Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/Ch_gbqDsAhbPbPVyCZuUD6Rt_tU.roa
File: Ch_gbqDsAhbPbPVyCZuUD6Rt_tU.roa (raw, json)
Hash identifier: lJyyoSk6lh9Ke1PZ6fr+wMQ+yXg1/zlIl+iWHK5ln+U=
Subject key identifier: 0A:1F:E0:6E:A0:EC:02:16:CF:6C:F5:72:09:9B:94:0F:A4:6D:FE:D5
Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial: 01941F8C1BE4AFCB9BB7030B5C036E9937E6
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/Ch_gbqDsAhbPbPVyCZuUD6Rt_tU.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 46.248.96.0/22 maxlen: 22
46.248.102.0/23 maxlen: 24
46.248.104.0/23 maxlen: 24
46.248.106.0/23 maxlen: 23
46.248.108.0/22 maxlen: 24
46.248.112.0/22 maxlen: 24
46.248.116.0/22 maxlen: 24
46.248.120.0/22 maxlen: 24
46.248.124.0/23 maxlen: 23
46.248.126.0/23 maxlen: 23
82.136.26.0/24 maxlen: 24
82.136.30.0/23 maxlen: 24
82.136.43.0/24 maxlen: 24
82.136.47.0/24 maxlen: 24
82.136.48.0/22 maxlen: 24
82.136.52.0/24 maxlen: 24
82.136.54.0/23 maxlen: 24
82.136.56.0/22 maxlen: 24
85.116.0.0/23 maxlen: 23
85.116.2.0/23 maxlen: 23
85.116.4.0/23 maxlen: 23
85.116.6.0/23 maxlen: 23
85.116.11.0/24 maxlen: 24
85.116.16.0/21 maxlen: 21
85.116.24.0/24 maxlen: 24
85.116.25.0/24 maxlen: 24
85.116.26.0/24 maxlen: 24
85.116.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1b:e4:af:cb:9b:b7:03:0b:5c:03:6e:99:37:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a1fe06ea0ec0216cf6cf572099b940fa46dfed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:0d:f2:1c:80:10:d7:4d:c0:f9:9f:fa:a1:
d7:0b:e8:97:b1:87:46:e8:2d:9c:e5:29:b5:7c:5f:
08:c4:df:6c:f5:20:86:b9:c4:f6:b6:0c:d2:e0:af:
40:98:81:fd:b6:10:ef:f5:39:ee:98:fc:09:0e:29:
ee:70:32:20:69:34:d9:ff:5a:e8:12:01:ec:40:77:
5d:42:e5:ba:e8:20:73:c1:e9:fd:5a:ea:37:c4:a2:
25:41:ed:53:ae:01:40:a4:26:ad:94:37:65:e0:3f:
9e:cd:32:e5:7e:18:65:79:4c:cc:e8:34:c9:c3:dc:
3e:90:15:6c:b1:9b:51:a7:4c:e9:4e:69:7f:18:ef:
e1:2d:c5:43:d3:0b:03:df:73:ff:6f:12:33:61:8e:
ff:62:1e:bc:63:e1:41:b7:bb:eb:9e:c9:22:ef:e0:
1d:c7:4b:bd:1b:40:0b:40:33:71:eb:18:01:ab:81:
4b:eb:73:bc:2c:c3:d4:46:3a:97:19:be:f7:28:e1:
58:f1:6e:39:a5:cd:fa:a7:1b:df:0e:bf:9f:47:0e:
65:60:00:57:5d:15:73:bb:f8:03:2e:94:99:e6:3c:
2c:f8:7e:ba:c7:09:db:f2:5b:1b:dc:61:13:02:dd:
73:0e:d7:42:e3:42:19:66:27:dd:3e:4d:fd:10:15:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1F:E0:6E:A0:EC:02:16:CF:6C:F5:72:09:9B:94:0F:A4:6D:FE:D5
X509v3 Authority Key Identifier:
keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/Ch_gbqDsAhbPbPVyCZuUD6Rt_tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.96.0/22
46.248.102.0-46.248.127.255
82.136.26.0/24
82.136.30.0/23
82.136.43.0/24
82.136.47.0-82.136.52.255
82.136.54.0-82.136.59.255
85.116.0.0/21
85.116.11.0/24
85.116.16.0-85.116.27.255
Signature Algorithm: sha256WithRSAEncryption
97:26:24:f4:f5:92:a8:8e:6e:81:96:d8:d7:45:d2:53:e1:8b:
21:41:84:cf:a0:5a:bc:13:3a:26:34:d4:e8:b8:37:77:bc:01:
df:82:a6:55:77:c1:3f:b1:da:25:9a:ad:0f:9f:7c:de:74:d1:
b1:e4:0c:08:d1:a2:65:f3:8b:62:9b:ff:98:d8:64:af:53:24:
39:cc:04:af:7b:85:ec:f0:82:63:ca:a3:82:82:bb:90:2f:5e:
5b:08:cd:2f:da:23:cc:15:b3:67:28:6d:6e:2b:14:90:7f:2d:
be:fb:58:4b:a4:c0:3d:39:30:f5:78:6b:54:f8:5a:ea:97:af:
45:26:6d:04:83:21:23:ac:84:4f:bb:8e:1b:2e:f8:9c:41:df:
95:a5:94:19:fd:b7:f0:b3:2a:f5:c6:c6:05:6e:02:ca:b7:fd:
c0:78:7f:a5:9c:5b:a4:a7:69:53:ae:ad:cd:42:29:66:48:7d:
5d:f7:6d:a5:b3:bc:2e:df:52:44:05:ef:18:aa:f0:69:1f:1c:
08:c9:f9:c3:e3:b5:cc:36:43:e0:48:d4:9d:77:35:cc:2a:49:
65:14:02:cc:b5:1a:be:eb:e5:a7:a1:9a:78:a7:aa:48:ff:c1:
ba:d1:3f:ae:f2:72:aa:dc:2e:c2:74:cb:c1:4c:03:de:67:4b:
6e:bb:65:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:32 2025 by rpki-client