Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/TgNurcV4axU3uqSkw39wE7TkQvk.roa
File: TgNurcV4axU3uqSkw39wE7TkQvk.roa (raw, json)
Hash identifier: B80X6acZEx7hnHCt/dDJOZhPF/97mIDxIpJ3EyHK/4c=
Subject key identifier: 4E:03:6E:AD:C5:78:6B:15:37:BA:A4:A4:C3:7F:70:13:B4:E4:42:F9
Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial: 0195FB14F629E2A00C1BED6BD1409345E0AD
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/TgNurcV4axU3uqSkw39wE7TkQvk.roa
Signing time: Thu 03 Apr 2025 09:56:49 +0000
ROA not before: Thu 03 Apr 2025 09:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43994
IP address blocks: 46.19.40.0/21 maxlen: 24
46.235.72.0/22 maxlen: 24
79.142.48.0/20 maxlen: 24
86.54.107.0/24 maxlen: 24
89.219.4.0/22 maxlen: 24
89.219.8.0/21 maxlen: 24
89.219.16.0/22 maxlen: 24
109.163.192.0/21 maxlen: 24
151.236.192.0/21 maxlen: 24
185.18.252.0/22 maxlen: 24
185.249.172.0/22 maxlen: 24
2a01:4d40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:14:f6:29:e2:a0:0c:1b:ed:6b:d1:40:93:45:e0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
Validity
Not Before: Apr 3 09:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e036eadc5786b1537baa4a4c37f7013b4e442f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:8d:ae:89:08:bb:6c:d1:3c:2f:98:3f:50:
15:29:11:75:fb:4e:d0:b8:c9:31:de:09:ad:e0:bb:
83:5f:51:92:eb:b7:aa:fd:be:42:0d:d7:63:17:de:
a4:cb:dc:26:6d:5e:0d:02:98:3d:27:ee:25:cf:45:
9f:5e:5b:86:e9:05:0c:db:e3:cd:4e:5d:ff:95:a7:
c0:ce:c2:fa:1d:0c:30:f5:f0:de:fa:aa:d7:d6:60:
ad:90:97:47:36:32:e3:20:6f:ad:f2:3b:82:a7:61:
75:3b:dd:cb:2b:46:3b:c1:1a:9f:58:c2:d5:25:1b:
50:5b:36:44:23:a9:6f:c8:49:e7:35:0a:2f:76:2f:
61:09:0a:82:0c:ac:f5:98:21:d8:aa:26:57:63:f3:
f2:c7:15:d0:63:6a:d5:2d:3c:78:d0:90:83:22:7b:
ac:a2:e2:aa:8d:4d:b2:36:23:f7:73:65:de:6c:f3:
a0:11:2c:9b:7d:91:3d:f8:51:78:41:6c:f6:71:93:
90:7c:52:5d:1c:35:ad:09:e6:75:51:d2:6b:0d:69:
3d:a2:b7:da:05:09:e0:16:55:d0:9e:58:99:e2:0f:
a0:a2:f6:8d:b1:d3:55:cc:34:09:89:6c:1b:d9:42:
c5:6c:d8:22:11:07:c5:bd:1f:bf:9c:5b:d1:1a:81:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:03:6E:AD:C5:78:6B:15:37:BA:A4:A4:C3:7F:70:13:B4:E4:42:F9
X509v3 Authority Key Identifier:
keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/TgNurcV4axU3uqSkw39wE7TkQvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.40.0/21
46.235.72.0/22
79.142.48.0/20
86.54.107.0/24
89.219.4.0-89.219.19.255
109.163.192.0/21
151.236.192.0/21
185.18.252.0/22
185.249.172.0/22
IPv6:
2a01:4d40::/32
Signature Algorithm: sha256WithRSAEncryption
61:24:d3:ef:c6:c6:88:10:0c:c5:cb:89:d6:a8:c5:32:7a:39:
70:2d:b4:47:fa:62:82:a0:61:3b:2c:4b:f0:52:a5:37:b9:49:
62:91:06:60:6e:3f:3d:21:e8:62:85:ed:3f:1a:f5:c8:20:11:
d5:de:1d:2e:15:a3:03:4d:a9:a5:9d:51:e7:45:74:23:ac:74:
87:8c:54:9d:ee:3e:1e:ac:f4:2f:9e:49:7a:fd:bc:3f:bf:7c:
3e:ac:d2:8d:de:07:a2:49:be:19:b2:46:44:b1:98:28:52:d9:
0e:b7:30:21:33:f5:d6:98:65:d3:e3:09:51:ac:6e:e0:f8:ef:
b8:91:28:03:ee:16:4d:8a:2f:27:27:56:19:35:e4:c2:16:41:
fc:2d:b1:57:10:48:1a:79:d9:00:21:c0:6b:bd:79:0f:ef:fc:
57:c4:78:ff:54:d7:12:49:b1:a9:a4:b6:2b:29:18:9f:6d:ae:
10:69:15:20:01:be:49:c6:2e:9b:4d:ba:e7:68:5e:d9:eb:50:
37:47:1f:10:29:64:b1:40:16:bf:c3:2a:bf:b0:7a:d9:48:49:
82:f6:aa:14:ba:f6:d5:f6:51:2f:61:09:8c:c7:b3:3c:d8:38:
26:03:1d:e6:37:56:7f:b4:ee:64:55:79:c1:cd:a7:07:49:5d:
1d:06:66:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net