Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/vOg7pIai3eYlqI8nGfkYR-448qE.roa
File: vOg7pIai3eYlqI8nGfkYR-448qE.roa (raw, json)
Hash identifier: k2twTqEvKHP86X8yabE26RQnv5iqhvXZjH+b4EIuDog=
Subject key identifier: BC:E8:3B:A4:86:A2:DD:E6:25:A8:8F:27:19:F9:18:47:EE:38:F2:A1
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 0194214453F4E82BEB958CB39BA782E1FCE6
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/vOg7pIai3eYlqI8nGfkYR-448qE.roa
Signing time: Wed 01 Jan 2025 09:48:33 +0000
ROA not before: Wed 01 Jan 2025 09:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60095
IP address blocks: 46.191.156.0/22 maxlen: 22
46.191.156.0/23 maxlen: 23
46.191.156.0/24 maxlen: 24
46.191.157.0/24 maxlen: 24
46.191.158.0/23 maxlen: 23
46.191.158.0/24 maxlen: 24
46.191.159.0/24 maxlen: 24
93.157.252.0/22 maxlen: 22
93.157.252.0/23 maxlen: 23
93.157.252.0/24 maxlen: 24
93.157.253.0/24 maxlen: 24
93.157.254.0/23 maxlen: 23
93.157.254.0/24 maxlen: 24
93.157.255.0/24 maxlen: 24
136.169.212.0/22 maxlen: 22
136.169.212.0/23 maxlen: 23
136.169.212.0/24 maxlen: 24
136.169.213.0/24 maxlen: 24
136.169.214.0/23 maxlen: 23
136.169.214.0/24 maxlen: 24
136.169.215.0/24 maxlen: 24
185.44.8.0/22 maxlen: 22
185.44.8.0/23 maxlen: 23
185.44.8.0/24 maxlen: 24
185.44.9.0/24 maxlen: 24
185.44.10.0/23 maxlen: 23
185.44.10.0/24 maxlen: 24
185.44.11.0/24 maxlen: 24
2a02:1c8:a::/48 maxlen: 48
2a02:1c8:40::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:53:f4:e8:2b:eb:95:8c:b3:9b:a7:82:e1:fc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 1 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bce83ba486a2dde625a88f2719f91847ee38f2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:8d:92:96:9b:24:88:f7:f2:c2:99:ca:75:
db:5f:1e:aa:30:c0:2d:12:b1:b9:de:37:ae:75:54:
16:25:c7:8b:d8:71:b3:9a:be:d6:17:76:a9:c4:96:
38:83:ea:61:c7:5a:6f:34:14:48:8c:5d:8e:13:b7:
cc:9c:f2:9a:6b:5a:42:56:b7:3c:a8:a0:49:f6:cd:
3c:70:b9:c4:4c:f4:56:e1:79:78:00:d9:39:31:ad:
9b:90:6a:4b:9d:c0:43:69:07:0a:4a:81:1d:f4:11:
24:18:a5:53:19:d4:42:68:95:5a:09:cc:9c:a4:2f:
02:98:61:e2:c0:b3:78:a6:a9:a2:19:8f:63:77:21:
09:41:37:20:60:7c:e0:18:bc:c8:f0:73:da:22:10:
3f:96:b9:56:62:d9:b2:81:16:2c:c4:27:fa:49:65:
33:04:c1:f2:e2:4f:17:9e:d6:08:84:00:4d:2e:4c:
c0:9d:26:98:5f:62:cd:77:0a:27:21:da:85:02:5f:
a2:77:59:88:49:30:2d:be:ba:f5:0b:1c:77:11:7f:
48:68:2f:01:ed:d6:cf:a3:02:46:6d:f6:c6:08:ad:
6e:bf:4d:ef:75:8d:c3:44:85:c8:84:cc:8e:95:be:
3b:e3:f5:d3:94:bb:8a:a7:84:89:aa:93:c7:9e:7b:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E8:3B:A4:86:A2:DD:E6:25:A8:8F:27:19:F9:18:47:EE:38:F2:A1
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/vOg7pIai3eYlqI8nGfkYR-448qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.156.0/22
93.157.252.0/22
136.169.212.0/22
185.44.8.0/22
IPv6:
2a02:1c8:a::/48
2a02:1c8:40::/44
Signature Algorithm: sha256WithRSAEncryption
4c:c9:bc:dd:88:67:8f:5a:22:9b:45:c6:0a:24:01:f3:5d:95:
b3:7a:c2:94:58:74:8b:91:43:4b:73:aa:a9:8c:e8:15:c1:09:
32:57:2a:85:1c:78:bd:86:ec:de:95:e1:01:0f:88:61:0f:29:
dd:3e:9e:ff:07:25:e3:0d:15:72:45:1c:3d:87:81:cb:b9:4c:
63:a9:97:c5:a8:77:6b:7c:b1:7a:cd:68:e3:cf:4b:3c:42:c8:
75:61:4c:58:de:94:e0:dd:3b:05:df:7d:f4:f6:a8:63:92:a8:
4e:35:ba:a6:71:ff:ce:fc:1d:61:bc:22:91:e5:eb:14:6f:64:
ec:77:5e:2d:b7:4a:34:bf:11:da:95:40:be:31:a7:a5:1c:d8:
83:9d:13:3f:a0:25:33:14:dd:c4:b4:27:60:3f:3f:28:13:1d:
65:b1:07:d0:ff:29:2d:91:50:ec:e6:f0:a6:7d:e0:cd:2f:df:
63:c3:6f:ac:2e:a7:17:97:be:1c:41:08:32:c4:72:d6:ef:ad:
18:c7:d1:8c:db:cf:c4:af:d1:84:e5:a9:3c:52:20:28:99:3a:
d0:ae:54:15:5e:8f:4e:fe:c7:23:ff:3f:ed:45:8f:57:9a:ae:
80:bc:a3:9c:22:3d:4f:94:5c:1a:e5:dc:cd:e8:1f:c6:74:49:
ea:44:5b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net