Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa
File: CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa (raw, json)
Hash identifier: zau8aloWL7mHqdY4KBJaLbm12+SMJIeq7unHMUAtkpg=
Subject key identifier: 09:D6:47:5C:CB:62:B9:72:18:1C:F9:A8:25:8D:9A:12:BC:46:F1:9F
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019423D7007FFD8E399E8773BCBB0EE8B17E
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58053
IP address blocks: 46.28.78.0/23 maxlen: 23
46.28.78.0/24 maxlen: 24
46.28.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:00:7f:fd:8e:39:9e:87:73:bc:bb:0e:e8:b1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09d6475ccb62b972181cf9a8258d9a12bc46f19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:25:c1:79:8c:9d:85:f1:e0:ff:3c:14:6c:
89:31:eb:e1:20:38:7a:c7:b6:09:73:e2:9c:35:1b:
c0:11:2f:7b:5c:d7:4b:47:da:5f:71:91:bd:01:1e:
39:0d:f5:8d:8a:34:f1:f2:41:ce:53:46:7b:a7:89:
3b:25:14:02:c1:ab:3d:0e:70:4d:d8:8d:56:5f:4e:
0f:ae:7f:36:91:1e:95:a2:4e:7a:3b:25:2d:d0:13:
d7:f6:c0:72:61:3d:15:86:04:c7:4f:42:1f:58:ce:
16:6c:01:2e:c5:a3:a4:9b:75:00:c7:2c:d8:51:5e:
e5:9b:80:16:8e:f7:f6:7a:3f:4b:b5:0a:7d:f9:94:
c5:6e:3f:c6:81:79:a3:2a:32:22:1b:f2:94:7e:51:
15:df:9a:44:32:af:6b:73:27:00:4e:ac:8e:af:68:
3c:b4:ab:0e:37:ff:12:b2:fa:4d:5b:2c:30:05:9e:
85:df:98:9c:ab:c8:ae:e5:ff:a6:64:78:f2:10:00:
df:da:75:7d:33:30:66:fd:36:4e:e3:32:94:dd:da:
f9:02:77:b3:63:81:3d:cc:c3:6c:35:dd:fa:e6:4a:
0e:41:4f:35:47:af:b6:58:c7:a6:b7:56:85:8d:b9:
56:ed:cf:af:14:99:d3:95:03:d1:17:89:d0:4b:51:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D6:47:5C:CB:62:B9:72:18:1C:F9:A8:25:8D:9A:12:BC:46:F1:9F
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.78.0/23
Signature Algorithm: sha256WithRSAEncryption
52:f6:7e:bf:89:ef:65:79:38:69:8c:5e:6a:9d:cd:da:62:37:
1a:3b:86:cb:a6:29:60:86:2a:24:42:70:79:48:ea:96:4a:c6:
98:2a:c2:e6:bb:76:83:17:57:98:ea:43:04:61:68:2b:b1:ee:
92:92:5b:48:49:fd:92:51:a0:f2:cc:1c:a9:67:ec:0c:62:f5:
ac:f8:8b:f9:d9:ce:5f:cc:62:17:c3:12:38:a5:af:1c:17:d0:
b6:82:dc:09:82:5c:5b:67:a2:db:3c:3c:e6:0a:1b:fc:69:42:
91:6c:ad:fb:69:5a:57:07:a5:b3:48:0f:87:11:96:76:60:c6:
f3:e0:08:9e:fa:8b:a0:63:5d:f1:8a:b0:27:77:c2:d6:6f:4d:
83:53:e4:18:ab:b7:d9:5c:ff:58:86:95:8f:71:fd:0b:92:52:
b8:7d:c4:a3:66:8e:69:f3:10:31:08:92:64:f8:b1:55:85:e4:
f4:25:00:40:aa:45:37:a8:1f:45:03:6d:7e:6c:e7:e2:d5:87:
b4:e8:13:b7:49:b1:f0:20:e7:c1:fa:5b:3a:19:07:3b:74:36:
d2:22:48:33:9c:2a:8e:0f:16:40:1d:61:12:70:c7:99:fd:2c:
ce:53:3c:1f:f8:82:6c:5f:b3:57:ed:8b:72:67:c2:04:21:18:
e4:39:f1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net