Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/3uEhAk6Wx4KcEg0MVVsAAyyADBw.roa
File: 3uEhAk6Wx4KcEg0MVVsAAyyADBw.roa (raw, json)
Hash identifier: FqSkeFfRf148LCqtNv59QOP75egaClJCY4HAjWTWGX0=
Subject key identifier: DE:E1:21:02:4E:96:C7:82:9C:12:0D:0C:55:5B:00:03:2C:80:0C:1C
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 019425FCCF5CA46771D081AC41013507A2A2
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/3uEhAk6Wx4KcEg0MVVsAAyyADBw.roa
Signing time: Thu 02 Jan 2025 07:48:32 +0000
ROA not before: Thu 02 Jan 2025 07:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49909
IP address blocks: 46.20.128.0/20 maxlen: 24
178.21.120.0/21 maxlen: 24
2a00:1d10::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:cf:5c:a4:67:71:d0:81:ac:41:01:35:07:a2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Jan 2 07:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dee121024e96c7829c120d0c555b00032c800c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:9d:61:26:d0:e7:c4:98:a1:63:7f:19:d3:
a5:fb:a5:52:53:88:95:83:e6:a7:75:f7:d1:48:79:
6c:2d:61:80:0e:c4:fd:f3:00:9c:66:8c:ee:8f:23:
17:bc:f4:f2:a3:dc:2a:a2:57:0b:85:c9:55:a3:11:
c1:07:34:1e:04:94:40:ae:42:78:ba:48:9d:ac:1e:
60:c5:e2:a4:6e:dc:1c:51:f7:71:dd:85:5b:8f:59:
f7:46:82:46:64:b2:c1:5c:37:dc:d9:1e:f7:c4:42:
76:01:5c:24:d5:ef:94:57:98:7b:06:ff:b0:3f:32:
ce:e0:ef:8d:f3:32:8e:e3:7e:e2:6b:1d:4e:9c:16:
58:85:88:b2:80:db:7a:9f:af:18:8c:c7:34:8e:52:
a9:10:f4:86:d6:22:bd:1c:72:59:5d:75:a6:60:36:
77:ed:f0:15:f9:36:1b:82:50:ed:65:35:a8:a4:92:
71:e8:71:10:be:85:b4:67:7a:da:f8:8e:b5:81:a4:
be:cb:02:95:a1:bb:fd:4c:46:c4:d5:39:d7:d1:6d:
d9:18:20:3b:34:b4:0b:61:19:b2:2f:96:8b:fb:be:
57:8a:12:2d:54:d5:e5:57:76:a1:18:5d:dd:01:72:
42:1b:b7:c7:c5:f7:ee:c4:d9:d6:18:53:d0:95:e6:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E1:21:02:4E:96:C7:82:9C:12:0D:0C:55:5B:00:03:2C:80:0C:1C
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/3uEhAk6Wx4KcEg0MVVsAAyyADBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.128.0/20
178.21.120.0/21
IPv6:
2a00:1d10::/32
Signature Algorithm: sha256WithRSAEncryption
6c:d9:d3:b6:3e:7f:fc:9b:56:01:75:bb:23:04:b2:bd:b3:6e:
14:81:b2:f6:bd:4e:f2:3c:8b:ce:9c:2b:f3:76:87:59:31:1f:
c5:76:a4:17:d4:68:06:17:e2:77:24:9a:da:da:78:8f:b0:53:
b9:68:46:b2:b7:7c:dc:22:05:b0:3c:bb:ee:10:8d:e4:06:e7:
72:6d:8b:59:f0:88:76:7d:a3:82:fa:ed:6d:9c:77:69:c1:0f:
da:be:7a:5d:7b:4a:50:4c:b4:56:5f:c0:d0:76:f5:82:e5:03:
c0:66:45:3e:75:50:b4:1d:c2:2b:ab:68:86:67:44:84:10:e0:
17:1c:40:de:c9:ea:3e:f4:ce:b2:70:5b:d2:2c:0b:93:dd:1a:
ac:76:21:d3:19:fc:51:b9:25:4b:9d:d4:df:a5:c4:4b:ec:79:
93:1c:e8:12:cd:44:96:94:ea:55:92:c8:1f:30:cf:3e:af:c2:
7d:c8:c2:d7:81:03:dc:b4:c5:a0:9a:0e:89:6e:8f:73:5b:79:
a6:93:f8:74:6e:f1:57:9d:c0:19:81:55:f2:c6:64:4c:4b:65:
4b:ba:60:a4:2b:5a:ea:37:00:0b:99:c6:80:0e:a2:67:0d:f5:
10:5a:ae:fe:3c:45:0f:ff:74:d2:57:b5:1a:30:5f:a6:77:9c:
97:bd:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net