5:f8:8a:3e:0e:7c:c7:13:
cd:d5:fc:f0:bb:f4:b6:65:85:2c:9a:f7:c2:51:16:
04:51:bb:7a:33:3f:f8:f7:16:ff:e0:93:7e:9c:95:
8d:10:fe:2b:59:db:13:e2:d7:c3:62:78:a8:d8:b8:
90:cc:af:5b:43:8e:53:09:cc:38:17:15:f0:a7:91:
25:5e:ad:59:2d:e9:58:2e:85:28:89:f3:b7:b4:51:
16:84:f0:ca:6c:fb:95:6e:80:3c:8d:ab:e7:75:75:
fa:1d:7d:7d:1e:b7:c8:65:4e:1a:3d:62:39:77:1b:
54:36:2c:b8:dd:0c:11:e3:e9:b2:f0:84:b5:7c:6a:
51:63:bf:9d:ec:9f:b0:71:b7:d9:ee:8b:2a:67:1c:
4f:45:0f:8f:5b:78:6e:83:f6:7d:4a:55:bf:85:16:
1c:e7:3f:85:3f:ce:ad:d5:fc:20:bd:db:2f:75:c8:
b6:d4:6a:e6:f6:45:bf:41:42:19:df:ae:70:0d:be:
bb:05:26:2d:c0:9f:dd:c9:b8:b4:7f:b8:31:ee:1f:
fd:91:85:6c:37:ef:e2:84:2e:39:e6:95:6f:bf:eb:
9b:88:4a:30:26:4f:46:e5:9c:06:d8:cf:d7:3e:53:
d8:2b:98:10:b7:a4:ec:24:d4:d6:12:7d:bf:c3:76:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E6:F7:A2:35:6F:B5:85:4D:AF:9F:C3:DF:32:8B:2D:B5:85:DB:F3
X509v3 Authority Key Identifier:
keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/wub3ojVvtYVNr5_D3zKLLbWF2_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.24.0/22
80.251.144.0/21
80.251.154.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9e:4a:49:dc:58:d1:99:64:f4:e6:1d:9c:2b:f9:53:7d:b6:
cc:2d:41:e6:0e:76:28:54:d9:8b:c2:0e:df:39:85:92:7f:92:
45:6a:eb:a4:9b:89:f1:02:ca:81:c7:96:11:c6:eb:59:a3:3f:
ef:66:05:ff:ba:9b:8b:42:65:18:8c:ef:12:49:3c:52:60:f8:
11:cc:57:72:24:ad:c9:92:47:9c:1f:07:34:b6:d6:70:ce:a2:
a4:86:2a:0d:c6:5f:46:13:5f:3f:4f:ab:f8:01:97:95:1f:b0:
5f:cd:5c:cc:dd:1b:61:ed:3a:4f:45:c0:c5:c1:12:77:29:4e:
08:89:67:04:95:fa:a3:6d:c0:59:da:65:b6:0f:ba:61:9f:07:
27:51:a3:bc:8c:1f:ea:96:3e:a5:7c:4b:49:6a:3c:79:33:cb:
ae:2c:94:a0:ed:17:15:e4:50:82:63:5d:ac:42:bb:67:82:1b:
0c:01:0e:e0:20:81:b4:75:c2:fb:09:5a:d2:99:39:e3:52:17:
9c:57:dd:ab:5a:e6:ac:a6:e2:0f:fd:3d:92:be:22:1f:99:a4:
65:07:1c:dd:99:ef:70:ae:12:80:5b:78:bb:d2:ca:ba:ca:6c:
fb:a5:bc:69:38:9a:cc:c5:46:33:4f:de:a9:4e:c7:88:3c:99:
3e:41:6a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net