Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/yJCUn3SZs_z4zs8qPf4e3BVm1m0.roa
File: yJCUn3SZs_z4zs8qPf4e3BVm1m0.roa (raw, json)
Hash identifier: r+2eAcJaX8k7SZnVMIsNH/XHmGuzj1Go1T3OGI1ptYM=
Subject key identifier: C8:90:94:9F:74:99:B3:FC:F8:CE:CF:2A:3D:FE:1E:DC:15:66:D6:6D
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01962E9FB1E10EEBEA8C7F490CC899FA2E46
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/yJCUn3SZs_z4zs8qPf4e3BVm1m0.roa
Signing time: Sun 13 Apr 2025 10:08:59 +0000
ROA not before: Sun 13 Apr 2025 10:08:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207636
IP address blocks: 46.3.20.0/24 maxlen: 24
46.3.21.0/24 maxlen: 24
46.3.22.0/24 maxlen: 24
46.3.23.0/24 maxlen: 24
46.3.85.0/24 maxlen: 24
46.3.128.0/24 maxlen: 24
46.3.129.0/24 maxlen: 24
46.3.131.0/24 maxlen: 24
46.3.224.0/19 maxlen: 19
46.3.237.0/24 maxlen: 24
46.232.8.0/22 maxlen: 22
46.232.12.0/22 maxlen: 22
80.243.128.0/20 maxlen: 24
149.126.194.0/24 maxlen: 24
149.126.199.0/24 maxlen: 24
149.126.209.0/24 maxlen: 24
149.126.211.0/24 maxlen: 24
149.126.212.0/24 maxlen: 24
149.126.227.0/24 maxlen: 24
149.126.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:9f:b1:e1:0e:eb:ea:8c:7f:49:0c:c8:99:fa:2e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 13 10:08:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c890949f7499b3fcf8cecf2a3dfe1edc1566d66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:5f:24:af:2a:27:d5:af:1f:d9:ed:f9:6c:
e9:d9:a3:09:45:5b:bc:e6:06:f0:d2:b7:ab:22:83:
ba:3a:0f:2a:87:a3:17:39:b1:75:43:18:e1:18:a5:
a2:cc:de:b7:ae:b4:9d:ef:a9:a3:70:51:c4:a3:9b:
60:22:89:9b:98:bf:26:3c:1d:68:75:c1:6a:89:25:
c4:f7:f1:e5:1d:c9:f3:88:74:a6:02:ff:9a:be:92:
34:d2:d8:5e:bf:34:c9:19:2a:32:1a:04:db:f6:4c:
20:35:2c:71:75:a9:f3:b8:3b:8b:52:59:cd:72:48:
c8:4e:7d:d4:55:56:32:c5:a9:49:dd:35:0f:ba:b9:
b3:b6:44:47:ee:9d:b3:69:e7:a1:54:96:6b:f0:5d:
92:46:82:0f:d8:41:9c:53:21:bb:1e:fb:95:ed:ff:
04:8a:dc:c0:3b:57:79:57:a6:26:3b:97:9f:2f:ee:
20:3b:b1:dd:5e:bd:60:43:87:a6:2d:0c:08:ca:aa:
4b:90:85:20:0c:84:ea:4e:c1:a1:69:ef:db:9e:8f:
85:1d:57:73:72:4c:4b:ea:96:24:b2:ef:48:6f:f7:
42:19:20:b1:da:68:3c:2e:78:db:b8:b5:35:64:52:
59:58:28:c7:ae:f8:a4:6a:03:94:f0:81:41:7b:48:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:90:94:9F:74:99:B3:FC:F8:CE:CF:2A:3D:FE:1E:DC:15:66:D6:6D
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/yJCUn3SZs_z4zs8qPf4e3BVm1m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.20.0/22
46.3.85.0/24
46.3.128.0/23
46.3.131.0/24
46.3.224.0/19
46.232.8.0/21
80.243.128.0/20
149.126.194.0/24
149.126.199.0/24
149.126.209.0/24
149.126.211.0-149.126.212.255
149.126.227.0/24
149.126.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b6:ab:b3:02:5e:6c:d1:26:bc:41:d0:b0:b6:c6:72:05:69:
64:52:8b:24:40:fc:9f:76:d1:99:20:65:5b:21:72:27:32:12:
97:8f:f0:64:92:2a:98:29:21:8f:02:75:a2:30:7f:3b:94:a5:
c3:ae:ad:a2:f4:14:b2:f7:5f:10:de:7f:5f:28:fb:e5:9a:f9:
1a:41:64:7b:dc:0f:a1:11:a4:f8:b9:e4:a0:04:22:98:db:62:
48:db:5f:68:f4:53:c2:65:4e:28:1e:d1:f8:db:0b:98:f5:24:
16:5b:11:1b:47:22:81:df:76:50:6f:d2:09:86:90:e5:f9:6d:
14:67:5a:eb:8a:ac:a5:5a:f1:0d:d2:ad:35:51:56:15:80:21:
d2:27:e7:93:17:35:80:be:a3:07:9b:22:e6:56:34:0c:b0:01:
04:5c:5d:55:ff:29:48:80:ee:e8:94:85:6d:4d:8b:df:23:21:
0a:33:59:d5:05:c9:30:cf:73:e2:7b:cd:b8:d1:56:91:3b:99:
5a:52:ca:76:d9:ba:43:34:6f:3c:f3:f1:1c:17:83:3e:96:28:
55:f8:5f:94:c9:b0:81:38:c2:f8:06:fb:93:9d:5a:19:10:8f:
98:e6:6d:00:fc:eb:86:f8:a1:2a:63:f5:98:fd:64:7f:32:d9:
dd:76:2a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net