Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/xWRE4Bi33m2nIR7dy50P-w8tebk.roa
File: xWRE4Bi33m2nIR7dy50P-w8tebk.roa (raw, json)
Hash identifier: rT3VscUsEjM2HWKjbm1zTOTJ87pCcdeHKk++GHjzybo=
Subject key identifier: C5:64:44:E0:18:B7:DE:6D:A7:21:1E:DD:CB:9D:0F:FB:0F:2D:79:B9
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C766FB5A53DDB032558E42F913ACA
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/xWRE4Bi33m2nIR7dy50P-w8tebk.roa
Signing time: Thu 02 Jan 2025 09:50:29 +0000
ROA not before: Thu 02 Jan 2025 09:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42358
IP address blocks: 46.255.96.0/21 maxlen: 21
77.72.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:76:6f:b5:a5:3d:db:03:25:58:e4:2f:91:3a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c56444e018b7de6da7211eddcb9d0ffb0f2d79b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:3c:98:ee:b7:4f:36:9b:31:51:10:ad:35:
94:75:02:8e:78:88:2a:5b:be:aa:94:d3:79:97:7b:
97:c1:5a:8c:2d:9d:4e:f7:c2:6f:9b:27:db:16:d7:
8f:9c:70:46:b7:80:ac:5a:58:a5:f2:61:55:51:94:
66:c9:ac:88:4a:2e:ee:17:e9:12:72:d4:3d:27:7d:
82:46:93:bf:bc:79:1d:b5:c5:a4:e9:e9:e9:bc:ff:
27:64:c5:2d:3b:83:42:16:7a:ef:c0:10:76:51:b7:
dc:23:5e:74:22:cc:e6:78:e8:7e:c9:bd:09:8e:6f:
c3:6b:5f:c2:59:02:c2:35:41:92:01:7a:2a:0c:a0:
07:e9:c1:b9:cc:52:d3:34:7c:f2:3b:b7:98:b1:82:
7a:4d:d7:2d:ae:03:59:a6:92:2e:2f:41:c3:5a:ac:
7b:da:d0:ee:8e:76:7a:85:cc:46:77:57:ca:54:f2:
85:77:d5:59:fd:e6:d2:b1:c7:10:7a:62:b1:dd:44:
9f:90:d9:27:d9:2e:b9:b2:8f:0e:52:a0:57:1b:40:
13:ad:80:62:3d:fa:63:63:a2:7a:29:50:a9:bb:2e:
bc:dd:ca:f9:9c:34:27:a7:ac:a3:63:d0:65:48:95:
3e:fd:fe:df:24:3e:e5:97:07:77:e8:2f:18:a7:76:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:64:44:E0:18:B7:DE:6D:A7:21:1E:DD:CB:9D:0F:FB:0F:2D:79:B9
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/xWRE4Bi33m2nIR7dy50P-w8tebk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.96.0/21
77.72.136.0/21
Signature Algorithm: sha256WithRSAEncryption
65:57:eb:d1:9b:3a:57:4c:bc:55:1a:58:a7:fa:02:82:0a:b0:
68:1a:1c:f4:5b:d0:db:c5:d5:10:c9:d6:cb:71:aa:35:77:56:
65:16:e8:46:15:77:40:7a:e8:e3:9d:87:65:dd:69:ea:4d:e4:
fd:32:e0:2c:a0:3b:f1:6f:e4:b5:87:2d:6b:40:47:ea:59:d3:
ee:d7:aa:44:1c:55:79:fd:52:9d:7a:6d:0d:df:fa:aa:69:ad:
04:62:bb:75:d8:fe:de:e3:c7:87:8f:30:8d:09:a0:f5:58:46:
32:05:31:70:b4:a0:b9:26:65:ae:8c:da:4e:2a:27:a3:13:90:
12:0c:12:b9:b7:db:52:63:6f:be:a5:9c:87:c2:69:f4:99:aa:
8d:dd:df:05:a9:48:b8:90:9d:1b:f1:29:09:80:0e:07:32:9e:
07:e2:f1:a5:5e:d7:f3:a0:67:52:0c:6e:62:a7:ea:f4:38:3a:
3d:4f:15:5b:99:e0:18:26:ef:1b:d0:91:6b:ef:d6:3b:59:10:
88:7c:bd:fa:9f:98:6c:14:8b:72:4b:49:7c:99:b7:4d:53:3e:
a5:11:1e:c9:bf:5d:d0:0c:49:09:ca:ca:1f:26:82:79:d4:d9:
fd:22:9b:3a:f1:1a:82:c1:ee:67:51:d9:e9:97:1b:95:1e:61:
7e:91:f7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net