Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa
File: jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa (raw, json)
Hash identifier: QVsKQjI9Ob132etLfwnFEQDpraGA87DL9fvaD59Kiac=
Subject key identifier: 8D:45:B7:B8:9B:B3:BE:93:2D:B3:A6:52:FC:FA:4E:13:4F:AF:1F:2E
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 01941FFAB8E7431BA5B96F82D689459B7592
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21395
IP address blocks: 46.134.192.0/18 maxlen: 18
46.134.192.0/19 maxlen: 19
185.59.88.0/22 maxlen: 22
185.59.88.0/24 maxlen: 24
188.47.192.0/18 maxlen: 18
2a00:f46::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b8:e7:43:1b:a5:b9:6f:82:d6:89:45:9b:75:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d45b7b89bb3be932db3a652fcfa4e134faf1f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:f5:88:d8:8b:4d:e5:d3:a3:3c:09:24:dd:
9e:cc:1c:42:8c:b7:06:46:4b:9c:5e:6b:af:34:64:
50:68:ac:47:ba:b5:f8:7a:b8:9c:89:37:67:62:9f:
d7:af:59:c9:f7:8c:d6:b8:04:6b:5d:f9:01:ab:f1:
3b:81:23:7b:eb:94:1c:29:33:be:7b:8a:70:4a:1a:
af:ce:da:75:35:7d:0d:e2:24:08:40:f6:4f:d1:8c:
86:6f:28:10:08:7e:75:e2:8d:0a:a9:75:96:53:c0:
71:18:1c:8e:7a:7f:1d:0d:7a:1b:bd:b9:07:29:37:
cd:f7:6b:ee:33:20:1d:70:e1:57:1b:a3:9e:3c:b1:
1b:34:7c:8a:66:3d:05:d2:3e:ea:5c:c4:5a:14:d1:
09:87:bb:18:27:3d:05:06:1b:90:73:91:1e:f0:a6:
3d:9e:85:c9:93:f4:a0:0e:c3:0a:44:3c:24:e6:48:
b6:f1:a1:c1:20:99:fd:ba:43:68:a6:d5:9e:f0:82:
a1:28:cf:79:6d:11:bc:52:a1:fe:bd:4c:9e:98:6f:
b3:f9:0f:d9:f6:c8:60:e4:26:d0:16:93:03:a0:a4:
7d:7f:7f:06:ea:26:21:6b:fb:a8:49:2e:f5:08:c6:
5d:88:20:99:3f:01:dd:05:73:72:f3:81:13:52:ee:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:45:B7:B8:9B:B3:BE:93:2D:B3:A6:52:FC:FA:4E:13:4F:AF:1F:2E
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.134.192.0/18
185.59.88.0/22
188.47.192.0/18
IPv6:
2a00:f46::/36
Signature Algorithm: sha256WithRSAEncryption
61:ab:db:5e:04:a0:61:81:da:e4:8e:98:5b:8b:17:48:a8:75:
0e:4a:ad:23:f6:82:d8:33:ad:53:ca:44:6c:83:fc:8c:84:39:
af:6d:2d:04:d7:02:cd:5e:ff:81:3b:ee:af:93:b1:0c:6f:9c:
b5:26:dc:8d:b4:1f:aa:53:a2:a7:34:1e:42:b6:32:a2:e4:86:
e2:aa:87:c9:9b:c3:06:92:51:3f:b9:00:83:22:7d:75:c4:3f:
25:ba:bb:02:d6:6f:d9:df:2d:df:27:a7:af:c7:9a:a3:b3:fc:
2b:8e:6d:69:57:06:e4:9b:35:d5:38:62:ce:a2:79:15:28:d3:
ca:f8:e4:fc:57:a7:92:9f:f9:a2:38:ad:8b:1c:d9:ff:e2:79:
eb:ad:a9:46:5c:db:2f:62:3f:e2:b3:d9:33:cf:71:61:e2:b8:
f2:00:68:2e:b3:0f:f6:bd:ba:60:f9:e7:f7:a4:6e:03:e2:e0:
89:3f:1f:e9:25:56:d7:7a:00:2e:bf:b3:e2:cc:c4:22:b6:2a:
6f:cd:04:16:55:15:ff:50:27:4a:98:2c:d6:57:fc:eb:77:24:
4a:6c:a9:47:7a:e9:2f:1a:51:15:b8:ff:b8:66:e7:5c:53:fc:
5d:17:11:0e:69:ce:9e:13:6b:76:b0:74:0f:47:d2:6c:4f:f7:
88:fc:f0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net