Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/Nwe32HeI6UGmVy2CZepJr1ir2vs.roa
File: Nwe32HeI6UGmVy2CZepJr1ir2vs.roa (raw, json)
Hash identifier: cb5zvQ4IPf1kyS2OF/EbW1A9h8gDxFMkSWGt74B25yo=
Subject key identifier: 37:07:B7:D8:77:88:E9:41:A6:57:2D:82:65:EA:49:AF:58:AB:DA:FB
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 018B0BB30602E0187C77C7E2F2263D816521
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/Nwe32HeI6UGmVy2CZepJr1ir2vs.roa
Signing time: Sat 07 Oct 2023 19:52:43 +0000
ROA not before: Sat 07 Oct 2023 19:52:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.8.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0b:b3:06:02:e0:18:7c:77:c7:e2:f2:26:3d:81:65:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Oct 7 19:52:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3707b7d87788e941a6572d8265ea49af58abdafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4f:88:69:32:48:7f:6e:d9:1c:c4:9a:f5:88:
23:35:3b:69:f6:d5:ab:84:4d:08:90:aa:a8:2d:e0:
12:29:1b:77:11:12:f5:d2:30:a9:fb:a3:c4:cb:c0:
4f:63:d1:2d:17:f6:03:ad:5b:98:70:c6:dd:be:fa:
7c:03:50:ea:35:31:ce:e5:79:f8:39:07:a6:9c:7c:
09:c3:b7:a1:84:05:39:da:e4:77:47:b9:65:8a:c2:
4a:f5:92:c5:95:ad:a6:a2:f4:5d:cd:7a:6f:4a:d2:
63:14:bc:50:ff:bd:56:aa:e8:c1:bb:ec:e5:13:bb:
80:06:47:cf:a0:6f:e5:68:cc:44:9e:f8:7f:30:69:
25:3c:8b:a4:e8:ff:b1:52:ce:9d:50:23:69:ca:dc:
75:57:99:cd:bf:7a:3f:cd:59:f3:d5:11:16:74:30:
88:70:65:0b:76:c6:18:08:0f:62:25:3d:26:84:6f:
ad:d7:dc:76:ad:09:4b:c3:41:1f:a2:92:f5:9d:13:
85:bc:36:9b:9d:e6:6f:bd:e5:5d:ec:56:82:db:02:
33:10:05:d7:c3:9e:e5:45:60:f7:a9:ac:6e:d4:6c:
25:d4:fd:57:39:5a:0f:68:b0:aa:9e:ee:d3:53:5d:
e9:85:d8:11:c4:62:c3:fb:b7:05:15:4a:5e:7d:a7:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:07:B7:D8:77:88:E9:41:A6:57:2D:82:65:EA:49:AF:58:AB:DA:FB
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/Nwe32HeI6UGmVy2CZepJr1ir2vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:41:9e:dc:d4:35:f0:b6:cf:c3:68:be:fd:be:da:ee:a3:15:
80:c5:06:40:44:7f:58:9c:d2:b8:ce:04:b1:20:08:18:3b:84:
4f:b9:42:e6:d4:49:b5:cd:10:e3:a1:fd:71:3b:96:43:c6:6e:
86:72:8e:ba:69:e3:fb:ec:18:2f:4c:ef:15:d8:28:06:6d:07:
ac:e4:21:40:8a:3b:ba:90:f3:57:54:07:26:70:c8:5a:db:49:
65:52:8b:d3:22:62:27:ff:55:02:51:1b:76:2e:d9:ed:cc:b2:
bd:df:25:73:5a:01:67:dc:3b:c7:08:8c:3b:4d:f0:b6:b8:3e:
bf:7d:a6:7c:82:fd:20:c3:a9:54:7a:02:0a:84:6c:af:ed:bc:
45:3c:a9:5a:d0:b2:2d:3d:36:4d:cb:1a:45:10:c9:5e:bd:35:
52:54:94:ee:51:ce:1c:cb:4d:18:30:62:5c:dc:88:3e:b7:90:
76:5e:b3:cd:e9:92:c9:7c:c4:e1:ac:89:c2:69:e5:fe:9d:f6:
1a:d2:8f:75:cf:a1:e0:07:51:3d:e6:8e:2c:28:f9:d1:fe:53:
3d:dc:ee:3c:d8:75:63:5b:89:7d:0b:ca:0b:a9:1c:92:ab:b8:
a6:91:f3:9a:f0:d6:45:7e:99:a8:13:22:10:68:0f:e6:ad:f1:
d3:e3:91:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:21 2025 by rpki-client