Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/i2GfKnioIrK4DFco2liFl7JEt9U.roa
File: i2GfKnioIrK4DFco2liFl7JEt9U.roa (raw, json)
Hash identifier: Ib8ibm5kzCYxk8mp5/206nEi8+cY3/XjnCkQAxAJBU0=
Subject key identifier: 8B:61:9F:2A:78:A8:22:B2:B8:0C:57:28:DA:58:85:97:B2:44:B7:D5
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 01956011E4863F713AD4068686C9FC585ED1
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/i2GfKnioIrK4DFco2liFl7JEt9U.roa
Signing time: Tue 04 Mar 2025 07:32:20 +0000
ROA not before: Tue 04 Mar 2025 07:32:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215182
IP address blocks: 46.227.160.0/23 maxlen: 23
46.227.162.0/24 maxlen: 24
46.227.164.0/24 maxlen: 24
46.227.166.0/24 maxlen: 24
46.227.167.0/24 maxlen: 24
95.143.0.0/21 maxlen: 24
95.143.4.0/24 maxlen: 24
95.143.5.0/24 maxlen: 24
95.143.8.0/23 maxlen: 23
95.143.10.0/24 maxlen: 24
95.143.11.0/24 maxlen: 24
95.143.12.0/24 maxlen: 24
95.143.13.0/24 maxlen: 24
95.143.14.0/23 maxlen: 23
185.72.224.0/24 maxlen: 24
185.72.225.0/24 maxlen: 24
185.72.226.0/24 maxlen: 24
185.72.227.0/24 maxlen: 24
193.242.176.0/22 maxlen: 22
2a02:1328:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:11:e4:86:3f:71:3a:d4:06:86:86:c9:fc:58:5e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Mar 4 07:32:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b619f2a78a822b2b80c5728da588597b244b7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:92:bf:3d:14:af:37:94:c5:bc:be:da:60:
36:0c:a3:61:76:a5:7b:0a:df:ec:b7:b3:91:fe:03:
83:30:5f:2a:4d:b0:c7:b0:bb:60:b6:b4:04:1c:f6:
59:4c:8d:1e:d9:bc:bc:83:7f:c3:c8:d0:cf:d6:81:
93:81:7a:f0:75:44:06:7a:19:05:af:e5:e5:b9:bd:
f6:1f:e8:e8:fa:73:ae:a5:31:59:8c:03:46:d3:c5:
9e:3a:7a:82:95:b4:ba:db:99:14:6b:28:b9:07:b2:
dd:e5:91:d0:56:a8:23:50:f1:a4:d5:e1:89:61:46:
0b:7b:26:8c:09:49:82:44:7b:77:c3:c9:d1:ab:d7:
5c:6d:80:00:f6:36:b6:94:15:4f:1f:22:84:6e:8b:
32:6d:f2:63:8e:61:4e:02:3d:86:b6:4f:97:0a:9d:
19:70:eb:a3:de:d1:52:dd:91:95:48:8c:f2:74:2d:
7b:dc:c6:5b:6e:95:15:70:6f:6f:66:b9:cd:a4:39:
fb:03:4e:b6:07:f5:44:5e:50:74:15:ce:34:7c:36:
4a:dc:11:08:a4:a8:44:ef:f5:04:f0:fc:34:23:eb:
19:c7:7e:90:11:d2:67:dc:40:a2:8d:31:6f:ce:ef:
a6:65:d5:4b:16:52:55:10:bc:dd:c1:79:12:92:8c:
a1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:61:9F:2A:78:A8:22:B2:B8:0C:57:28:DA:58:85:97:B2:44:B7:D5
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/i2GfKnioIrK4DFco2liFl7JEt9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.160.0-46.227.162.255
46.227.164.0/24
46.227.166.0/23
95.143.0.0/20
185.72.224.0/22
193.242.176.0/22
IPv6:
2a02:1328:2::/48
Signature Algorithm: sha256WithRSAEncryption
3c:4f:28:41:06:48:96:eb:c6:1a:8f:84:ce:d7:94:eb:e5:46:
18:5f:ea:14:a5:fe:f7:c6:b7:ee:c8:ed:c0:42:7e:4b:96:2c:
21:56:c7:bc:9b:89:09:37:45:1b:25:f7:fd:79:ed:39:13:87:
96:46:ce:d6:b7:ba:08:32:c4:bf:4e:90:c9:65:81:0a:58:f3:
4f:f2:0c:07:bf:6f:2b:00:49:ca:08:8f:cd:87:1d:b4:ae:f9:
a4:95:f9:1b:89:d8:7f:e8:6a:6c:1e:5b:a1:23:be:77:e8:9f:
90:1f:b9:27:15:7e:00:f5:1c:1f:fb:32:54:b0:3a:eb:6b:57:
e7:05:f4:ab:7b:e9:17:37:a5:90:63:c8:7d:4a:7f:1b:54:f2:
b7:ee:9a:29:ff:60:51:1b:74:39:b0:07:79:da:8f:b4:2a:7f:
76:b4:4a:b3:09:3c:8c:21:6a:e9:e4:67:8d:e0:7e:b5:fc:63:
b5:52:07:a6:43:44:ca:20:03:e9:ff:72:db:75:e9:d0:e6:52:
43:0c:4a:a9:fe:71:e4:fa:ac:71:d7:0d:f5:ad:35:37:1b:8c:
84:f4:d5:ca:67:17:05:be:d8:0b:e8:84:5c:34:fa:94:b1:6e:
43:1b:d0:69:79:cc:a5:2f:99:9b:e6:d1:62:04:45:64:eb:da:
61:26:7e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net