Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/aSAbXtaRyXcPhRakK1aghIwRn3g.roa
File: aSAbXtaRyXcPhRakK1aghIwRn3g.roa (raw, json)
Hash identifier: up2cOGYfGLooX0y47JfJVek/1Cnxd7U8E51loywLrVw=
Subject key identifier: 69:20:1B:5E:D6:91:C9:77:0F:85:16:A4:2B:56:A0:84:8C:11:9F:78
Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial: 019420D5B8F82F98F133C180C532ED7FCF0B
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/aSAbXtaRyXcPhRakK1aghIwRn3g.roa
Signing time: Wed 01 Jan 2025 07:47:44 +0000
ROA not before: Wed 01 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43571
IP address blocks: 46.182.184.0/21 maxlen: 24
78.40.248.0/21 maxlen: 24
91.220.138.0/24 maxlen: 24
149.126.80.0/21 maxlen: 24
157.97.0.0/19 maxlen: 24
178.19.48.0/20 maxlen: 24
185.40.120.0/22 maxlen: 24
185.111.36.0/22 maxlen: 24
185.152.116.0/22 maxlen: 24
213.181.96.0/19 maxlen: 24
2a01:6f00::/29 maxlen: 48
2a01:8280::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b8:f8:2f:98:f1:33:c1:80:c5:32:ed:7f:cf:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Validity
Not Before: Jan 1 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69201b5ed691c9770f8516a42b56a0848c119f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:51:c4:5d:90:04:57:31:e4:ca:d2:bc:61:
c7:4f:48:a3:d6:ff:d6:8d:a0:03:42:6a:7a:21:bc:
81:40:bf:80:ca:e2:5b:33:65:10:00:12:57:d2:b9:
cf:1f:41:e2:18:24:e2:52:b0:f3:73:2c:36:55:1b:
0b:4f:56:12:7f:6a:75:57:46:36:0b:85:7a:7c:e1:
02:03:48:cf:43:45:79:46:a8:65:90:50:4d:c2:32:
07:2b:39:9b:4b:22:f2:fb:0b:6d:7b:19:4a:9c:99:
10:b8:01:60:9b:05:52:98:30:5c:61:17:6a:c7:eb:
38:d5:13:d9:df:83:24:4d:b5:c9:d4:ab:3d:aa:12:
9d:8a:5d:14:6f:df:23:3b:18:b4:5a:84:e5:09:af:
59:40:5e:d7:07:f2:f4:32:9e:18:56:20:4b:00:3c:
8e:54:b4:a8:c7:5e:60:e3:66:a8:4c:ae:1f:5b:59:
c8:76:07:ae:1d:b4:ea:94:95:06:9f:40:14:5e:8b:
83:ac:a6:5f:71:fd:b1:6c:e0:d5:3b:3d:28:36:07:
c1:6f:39:b1:ef:03:b0:31:9c:50:46:2e:11:46:87:
b2:39:e5:50:c0:7f:1a:41:c5:0d:34:a1:9f:a3:97:
f3:af:f3:2c:66:f6:8a:0a:29:3b:c7:56:89:e8:46:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:20:1B:5E:D6:91:C9:77:0F:85:16:A4:2B:56:A0:84:8C:11:9F:78
X509v3 Authority Key Identifier:
keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/aSAbXtaRyXcPhRakK1aghIwRn3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.184.0/21
78.40.248.0/21
91.220.138.0/24
149.126.80.0/21
157.97.0.0/19
178.19.48.0/20
185.40.120.0/22
185.111.36.0/22
185.152.116.0/22
213.181.96.0/19
IPv6:
2a01:6f00::/29
2a01:8280::/32
Signature Algorithm: sha256WithRSAEncryption
b4:af:24:fb:38:7b:b7:d7:0e:3e:a7:0f:65:51:58:dd:cb:3d:
2c:89:df:36:8e:40:07:f0:f1:ce:52:7c:a0:5e:e4:44:91:0f:
cf:af:6d:27:23:b9:76:4b:07:d5:18:a0:cd:b6:9b:91:8d:bc:
78:ac:f7:8b:3b:70:8a:15:ff:14:81:e0:b8:6e:b8:c0:c6:66:
56:47:f8:3c:e6:8c:3f:45:d9:a6:fc:a1:36:fc:3e:a2:a5:c2:
d9:03:8a:cb:91:d3:36:d2:3f:4e:55:d6:2e:82:c9:1a:de:a1:
27:e4:f2:75:33:59:81:93:a5:8b:cf:2d:bc:fa:f9:a4:7b:27:
b7:60:cf:29:e9:2d:d4:8c:4d:b2:bd:98:b8:d1:bb:9e:fc:17:
7c:2a:09:e7:f8:6b:df:7e:fa:bd:97:67:cf:d6:81:5a:36:3a:
c1:6d:63:d3:16:93:79:b8:b7:38:ed:31:1f:79:e8:b7:90:ef:
98:f5:58:cc:25:4b:a6:d8:94:2b:1a:a9:38:e2:6c:c3:4e:a2:
1f:38:3b:0a:6f:ba:56:8c:c0:93:2f:91:08:ee:4b:d5:72:6c:
d5:d5:73:01:b9:10:a9:b7:42:bd:a8:86:c9:5c:8f:81:ac:93:
82:88:9d:07:3b:a3:01:80:a7:15:aa:64:ee:6c:44:76:5e:07:
63:e4:82:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net