Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_6U3CHBi935pqrHTwJ5TdRkHXwo.roa
File: _6U3CHBi935pqrHTwJ5TdRkHXwo.roa (raw, json)
Hash identifier: 0SlPDiHtCtBAddqNeJywQe79l9FdKukQc3VCsFnf2G4=
Subject key identifier: FF:A5:37:08:70:62:F7:7E:69:AA:B1:D3:C0:9E:53:75:19:07:5F:0A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0195B99255484B969A4B3A0D01C81FA190A2
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_6U3CHBi935pqrHTwJ5TdRkHXwo.roa
Signing time: Fri 21 Mar 2025 16:38:49 +0000
ROA not before: Fri 21 Mar 2025 16:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52468
IP address blocks: 46.29.28.0/24 maxlen: 24
94.125.137.0/24 maxlen: 24
201.77.48.0/24 maxlen: 24
201.77.53.0/24 maxlen: 24
201.77.55.0/24 maxlen: 24
217.76.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b9:92:55:48:4b:96:9a:4b:3a:0d:01:c8:1f:a1:90:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 21 16:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffa537087062f77e69aab1d3c09e537519075f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:74:13:0f:ea:af:bd:fd:a7:13:b2:7a:5f:69:
74:b7:27:0e:a9:dd:20:65:3c:ac:ea:d9:12:3a:76:
f8:92:0e:1d:c0:86:d2:0c:67:18:1c:1a:ac:45:7f:
3e:d7:49:42:2f:4c:94:cd:03:f0:44:04:56:50:83:
9b:7a:f9:b2:84:77:fc:aa:53:45:12:a9:1b:ff:9d:
4f:90:8e:bb:96:1e:c2:a4:1d:fd:78:40:3c:83:9b:
fd:ed:8d:d4:1a:4e:a3:ac:07:6c:ef:9e:fa:08:0d:
c3:ab:32:f6:8e:b3:73:dc:fb:a7:5f:c1:69:de:ef:
12:10:6a:03:3c:5f:6a:c2:59:d0:ac:fa:fb:55:69:
a7:88:fe:16:a8:c4:61:a6:c3:87:c5:18:f5:13:0c:
17:b5:7c:b2:e6:76:d1:22:85:6c:13:a6:e0:f3:22:
63:29:34:2f:6b:ec:54:23:73:11:75:82:b2:d9:3e:
f3:69:a1:95:ae:10:f0:ef:e6:d3:5c:96:47:0c:cc:
72:fc:ec:58:b0:e6:93:cc:e2:b3:52:2f:4f:a1:ab:
f6:b1:ce:0a:a1:3b:40:b2:3f:89:6a:ce:36:2b:32:
b4:18:d0:b8:aa:44:ba:a1:4b:d8:2d:0f:47:af:8a:
33:c8:78:80:c5:5d:b3:de:cf:ca:06:14:96:01:29:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A5:37:08:70:62:F7:7E:69:AA:B1:D3:C0:9E:53:75:19:07:5F:0A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/_6U3CHBi935pqrHTwJ5TdRkHXwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.28.0/24
94.125.137.0/24
201.77.48.0/24
201.77.53.0/24
201.77.55.0/24
217.76.240.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7f:23:72:d8:86:bf:87:19:62:59:77:97:3d:3c:25:db:13:
2c:88:e8:72:5e:62:2c:82:3c:e0:00:c8:05:28:5d:db:9f:70:
d1:76:cf:ed:fd:11:50:f2:a7:47:a3:b2:3e:3b:6a:fc:a7:74:
6c:08:9e:6a:6a:82:c0:77:c3:ed:fa:de:de:65:36:98:47:f1:
7b:30:a7:34:37:23:9f:b9:2b:71:60:be:c1:03:5c:68:3b:36:
b5:03:e7:06:b4:fb:74:94:ce:47:41:bf:1b:d2:4f:98:71:fb:
36:7e:5b:5b:32:98:9c:94:2e:b3:f1:9b:d3:03:3e:60:b3:7e:
56:5b:19:b7:63:57:cf:47:06:d4:cc:83:59:64:9c:1a:0b:9b:
31:a0:ee:8b:8a:2e:24:6d:37:4e:03:d3:9e:d8:e9:ec:27:88:
9c:7a:2f:f6:6d:14:9c:63:11:ed:ce:88:3f:92:45:2a:79:0a:
22:f4:c2:fd:7c:59:8b:fe:d0:27:2c:14:74:dc:a1:62:f5:c6:
5b:d3:cf:32:44:3e:cb:95:36:99:98:f4:46:9e:67:79:10:ac:
31:83:5e:ca:b6:95:4a:06:d0:19:4f:d8:e2:c0:7a:df:fe:64:
cc:71:2a:a2:5c:b5:70:d6:db:c7:73:86:a2:95:b3:4e:01:b4:
4d:df:76:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:43 2025 by rpki-client