Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/X7sxw7uNpouw4ILJQaZasQ1FOVw.roa
File: X7sxw7uNpouw4ILJQaZasQ1FOVw.roa (raw, json)
Hash identifier: 7K5qnvzu1jh/3cj6mY1PwjKcxXcNjjVrkTNjEwE3NGw=
Subject key identifier: 5F:BB:31:C3:BB:8D:A6:8B:B0:E0:82:C9:41:A6:5A:B1:0D:45:39:5C
Certificate issuer: /CN=c013d0505d07aa10d9117ac2fd56266d4890518f
Certificate serial: 019424B2FD4E5FBA136D7B96FDFB55E9E156
Authority key identifier: C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/X7sxw7uNpouw4ILJQaZasQ1FOVw.roa
Signing time: Thu 02 Jan 2025 01:48:17 +0000
ROA not before: Thu 02 Jan 2025 01:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197293
IP address blocks: 46.31.248.0/21 maxlen: 24
178.248.144.0/21 maxlen: 24
185.15.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:fd:4e:5f:ba:13:6d:7b:96:fd:fb:55:e9:e1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c013d0505d07aa10d9117ac2fd56266d4890518f
Validity
Not Before: Jan 2 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fbb31c3bb8da68bb0e082c941a65ab10d45395c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:d2:26:3c:d3:ca:b7:20:52:35:f4:93:8a:
58:85:76:65:9e:54:36:4b:6e:28:f9:5a:67:8e:7a:
bf:b4:04:3b:9d:cd:8b:47:35:34:8e:a7:44:0f:c8:
5f:88:81:63:b4:e2:16:04:a3:6d:32:3c:06:47:ee:
2d:f6:45:3e:fc:40:00:8d:93:5f:53:ff:40:65:14:
29:24:35:1a:d3:a6:b1:c6:2b:19:30:32:ff:a8:fa:
f9:72:7a:eb:e4:d3:f4:e0:a2:c3:87:0f:93:b4:c3:
b1:db:18:41:df:ed:f8:0f:1b:4b:4a:62:de:6c:53:
99:c5:80:bd:43:61:98:97:87:98:c1:00:bf:21:68:
a2:69:87:b6:bd:81:9c:3d:44:23:3d:a1:20:6a:18:
6e:fb:97:a2:aa:b5:42:8b:c2:60:a1:76:92:62:1f:
7d:a3:47:7d:45:a3:10:0d:49:bf:8d:b3:86:a1:c1:
e3:f2:17:9a:00:08:61:bd:02:f6:21:fd:98:88:2f:
8a:e5:83:cb:7b:60:c4:7a:35:72:d9:45:c1:4b:44:
a6:a8:e3:eb:8b:f0:3f:b9:10:5e:e9:35:46:ae:70:
69:5c:3a:6f:39:cf:f1:04:ff:a9:38:d2:81:90:9e:
d1:33:7a:53:5c:b1:23:17:bf:12:29:69:a2:c9:62:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BB:31:C3:BB:8D:A6:8B:B0:E0:82:C9:41:A6:5A:B1:0D:45:39:5C
X509v3 Authority Key Identifier:
keyid:C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/X7sxw7uNpouw4ILJQaZasQ1FOVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.248.0/21
178.248.144.0/21
185.15.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:39:12:ab:2d:71:f0:ed:c0:ec:0a:e6:d2:f3:1e:3d:81:2b:
e9:b6:8b:6c:a1:00:f5:82:8c:18:e1:0c:ee:f5:e1:0f:7d:f5:
c2:ac:84:97:4b:b8:76:20:38:44:50:d9:0c:6c:ab:a4:d8:c0:
e2:7a:95:b8:13:ed:67:20:0b:23:ba:08:e1:63:14:27:c8:d6:
95:d6:7e:87:5e:75:be:40:8c:25:50:14:80:28:94:f6:a8:c5:
4c:64:09:10:97:eb:39:8e:1e:e6:98:90:8a:0d:b6:68:d0:e9:
6e:59:c5:c6:11:50:a4:96:b0:6c:db:b2:e9:a0:2e:9f:b3:4d:
e5:f4:f8:d6:78:a4:7d:fd:a4:e7:f9:85:4e:c4:8a:34:c3:0f:
66:01:ab:86:9a:15:c8:a9:a2:f0:a6:b5:5f:63:cc:30:17:ac:
37:e9:1f:08:3b:f1:40:6f:04:2e:8d:d4:a2:1c:51:ea:34:30:
26:ff:52:0a:81:9d:f6:45:ab:50:96:ce:f4:13:bd:8f:4c:a4:
19:db:d5:b0:e8:22:55:a8:0d:ff:42:3a:aa:4b:5c:a8:18:9c:
c5:63:55:39:e2:41:25:30:8c:05:5d:8d:66:62:5c:ea:d6:98:
ef:2f:c8:bd:4a:68:b6:72:22:88:25:4c:0a:94:d5:8e:17:77:
30:69:9a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:04 2025 by rpki-client on console.sobornost.net