Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/4bVZoUiCbJaTBG7aA0p9xBgeM94.roa
File: 4bVZoUiCbJaTBG7aA0p9xBgeM94.roa (raw, json)
Hash identifier: MzCfFVB6xbhIQC2ta/MEsIETvDrpIdsUhLGtVjRSeig=
Subject key identifier: E1:B5:59:A1:48:82:6C:96:93:04:6E:DA:03:4A:7D:C4:18:1E:33:DE
Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial: 019424B2C778A354310A144D9D00B579BDB3
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/4bVZoUiCbJaTBG7aA0p9xBgeM94.roa
Signing time: Thu 02 Jan 2025 01:48:03 +0000
ROA not before: Thu 02 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52200
IP address blocks: 46.226.168.0/21 maxlen: 24
194.35.80.0/23 maxlen: 24
194.35.180.0/23 maxlen: 24
2a00:b600::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:c7:78:a3:54:31:0a:14:4d:9d:00:b5:79:bd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Validity
Not Before: Jan 2 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1b559a148826c9693046eda034a7dc4181e33de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:1d:44:36:fa:f1:8a:bf:92:cb:a1:32:a6:
44:8e:64:c4:63:ee:15:ea:81:72:a5:7c:0f:50:70:
ab:1b:45:6a:5e:16:66:fd:f3:bd:34:78:8c:2e:6e:
8a:6d:f9:b3:92:ff:c6:9d:8b:36:c1:29:ce:09:21:
e5:fd:5c:6e:4d:bb:1b:d3:65:19:89:23:43:6c:8e:
95:06:59:08:9f:88:39:ba:1a:45:c5:05:d5:cf:a5:
48:52:83:97:8a:05:87:cf:83:0c:66:2f:6c:17:23:
1f:57:ba:3d:61:1c:fd:2c:02:d1:50:e3:50:cb:7a:
87:6b:50:4a:51:47:be:5c:88:71:4b:69:b7:d0:d3:
7b:de:c4:9e:93:fc:69:71:19:14:33:52:d7:b1:de:
0b:37:e3:8d:81:5d:db:b8:b3:e9:45:3d:f8:73:22:
cb:99:00:45:05:05:62:5f:79:86:af:01:0d:ca:d8:
a7:a1:ad:d1:5e:57:8c:21:de:75:9c:75:fb:36:a4:
46:9e:53:ef:ff:64:2f:21:94:f0:2c:ae:82:c1:ea:
ce:f8:8e:5f:47:3d:ee:b2:04:d3:3e:2b:5e:6a:45:
26:d4:1d:ec:fb:ab:d3:04:5e:be:79:44:ab:1d:32:
57:b4:c8:09:52:1d:1f:38:e1:af:03:5c:6e:00:dc:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B5:59:A1:48:82:6C:96:93:04:6E:DA:03:4A:7D:C4:18:1E:33:DE
X509v3 Authority Key Identifier:
keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/4bVZoUiCbJaTBG7aA0p9xBgeM94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.168.0/21
194.35.80.0/23
194.35.180.0/23
IPv6:
2a00:b600::/29
Signature Algorithm: sha256WithRSAEncryption
b5:c7:c0:cd:06:40:c2:5b:cb:67:33:b4:17:48:d0:ec:71:6d:
2a:76:89:74:3d:b0:ba:d1:1a:ea:a4:8c:0e:e3:84:35:27:73:
77:6c:23:49:6b:d6:c4:78:b0:2a:56:10:71:45:ca:aa:08:98:
9f:90:c9:de:03:53:c6:46:25:99:51:5a:97:07:7c:2a:05:97:
35:1b:b8:2a:a3:28:4c:1f:73:f0:92:9c:1e:01:a4:54:4a:eb:
fe:b0:47:06:c1:f3:ae:7e:18:52:1d:71:91:38:4f:57:c7:4a:
49:46:b8:4f:df:fb:bb:e5:7a:a0:d6:71:53:5a:ea:8b:9e:d8:
17:70:86:b7:41:e0:b7:29:ba:db:5a:ba:ae:c3:ef:c3:6b:41:
67:34:63:3a:f2:4d:a4:59:7d:94:6a:6e:73:ec:0b:f7:39:52:
48:d2:39:61:6e:ad:39:7d:9d:ed:ab:aa:54:6a:5c:fd:d9:36:
16:df:de:d3:89:dd:8a:4a:e3:0f:04:29:cc:82:12:a5:3f:cb:
dc:5a:5f:fb:3d:df:d3:c5:ac:89:2a:21:32:37:e3:53:cc:98:
d3:7f:c1:6d:81:c7:b6:69:5e:e0:be:05:9c:d2:15:39:88:19:
1d:2b:7d:82:42:cd:e7:d3:be:16:96:35:af:6a:e1:5f:8d:be:
1c:ce:24:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net