Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/zO1aOnWzpH8Vmp45J1jZtXxaKKw.roa
File: zO1aOnWzpH8Vmp45J1jZtXxaKKw.roa (raw, json)
Hash identifier: N6qZrGzU3tG6EdhOgnUHNSlOSI1pX79eNnDUPpj91So=
Subject key identifier: CC:ED:5A:3A:75:B3:A4:7F:15:9A:9E:39:27:58:D9:B5:7C:5A:28:AC
Certificate issuer: /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial: 0194221FCA8BAD07C532FBD2E984E6F4801D
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/zO1aOnWzpH8Vmp45J1jZtXxaKKw.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197208
IP address blocks: 46.28.112.0/21 maxlen: 21
194.31.3.0/24 maxlen: 24
194.76.29.0/24 maxlen: 24
194.99.56.0/24 maxlen: 24
2a01:6ac0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ca:8b:ad:07:c5:32:fb:d2:e9:84:e6:f4:80:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cced5a3a75b3a47f159a9e392758d9b57c5a28ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:49:54:89:38:af:eb:6b:6c:1a:1d:4f:66:
94:61:58:25:22:3e:8d:72:25:73:96:2b:bb:ff:d8:
97:35:cc:d9:4e:d3:16:ae:db:c1:4d:b9:22:4d:dd:
54:8f:f5:44:18:14:f5:04:36:1b:82:82:bb:62:45:
16:22:23:06:71:86:82:e0:80:d5:a3:25:8e:ef:fe:
e5:a6:78:d4:34:d8:cd:2e:b4:5b:e9:1a:ce:e7:d0:
da:f3:c9:e1:d9:06:27:9a:c1:c8:42:b2:96:cb:67:
ef:d6:34:b6:72:6f:83:ee:30:12:c3:4c:82:a9:14:
5b:dc:e0:1e:a2:3e:26:21:9c:5f:4b:5d:bd:20:57:
e6:b0:04:c6:7b:76:f3:53:19:a4:bb:99:3a:54:01:
c4:37:8f:61:90:25:a8:93:98:c0:e6:59:2b:c3:54:
43:96:7a:f0:c1:3b:f1:81:38:26:a7:36:f4:bc:00:
29:59:75:76:cd:51:0c:43:8b:f7:d0:72:20:a4:fd:
34:bd:ca:ff:3e:11:3c:1e:d7:bb:f9:37:8e:c0:6c:
59:67:64:a9:c4:a6:36:72:4e:1b:57:49:b4:d8:96:
6e:8b:92:16:09:b4:1b:01:20:a5:b1:83:7a:3b:45:
2f:f3:39:a2:e4:18:ff:ba:ec:83:2e:c1:ef:09:7e:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:5A:3A:75:B3:A4:7F:15:9A:9E:39:27:58:D9:B5:7C:5A:28:AC
X509v3 Authority Key Identifier:
keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/zO1aOnWzpH8Vmp45J1jZtXxaKKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.112.0/21
194.31.3.0/24
194.76.29.0/24
194.99.56.0/24
IPv6:
2a01:6ac0::/32
Signature Algorithm: sha256WithRSAEncryption
68:b0:b6:74:a0:1d:ee:77:e2:e0:c0:9f:59:73:e2:c8:03:4a:
88:ad:77:47:f1:0a:fa:44:d2:93:1a:e3:22:27:a5:2c:d3:57:
59:72:08:85:6d:14:18:c0:91:75:52:a9:01:9e:d8:6a:d4:dc:
89:7f:4b:d9:7a:0a:9f:b5:12:75:3b:32:bf:dc:83:c9:8c:b4:
41:8b:8c:38:a0:e7:21:40:c1:79:ad:81:0f:a8:e2:4d:f1:43:
82:15:21:13:ff:e3:f8:8a:1e:93:39:e7:1d:ca:91:ea:09:b6:
69:36:5c:47:c4:e3:9c:6b:6b:d9:8b:65:9b:41:4b:ed:20:b4:
18:06:fb:aa:15:71:f3:39:58:bf:19:a5:97:ae:08:d0:b9:c2:
b6:50:72:a5:eb:93:5b:f2:25:3e:7e:94:3b:93:64:92:26:28:
df:db:fe:20:f0:97:4a:7a:bf:fb:d6:58:f8:0e:d1:ba:8b:89:
c8:bc:cf:f1:bf:32:fc:69:96:d2:62:88:13:70:bb:79:c7:04:
68:cc:a0:58:c2:24:c1:c9:69:d6:b9:ed:a4:1e:a9:e4:4d:d5:
4d:27:2e:8c:3d:24:a1:c3:c7:39:18:7b:4e:27:f0:e9:94:3a:
5f:80:63:51:bf:7a:04:4c:e2:3b:2d:73:b3:05:36:b8:05:fe:
df:70:ac:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net