Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/RdqjtJDLFWOt3Phx5mE_iQ2n2ac.roa
File: RdqjtJDLFWOt3Phx5mE_iQ2n2ac.roa (raw, json)
Hash identifier: lxo1VRjxzcOyUQlNG+1uXakzpre9ZL0uw2/WRhwVovc=
Subject key identifier: 45:DA:A3:B4:90:CB:15:63:AD:DC:F8:71:E6:61:3F:89:0D:A7:D9:A7
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 0194214450E15924ED56053E3E2EE9BAEE07
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/RdqjtJDLFWOt3Phx5mE_iQ2n2ac.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39593
IP address blocks: 46.191.180.0/22 maxlen: 22
46.191.180.0/23 maxlen: 23
46.191.180.0/24 maxlen: 24
46.191.181.0/24 maxlen: 24
46.191.182.0/23 maxlen: 23
46.191.182.0/24 maxlen: 24
46.191.183.0/24 maxlen: 24
136.169.208.0/22 maxlen: 22
136.169.208.0/23 maxlen: 23
136.169.208.0/24 maxlen: 24
136.169.209.0/24 maxlen: 24
136.169.210.0/23 maxlen: 23
136.169.210.0/24 maxlen: 24
136.169.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:50:e1:59:24:ed:56:05:3e:3e:2e:e9:ba:ee:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45daa3b490cb1563addcf871e6613f890da7d9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f3:bd:af:77:12:c8:16:af:06:62:22:1b:f8:
1a:e4:04:cd:c3:c2:31:47:e9:ce:1e:47:1d:af:4b:
f1:ee:33:2a:44:6f:e6:ee:7f:8b:ef:3c:b7:ee:b3:
58:7d:46:73:5d:c5:29:b1:27:04:ba:e7:90:00:87:
06:1b:e8:0d:29:4a:35:b1:b5:31:4d:3f:e9:57:44:
cd:80:dc:9a:7e:76:eb:95:68:ea:6d:4e:d4:ee:b7:
3d:ec:f9:23:ef:54:1d:30:f4:9b:6f:09:06:e9:80:
ad:41:d7:b1:31:2f:aa:07:4e:dd:3a:e4:76:47:6f:
4a:8c:ff:7d:33:89:2e:95:f0:b8:3b:0d:b5:08:88:
e2:7e:55:b8:22:66:3c:9b:30:57:bd:50:de:bf:a0:
ed:5c:33:73:6e:5c:ac:8b:66:a0:fd:69:c1:ad:c6:
69:ff:fc:df:01:9d:1f:b8:1c:69:36:66:fd:1f:77:
5b:4e:5b:a8:32:48:4d:5a:fe:9e:fc:d9:91:05:fd:
ec:d3:6c:a7:c0:2c:e9:4d:bb:d8:97:7f:44:e4:b0:
cd:53:0d:43:f2:83:fd:da:9f:b4:58:80:cc:06:8d:
5a:18:05:15:85:84:5e:f7:19:1a:f9:14:9e:cc:f4:
f8:53:81:da:a4:2a:51:2e:6d:37:67:5e:b3:31:a7:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DA:A3:B4:90:CB:15:63:AD:DC:F8:71:E6:61:3F:89:0D:A7:D9:A7
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/RdqjtJDLFWOt3Phx5mE_iQ2n2ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.180.0/22
136.169.208.0/22
Signature Algorithm: sha256WithRSAEncryption
42:97:a9:b7:33:33:0c:b8:97:5b:53:51:04:88:82:40:9a:de:
ad:30:bb:6c:22:0d:52:e4:8d:5c:ac:f6:85:dc:a6:82:54:9d:
61:57:3e:9c:84:0a:1e:6a:ba:a5:57:ba:03:22:cd:92:04:b3:
92:11:c3:22:16:2b:ba:7c:8a:3e:fc:d2:8d:67:20:be:61:2d:
10:97:f4:68:91:28:20:b4:96:a2:06:f0:21:4f:e7:21:c8:82:
67:15:70:ff:28:b8:7a:c1:7b:59:0f:61:72:2e:82:e9:63:8f:
7c:35:12:b1:35:da:d0:4f:e6:4f:2f:29:f2:c9:77:49:bb:06:
4d:8e:c6:78:b5:53:1e:75:91:59:1f:5e:f9:5c:7f:0b:5d:07:
5f:44:74:be:40:9e:41:00:48:06:4a:c0:4d:7b:5e:d2:df:2f:
f5:10:bb:63:da:be:ba:39:33:92:8c:ca:0e:b5:5b:a2:34:58:
aa:b8:15:23:d0:5d:c9:65:d7:4a:95:a2:d8:85:02:c4:da:fc:
c6:c0:46:2d:77:95:08:b3:5c:65:dd:4a:fd:20:22:67:dc:f7:
4e:ce:c6:99:e7:88:34:f7:9f:2a:fd:b9:3d:fc:25:88:73:6c:
a5:76:09:3a:d6:0e:1a:db:26:0b:37:91:3e:d9:66:4d:94:dc:
c2:6e:1c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net