Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/daYV5svP14BSfH0S8i-aZ5WBv5M.roa
File: daYV5svP14BSfH0S8i-aZ5WBv5M.roa (raw, json)
Hash identifier: Hs0nBQ6m77zflugmlg/FABCDAsXWbLjyitCeWa+v+ug=
Subject key identifier: 75:A6:15:E6:CB:CF:D7:80:52:7C:7D:12:F2:2F:9A:67:95:81:BF:93
Certificate issuer: /CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Certificate serial: 019425FDEADB1B73EA800475358DFBAAF57D
Authority key identifier: 31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/daYV5svP14BSfH0S8i-aZ5WBv5M.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204818
IP address blocks: 46.16.205.0/24 maxlen: 24
46.16.206.0/24 maxlen: 24
46.16.207.0/24 maxlen: 24
185.148.76.0/24 maxlen: 24
185.148.77.0/24 maxlen: 24
185.148.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ea:db:1b:73:ea:80:04:75:35:8d:fb:aa:f5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75a615e6cbcfd780527c7d12f22f9a679581bf93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:32:85:27:fd:82:41:96:b7:bb:a3:9f:60:
b2:90:d1:57:d4:8c:2d:87:eb:0c:f5:55:b1:ec:59:
56:5d:8f:77:69:15:35:d9:c6:15:a1:d7:03:ba:05:
b4:03:49:ea:87:e7:97:5e:5a:b3:ee:f6:81:de:ba:
80:91:b1:dc:4a:78:69:20:7c:07:a1:ad:73:16:ec:
97:12:05:d4:b8:10:dd:c1:37:73:87:3d:8f:9e:70:
8c:cf:fe:97:b7:0c:63:fd:7e:9a:d8:84:c2:f2:17:
86:60:3c:bf:99:3f:b7:55:cc:18:34:bc:e9:2f:6d:
44:29:31:c3:87:e7:06:f4:dc:cb:4e:df:75:cf:1f:
16:ec:51:fb:15:66:d0:aa:71:05:d3:fb:d9:d8:ac:
3f:24:cc:f0:1a:d9:8a:74:05:a8:ef:e0:4e:1c:84:
3b:25:e6:eb:cd:df:b1:1d:b1:d0:1f:e3:e1:fd:81:
35:c7:8f:08:04:5b:73:3c:16:b2:e5:0a:51:37:1d:
aa:9d:b6:3e:1e:60:55:aa:e5:ee:59:b3:0d:42:f0:
d6:ff:cb:2f:5a:48:46:bd:9a:2d:c2:f9:65:60:7d:
c9:b8:7b:fe:4b:35:69:95:0b:fb:66:76:6f:f6:73:
61:c4:48:92:fe:5b:11:7b:76:9f:b0:ba:58:f8:40:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A6:15:E6:CB:CF:D7:80:52:7C:7D:12:F2:2F:9A:67:95:81:BF:93
X509v3 Authority Key Identifier:
keyid:31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/daYV5svP14BSfH0S8i-aZ5WBv5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.205.0-46.16.207.255
185.148.76.0/23
185.148.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:9f:59:a1:6d:12:a2:60:06:e3:0d:73:c1:9e:55:f9:07:ad:
f3:df:f7:96:ec:99:07:07:ed:18:b6:bc:c9:f6:43:74:b9:b7:
25:62:0f:47:dc:21:a3:4c:13:9e:c2:5c:4d:38:98:0b:e8:c7:
8c:90:ab:7e:cf:28:a1:44:71:d1:8f:2a:7b:29:68:2b:b6:c8:
f3:5d:02:ce:af:99:71:74:1d:6b:e0:2f:5d:83:99:40:a4:98:
34:c8:f1:ad:f2:bb:4b:9c:fc:8e:a1:57:34:c9:5c:22:cd:cc:
f3:04:bc:72:80:b4:bb:ec:5d:a0:f5:bb:6f:71:92:2a:27:15:
e3:8e:e4:cc:28:26:75:03:c6:c8:6d:a6:cd:7e:0b:dc:a7:55:
72:a5:f5:e7:18:93:5b:c5:7f:61:b5:97:94:de:a6:95:0a:14:
f7:33:5f:4e:3f:e6:9e:e6:f1:d4:d6:fc:5d:74:64:dc:49:25:
d4:6d:8e:d6:7f:ed:2e:73:04:e1:b3:e1:0b:27:f7:1f:14:ad:
d2:95:e9:69:ef:e5:8d:16:d4:3c:99:3f:14:18:f9:7a:bf:3f:
c3:a2:86:2d:d0:1a:a0:fd:22:bd:28:e3:43:05:a3:c5:95:01:
bb:5f:d2:b6:53:ec:ce:71:4a:35:7e:84:fb:fb:2f:9e:ca:d7:
7a:52:ae:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:41:38 2025 by rpki-client