Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/0bwTTnBwoc2_yeiCZSrmukFpa98.roa
File: 0bwTTnBwoc2_yeiCZSrmukFpa98.roa (raw, json)
Hash identifier: yFkhE2XktYrWBrn6EmrqtgFzZBMcDiKsauGCorzriGU=
Subject key identifier: D1:BC:13:4E:70:70:A1:CD:BF:C9:E8:82:65:2A:E6:BA:41:69:6B:DF
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 0195F756675CCEEC4E9563B273196972DE44
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/0bwTTnBwoc2_yeiCZSrmukFpa98.roa
Signing time: Wed 02 Apr 2025 16:29:49 +0000
ROA not before: Wed 02 Apr 2025 16:29:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59886
IP address blocks: 46.254.48.0/24 maxlen: 24
46.254.49.0/24 maxlen: 24
46.254.50.0/24 maxlen: 24
46.254.51.0/24 maxlen: 24
46.254.52.0/24 maxlen: 24
46.254.53.0/24 maxlen: 24
46.254.54.0/24 maxlen: 24
46.254.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f7:56:67:5c:ce:ec:4e:95:63:b2:73:19:69:72:de:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Apr 2 16:29:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1bc134e7070a1cdbfc9e882652ae6ba41696bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:2e:5b:41:e9:c9:93:40:6f:5a:77:0b:4c:
99:88:83:20:f3:fa:6f:00:17:a4:72:31:8b:c4:05:
a9:d3:df:42:54:26:7f:59:90:1d:2e:69:2b:85:7a:
ee:2e:4b:55:bc:b7:2f:62:dc:14:00:08:fd:40:92:
ae:c7:49:26:e0:82:8f:29:5c:33:92:ec:99:bc:f7:
a5:7a:43:56:b9:ab:0e:21:0e:5c:04:2f:32:4f:90:
4d:1a:9d:90:1b:82:e1:29:3a:0a:90:45:e0:d0:56:
28:d6:0c:bd:5a:2a:9f:43:3f:9c:51:d3:91:52:21:
d0:46:be:fc:41:58:ff:63:10:77:11:e1:1b:1d:5b:
df:09:ba:ad:53:2a:95:1e:52:9e:26:9a:b3:fa:7f:
96:ad:92:eb:c9:8e:a7:b1:ba:e1:58:e3:28:d6:df:
61:20:87:3a:46:d9:b0:1b:be:c6:4a:2e:a2:cd:24:
be:cd:1a:2e:43:2b:49:fd:07:2e:46:20:87:9e:cf:
1e:9e:92:77:b1:bb:10:07:4c:a5:dc:23:22:70:ba:
5a:fa:86:e8:48:84:34:7f:f9:7a:f9:2c:73:e7:fe:
e4:b8:35:d8:47:ef:cd:57:65:d4:da:05:45:3f:57:
f2:4a:ba:cc:30:33:6f:db:f2:ad:b8:f8:da:0e:4c:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BC:13:4E:70:70:A1:CD:BF:C9:E8:82:65:2A:E6:BA:41:69:6B:DF
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/0bwTTnBwoc2_yeiCZSrmukFpa98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.48.0/21
Signature Algorithm: sha256WithRSAEncryption
29:d9:c2:34:04:ad:09:f8:c0:41:9c:81:f1:24:5e:78:fd:b5:
13:10:c7:fa:5d:32:dc:50:99:0b:eb:63:90:41:54:7c:23:65:
0a:ab:e6:8e:22:eb:a4:53:fe:6a:07:cb:87:2a:06:a3:35:0a:
2f:61:ee:58:1a:94:37:09:be:b5:2d:eb:f9:ba:e2:74:cd:6e:
bd:91:1d:94:75:49:e5:69:d3:e1:df:d6:52:c9:34:9a:67:cf:
83:4a:76:67:b5:ea:f0:95:2c:00:9e:ca:6a:4a:71:df:3c:04:
b5:62:e8:70:38:45:56:a7:3d:5e:e4:f2:7a:0b:0a:ed:2f:36:
5a:e8:e6:a7:fd:bd:f5:58:d7:ed:c3:12:53:1b:4d:90:91:8d:
f5:20:07:bf:5f:87:80:6b:f1:35:13:a6:12:19:ff:cd:f4:0b:
2d:f7:53:b1:29:72:34:40:20:dd:7b:c2:51:66:10:71:68:b5:
64:e4:01:05:06:d4:6c:46:27:32:99:cd:67:f1:99:4e:ce:3c:
d3:7e:6b:8b:82:ff:6e:cf:d5:c8:a3:a0:e2:52:74:48:54:29:
a3:a4:c3:87:27:8a:a8:48:9b:ad:2c:77:fe:8c:b4:13:2c:f5:
ce:a5:a2:3c:d6:02:e0:b0:81:39:d8:38:b2:be:74:1a:3f:1c:
a8:9c:c8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net