Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1-mdVAsmWSwnu47gZ-8q53R0gQ3g.roa
File: 1-mdVAsmWSwnu47gZ-8q53R0gQ3g.roa (raw, json)
Hash identifier: sY0eiu7hdjYEcs+vPLPq8MzuIT52Q5Es7I7pLLIxMVw=
Subject key identifier: FA:67:55:02:C9:96:4B:09:EE:E3:B8:19:FB:CA:B9:DD:1D:20:43:78
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0195F11F3885FDDA476DC5FC2C7D1824895A
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1-mdVAsmWSwnu47gZ-8q53R0gQ3g.roa
Signing time: Tue 01 Apr 2025 11:31:49 +0000
ROA not before: Tue 01 Apr 2025 11:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 46.243.7.0/24 maxlen: 24
91.200.12.0/24 maxlen: 24
92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
109.69.60.0/24 maxlen: 24
2a06:ddc0::/29 maxlen: 29
2a0b:8040::/29 maxlen: 29
2a0c:6980::/29 maxlen: 29
2a0c:f642::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:1f:38:85:fd:da:47:6d:c5:fc:2c:7d:18:24:89:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Apr 1 11:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa675502c9964b09eee3b819fbcab9dd1d204378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ba:7a:34:31:3c:e1:a6:7c:e8:95:28:e0:6d:
87:14:03:fb:66:fd:3f:bf:4f:91:87:f2:97:e2:fa:
4c:17:db:d6:2b:c5:81:42:a2:73:1e:d0:db:5e:67:
73:98:60:38:db:d6:7a:38:99:9b:84:ec:d1:7d:5a:
b7:c5:64:4e:c6:cf:2d:31:70:f0:bc:5a:0d:14:d4:
98:1f:ed:e8:2b:87:88:07:c0:d6:ae:23:62:db:5f:
27:c0:ad:e2:8b:33:64:bc:01:97:dc:c7:a9:be:93:
22:4d:c5:3b:8a:bd:c7:ff:d6:1e:ab:5a:87:7e:86:
bb:b0:d0:56:d9:5e:7b:7c:da:c3:e0:77:5f:33:10:
a2:97:0b:5d:b7:3a:e3:9f:2c:45:67:ba:42:21:36:
c7:c3:64:95:c2:51:b3:cc:c6:c7:cd:1b:d3:e6:53:
b5:2c:d7:9f:66:f6:7b:21:67:d8:cb:29:56:95:95:
06:22:4e:45:2f:61:07:cc:b5:50:79:a0:25:37:04:
8a:4a:6f:80:5a:ad:d1:57:34:7b:6a:8a:d0:cc:f4:
33:b3:a6:f7:e3:fb:92:6f:f9:d1:97:55:6e:50:8c:
14:a3:e0:2d:be:7a:5f:3e:7c:83:39:47:5f:82:7b:
1e:57:c3:31:6c:dc:75:bf:c2:0c:bb:ca:c5:17:f7:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:67:55:02:C9:96:4B:09:EE:E3:B8:19:FB:CA:B9:DD:1D:20:43:78
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1-mdVAsmWSwnu47gZ-8q53R0gQ3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.7.0/24
91.200.12.0/24
92.62.119.0/24
94.232.248.0/24
109.69.60.0/24
IPv6:
2a06:ddc0::/29
2a0b:8040::/29
2a0c:6980::/29
2a0c:f642::/32
Signature Algorithm: sha256WithRSAEncryption
79:d4:3a:75:e7:75:b0:c4:a1:72:97:7c:09:01:92:fb:aa:7a:
49:38:a6:c4:86:5f:8b:7a:b7:71:9f:33:f4:83:4a:24:29:31:
61:49:a3:ba:fe:f8:81:a8:37:62:d5:42:fc:99:6a:0b:9d:b5:
c0:0c:f9:69:17:ef:bb:4a:0b:9d:5a:c6:09:a0:d8:72:ba:df:
e7:85:f5:9f:3f:1f:c8:ac:f4:eb:cf:3c:09:ec:b2:82:4b:54:
a7:d6:18:78:ab:f5:24:4d:48:2a:9e:48:bb:bb:06:db:e5:8d:
a2:9f:b9:33:25:05:9c:fe:16:92:fa:8d:9a:46:79:d1:8a:78:
03:00:1a:3b:7d:c6:11:bf:87:af:b4:99:89:78:a8:67:3d:1c:
01:f8:4d:c8:09:61:7f:f7:54:52:58:93:fd:f0:c7:aa:37:ea:
55:0d:3b:06:c2:57:d1:ef:da:c7:55:ab:70:20:35:81:0d:fa:
41:b8:83:1e:48:7b:ca:47:37:22:13:96:37:34:e8:c0:22:15:
12:c6:48:e7:01:8f:10:0a:89:89:bf:84:67:5e:24:40:df:e2:
cc:8d:88:f4:7f:f1:65:76:b1:14:d3:d4:8c:95:6b:96:58:f2:
60:a2:b0:38:6e:06:43:4f:09:b5:1e:da:36:4f:47:9f:ac:4e:
f2:b7:fb:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net