Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa
File: wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa (raw, json)
Hash identifier: f4HzR7oYG7fd8e6V0L4X7gl2jzshj4xdJvyeqOJq5mY=
Subject key identifier: C0:FC:58:83:1D:AC:0D:BB:BB:FD:23:66:7C:78:98:CF:8B:FD:86:C9
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 0194228D68ED908222836F061576373E213A
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa
Signing time: Wed 01 Jan 2025 15:48:00 +0000
ROA not before: Wed 01 Jan 2025 15:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204106
IP address blocks: 46.20.202.0/23 maxlen: 23
46.20.202.0/24 maxlen: 24
46.20.203.0/24 maxlen: 24
77.247.198.0/24 maxlen: 24
2a13:1b00::/29 maxlen: 29
2a13:1b00:1::/48 maxlen: 48
2a13:1b00:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:68:ed:90:82:22:83:6f:06:15:76:37:3e:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Jan 1 15:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0fc58831dac0dbbbbfd23667c7898cf8bfd86c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:dc:b4:36:22:d4:e7:a5:af:b4:61:0a:dd:
10:0a:d3:08:77:01:9f:bf:2a:59:6e:8a:53:3b:ca:
8a:ba:b9:89:7d:d2:3c:99:08:33:01:78:ec:b8:72:
78:d0:14:19:ff:82:e5:54:4d:63:b9:63:e1:af:14:
17:9b:78:78:f7:05:35:83:b0:60:64:67:3e:c1:4d:
33:40:ff:15:c9:ee:b9:77:a3:6d:2f:6c:88:c1:ed:
f1:6f:c1:2a:ac:ac:2b:81:e0:a8:ea:20:0b:a7:fd:
9e:16:04:4e:96:6e:60:9b:f7:bf:a9:d6:b9:24:d3:
83:11:a3:14:71:6c:96:44:e5:7f:4e:03:a6:0a:5f:
fe:f6:aa:7c:34:32:f4:bd:ea:90:c6:66:64:a3:31:
5f:72:aa:3f:f2:89:38:2e:be:23:16:17:03:03:fa:
f6:fc:ea:43:c0:79:ef:2d:0f:9a:bb:5a:bd:15:63:
ff:a4:25:90:3a:34:cf:d2:bb:63:07:0e:50:dd:6a:
f0:be:1d:d4:b4:3c:31:ee:16:a9:f9:60:81:bf:a5:
53:ac:fb:cf:0a:a4:a0:ac:92:49:49:7c:f2:6b:5e:
f6:3e:6f:94:44:ad:72:1e:e7:69:f4:ff:aa:84:74:
6f:f1:0e:67:af:1c:a9:34:1d:a4:6c:58:f2:cf:8a:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FC:58:83:1D:AC:0D:BB:BB:FD:23:66:7C:78:98:CF:8B:FD:86:C9
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.202.0/23
77.247.198.0/24
IPv6:
2a13:1b00::/29
Signature Algorithm: sha256WithRSAEncryption
1b:f8:d0:73:0b:5f:e0:8f:75:d3:bc:47:46:70:d0:09:d0:d3:
49:db:5f:11:e2:29:7d:94:30:aa:16:cf:5a:55:75:db:26:5a:
06:20:22:35:cd:27:b6:cb:ed:8a:cc:24:6e:46:a5:4d:60:c9:
ee:43:40:24:94:6a:2c:56:ed:32:8c:a6:59:e5:dc:be:da:25:
b4:c7:ca:49:38:76:2d:cb:c6:67:16:2f:b1:cf:59:c8:50:92:
38:9d:49:27:b1:ea:3e:82:30:9a:77:28:50:76:f5:0a:61:99:
3e:22:d3:f9:b7:a7:83:73:2b:36:89:92:ca:cb:f1:ab:6e:e8:
44:06:55:ed:a5:7c:8c:4b:ee:9c:43:55:8c:8c:c7:7a:61:f1:
7a:02:7a:f5:eb:02:42:89:92:13:6f:3f:a9:83:96:76:2c:fb:
b4:82:01:24:c9:f6:7b:87:39:7f:fd:9b:90:25:f8:25:29:43:
b5:94:95:80:6c:15:c3:c4:cb:e5:48:c0:24:be:19:6e:34:be:
38:14:83:a4:cf:5f:aa:e5:25:f8:c6:62:5b:64:18:54:ac:fb:
12:e6:84:82:0d:bf:e7:0e:f9:ae:a1:fa:e6:56:62:cc:2e:b9:
df:ed:d8:0e:4f:d7:d6:f0:31:b8:13:3b:94:63:c8:27:87:28:
a9:1f:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:34:35 2025 by rpki-client