Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/gXT82y4_ruBTwVaX5bN2hgE4EKo.roa
File: gXT82y4_ruBTwVaX5bN2hgE4EKo.roa (raw, json)
Hash identifier: eKWZFW/juKdnFf5IqmdyNTYbtOCEhhxhQ9S8D2wh2us=
Subject key identifier: 81:74:FC:DB:2E:3F:AE:E0:53:C1:56:97:E5:B3:76:86:01:38:10:AA
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 01941F8C7C354181B388219DB974346C8734
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/gXT82y4_ruBTwVaX5bN2hgE4EKo.roa
Signing time: Wed 01 Jan 2025 01:48:08 +0000
ROA not before: Wed 01 Jan 2025 01:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25229
IP address blocks: 46.150.64.0/19 maxlen: 24
91.237.6.0/23 maxlen: 24
91.237.12.0/22 maxlen: 23
176.111.176.0/20 maxlen: 24
195.42.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7c:35:41:81:b3:88:21:9d:b9:74:34:6c:87:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8174fcdb2e3faee053c15697e5b37686013810aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:9b:a6:05:cb:fb:b5:f7:40:a7:ba:a0:f8:
d7:2c:54:da:17:cf:1d:6e:f2:79:08:d3:7a:cd:6d:
77:0f:f7:9c:2c:df:b6:84:59:46:b0:8a:d7:84:a4:
55:4a:ff:d4:a8:0f:34:73:fb:36:63:77:77:c4:37:
b5:c9:fd:ea:51:53:e8:77:c7:99:97:ca:0d:12:af:
69:84:8d:5c:17:dd:de:24:e4:4d:fa:99:cc:97:e0:
59:99:b4:66:68:78:48:e4:b5:fb:e7:99:f5:46:c9:
f4:b5:bb:32:80:ac:64:14:7f:84:93:b4:a4:eb:f8:
ec:ec:28:7a:6b:05:1c:f6:12:af:2c:f1:28:b8:2a:
1b:b4:05:8d:1b:d4:01:20:86:23:c0:de:e1:5f:67:
e0:fc:c8:42:c7:86:14:88:52:ae:92:e5:34:a4:81:
50:0f:69:04:19:b1:28:6e:a4:9e:f6:e5:f7:16:5b:
e5:6f:d6:e6:f1:6a:82:fe:37:0f:64:ba:90:df:24:
3f:4b:2e:09:5e:e3:3d:06:d3:7d:2e:87:21:74:49:
97:ff:b2:44:47:f9:c4:b4:c7:cf:b5:e8:18:04:0d:
c3:fb:7c:0c:15:35:d2:0f:5d:bb:49:66:b8:3c:b6:
1b:5c:e8:5e:2a:4c:91:a5:d2:83:b3:e6:ad:ed:31:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:74:FC:DB:2E:3F:AE:E0:53:C1:56:97:E5:B3:76:86:01:38:10:AA
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/gXT82y4_ruBTwVaX5bN2hgE4EKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.64.0/19
91.237.6.0/23
91.237.12.0/22
176.111.176.0/20
195.42.126.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:f7:ca:ed:f7:62:df:51:87:87:d5:30:91:95:ff:fb:6c:c2:
18:b2:49:02:fb:3f:ed:f1:8e:e5:ca:c7:a4:30:e3:7e:19:bc:
da:cf:07:25:a7:44:49:2d:9f:bf:16:a0:91:fc:3f:c0:84:99:
f0:01:c0:49:aa:f6:a8:66:e4:01:a9:e1:91:d2:87:02:27:f3:
c6:7c:e4:11:5b:f2:a9:ff:51:79:3e:ea:30:32:d3:ac:aa:80:
c2:16:b0:d8:ff:56:d0:6a:f5:cb:03:26:31:ae:c3:22:fb:f5:
1d:44:14:50:0f:ca:8e:97:8b:cb:59:eb:21:7d:9d:4d:92:db:
d3:71:a9:a7:f8:a6:a3:d2:29:aa:8b:ae:ba:07:7d:4e:e1:d1:
ea:14:44:81:ce:2b:34:7a:08:9f:8e:b2:7b:97:82:50:99:2e:
bb:45:fa:73:d8:d0:55:68:20:c3:fa:b7:e0:7f:75:3d:0a:1c:
95:1d:05:4f:9f:8a:4e:94:3b:71:1a:4c:96:1e:c5:5a:3b:21:
6b:32:49:aa:82:de:3b:29:dd:ad:23:c3:ef:80:61:43:ef:27:
b6:5c:8a:be:ce:63:07:b8:a4:7d:88:d6:3f:d4:0b:70:9a:db:
28:46:c5:1d:54:3c:29:3d:e2:51:38:ae:8c:6f:c4:e5:64:25:
0b:94:ca:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:05 2025 by rpki-client on console.sobornost.net