Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/VrOphe6ryGGmJEj1t_1Mq4PK1ik.roa
File: VrOphe6ryGGmJEj1t_1Mq4PK1ik.roa (raw, json)
Hash identifier: X6Th8YTmzDo0WxGuBR8jVg9zuv1y3JgAcjmJy0u4I8Q=
Subject key identifier: 56:B3:A9:85:EE:AB:C8:61:A6:24:48:F5:B7:FD:4C:AB:83:CA:D6:29
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 01942521693A8C790B95725F96A4EC257426
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/VrOphe6ryGGmJEj1t_1Mq4PK1ik.roa
Signing time: Thu 02 Jan 2025 03:48:53 +0000
ROA not before: Thu 02 Jan 2025 03:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64476
IP address blocks: 46.247.136.0/23 maxlen: 23
46.247.138.0/23 maxlen: 23
46.247.140.0/24 maxlen: 24
46.247.141.0/24 maxlen: 24
85.190.64.0/24 maxlen: 24
85.190.65.0/24 maxlen: 24
85.190.67.0/24 maxlen: 24
85.190.68.0/24 maxlen: 24
85.190.71.0/24 maxlen: 24
85.190.72.0/24 maxlen: 24
85.190.84.0/24 maxlen: 24
85.190.85.0/24 maxlen: 24
85.190.88.0/22 maxlen: 22
87.121.208.0/21 maxlen: 21
185.161.168.0/22 maxlen: 22
185.231.8.0/22 maxlen: 22
185.253.168.0/24 maxlen: 24
185.253.169.0/24 maxlen: 24
185.253.170.0/24 maxlen: 24
185.253.171.0/24 maxlen: 24
2a0a:e805:210::/44 maxlen: 44
2a0a:e805:500::/40 maxlen: 40
2a0a:e805:610::/44 maxlen: 44
2a0a:e805:710::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:69:3a:8c:79:0b:95:72:5f:96:a4:ec:25:74:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Jan 2 03:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56b3a985eeabc861a62448f5b7fd4cab83cad629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:05:df:ca:e0:e2:86:42:ae:0d:6e:43:86:
f2:2b:df:e7:87:6e:b5:41:e3:47:d9:f5:76:9e:75:
04:cf:99:3a:8b:6d:03:e8:d7:7b:50:00:6c:eb:35:
bf:6a:7e:81:fc:52:a2:44:cf:bf:08:63:65:de:75:
4a:cd:f7:63:20:ea:f7:0e:43:0a:ec:0b:9f:3a:36:
08:d7:1e:ea:7d:49:cd:35:3f:73:f6:e4:89:cd:cf:
74:57:71:cd:d2:07:68:80:0b:f5:49:30:9b:fe:0a:
a7:f9:c0:31:68:18:69:54:27:64:e8:4b:36:f8:aa:
33:b2:05:7d:da:70:9a:e4:64:c2:17:fe:a2:ec:17:
72:76:7e:cf:de:60:17:d2:ad:6c:19:5f:80:8f:82:
52:fc:e5:b0:8b:c2:d2:6f:8e:55:29:00:17:e3:05:
d1:9b:bb:02:4d:73:7f:5b:4e:b2:39:bc:8e:79:b1:
c3:5b:ff:1d:29:4e:10:37:24:5d:04:5a:5e:6c:bf:
32:da:cb:a0:01:17:a8:ac:ba:26:41:9a:02:97:fc:
45:ef:ee:e8:f4:5e:83:92:61:5b:0d:f7:79:80:ab:
42:de:ef:ac:d5:21:fb:01:30:4f:4c:73:71:86:c6:
bb:c0:1a:52:6d:ec:ca:d8:89:ac:71:f4:32:17:6f:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B3:A9:85:EE:AB:C8:61:A6:24:48:F5:B7:FD:4C:AB:83:CA:D6:29
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/VrOphe6ryGGmJEj1t_1Mq4PK1ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.136.0-46.247.141.255
85.190.64.0/23
85.190.67.0-85.190.68.255
85.190.71.0-85.190.72.255
85.190.84.0/23
85.190.88.0/22
87.121.208.0/21
185.161.168.0/22
185.231.8.0/22
185.253.168.0/22
IPv6:
2a0a:e805:210::/44
2a0a:e805:500::/40
2a0a:e805:610::/44
2a0a:e805:710::/44
Signature Algorithm: sha256WithRSAEncryption
4a:a3:e7:8f:e7:67:d3:2e:b6:60:89:7d:c5:5a:79:34:49:cd:
f7:05:4e:f5:70:4c:c1:fa:ae:35:be:70:54:38:60:ea:8b:24:
c1:03:11:1b:da:6c:ff:5f:0c:f1:28:cb:25:38:be:53:19:ae:
d6:03:59:0c:5a:79:06:ff:fb:2a:6a:81:cd:26:f2:b1:eb:a9:
77:49:23:f2:0d:99:8c:df:67:93:2c:38:cb:43:aa:28:e3:46:
3a:93:aa:6f:ee:d3:8f:17:ad:52:5d:c8:8f:bb:f9:7c:05:e3:
8c:64:02:c7:a3:9d:f9:57:9e:8c:9e:1d:f6:2b:7a:56:ab:dc:
fa:ab:2c:bd:1a:f3:d0:20:e1:cd:69:21:ad:d5:c1:72:4f:0e:
70:d3:c4:10:60:5d:a9:51:6e:a2:83:bb:ec:7c:af:db:c6:7a:
99:e0:cf:e4:51:c4:81:a8:c4:65:f4:82:fd:6d:bb:aa:20:74:
de:74:a7:f4:d2:fc:fe:46:2d:d2:c3:fd:70:20:bb:7b:38:a2:
a2:31:ed:35:05:3d:29:ed:03:11:c9:95:83:05:7d:36:63:fb:
b6:e3:a7:42:c9:fc:21:c5:8c:4c:81:28:11:80:6f:b9:16:82:
37:5c:df:eb:7e:04:9e:79:99:d7:a1:44:a0:ce:80:65:dd:98:
17:d5:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:47:30 2025 by rpki-client