Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/GVUHIfvKpJdOHNnRnG93-HDINEI.roa
File: GVUHIfvKpJdOHNnRnG93-HDINEI.roa (raw, json)
Hash identifier: /GunX5DVAaqCLeh5vLqdmjbmgKNjplZucj4LzeQ5W4Y=
Subject key identifier: 19:55:07:21:FB:CA:A4:97:4E:1C:D9:D1:9C:6F:77:F8:70:C8:34:42
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 019484505C3C6DC5070A8EB2E0226F62DAE3
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/GVUHIfvKpJdOHNnRnG93-HDINEI.roa
Signing time: Mon 20 Jan 2025 15:24:06 +0000
ROA not before: Mon 20 Jan 2025 15:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15987
IP address blocks: 46.41.0.0/18 maxlen: 22
46.41.14.0/24 maxlen: 24
46.41.32.0/24 maxlen: 24
46.41.47.0/24 maxlen: 24
46.41.48.0/24 maxlen: 24
46.41.49.0/24 maxlen: 24
46.41.52.0/24 maxlen: 24
46.41.54.0/24 maxlen: 24
46.41.56.0/24 maxlen: 24
46.41.59.0/24 maxlen: 24
185.112.252.0/22 maxlen: 24
188.246.0.0/19 maxlen: 22
188.246.0.0/23 maxlen: 24
188.246.17.0/24 maxlen: 24
188.246.23.0/24 maxlen: 24
217.144.128.0/20 maxlen: 20
217.144.128.0/24 maxlen: 24
217.144.129.0/24 maxlen: 24
217.144.138.0/24 maxlen: 24
217.144.139.0/24 maxlen: 24
217.144.141.0/24 maxlen: 24
217.144.143.0/24 maxlen: 24
2a02:a00::/29 maxlen: 29
2a02:a00::/32 maxlen: 32
2a02:a00::/34 maxlen: 34
2a02:a00:d::/48 maxlen: 48
2a02:a00:f::/48 maxlen: 48
2a02:a00:1f::/48 maxlen: 48
2a02:a00:1009::/48 maxlen: 48
2a02:a00:1049::/48 maxlen: 48
2a02:a00:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:50:5c:3c:6d:c5:07:0a:8e:b2:e0:22:6f:62:da:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Jan 20 15:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19550721fbcaa4974e1cd9d19c6f77f870c83442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:65:bc:3f:27:f9:f6:cd:8e:f6:1c:da:52:
cd:b9:9b:ae:ea:b9:19:45:ac:ea:61:5a:e1:b3:1f:
83:9c:fb:08:83:2f:61:95:f7:87:a3:58:73:c4:c9:
40:af:05:bc:39:11:cc:3c:1f:32:25:4e:8f:37:75:
2e:49:05:43:87:62:49:e6:d4:e1:41:f3:39:fa:c1:
b7:72:b8:4a:fd:00:08:43:60:25:14:97:39:a5:8b:
06:5a:c4:d5:0d:1b:eb:d4:62:9a:c4:b3:9b:59:6e:
ba:dc:9a:27:fa:1a:f9:44:6a:1b:e1:67:f9:18:4a:
b0:61:3d:9f:f9:ec:10:88:f9:6f:6b:88:51:8c:02:
ce:03:92:23:1a:09:b3:f6:63:ac:cd:ff:31:a1:1a:
8d:4e:a4:24:63:3a:59:cd:e7:cf:d4:9b:2e:d9:60:
76:d9:dc:07:a3:9a:90:6c:7f:8b:00:63:67:49:45:
90:36:23:4d:47:3d:0f:ce:83:90:9f:bd:0f:1d:f6:
ac:e3:ff:d2:b2:5f:06:99:b4:a4:2d:26:e8:14:4d:
99:0c:dc:e4:6c:70:5f:38:45:af:f2:82:a3:2b:94:
62:c5:97:67:0c:69:7f:28:f5:26:ea:a1:13:81:fd:
bd:2b:2c:4b:96:cd:1a:18:b7:e3:e2:87:20:e1:c9:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:55:07:21:FB:CA:A4:97:4E:1C:D9:D1:9C:6F:77:F8:70:C8:34:42
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/GVUHIfvKpJdOHNnRnG93-HDINEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.41.0.0/18
185.112.252.0/22
188.246.0.0/19
217.144.128.0/20
IPv6:
2a02:a00::/29
Signature Algorithm: sha256WithRSAEncryption
95:34:c8:33:10:88:83:8f:b5:cf:d0:1a:84:ea:f1:b5:55:40:
50:66:48:f2:93:7d:ec:75:1c:66:f7:ce:f3:b9:c4:b9:b8:76:
df:3f:2d:9d:33:4c:57:08:52:e7:87:9a:d7:d6:43:20:21:84:
66:f3:b0:47:25:40:b8:ef:b9:8d:78:eb:0d:69:95:b0:65:e0:
a9:05:14:47:72:76:1a:25:2b:c9:5a:dc:c4:e9:4e:79:22:53:
78:69:20:0d:0b:e8:f8:41:0b:95:e0:e8:9b:a0:0f:31:47:2a:
d9:42:c7:a3:3c:75:43:36:4a:2d:7a:19:67:d4:bb:3f:ab:7c:
a5:3d:0e:44:c6:54:85:a0:c2:a4:71:c9:84:2a:11:17:83:6f:
45:a6:e7:c9:5f:d4:71:24:f0:a6:60:6a:86:dc:9b:02:21:37:
31:7d:cc:29:86:75:9f:c8:67:07:dc:df:9f:4e:50:17:bb:f8:
4f:f9:ee:4a:2c:63:d5:44:70:6e:35:fc:3d:8a:5f:b1:6c:a5:
91:19:8c:8a:3f:af:cd:2c:37:79:dc:0f:f4:9f:90:88:18:a9:
0d:c1:76:c2:9c:63:2f:0a:c6:0f:ef:9a:9e:92:3a:c3:f6:7c:
b3:6b:d5:28:34:e2:28:b1:03:e2:7d:76:f3:fd:95:2e:22:f2:
df:aa:ed:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:39 2025 by rpki-client on console.sobornost.net