Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/ejfO3AZKzBlwPba6xQO59n7NRLo.roa
File: ejfO3AZKzBlwPba6xQO59n7NRLo.roa (raw, json)
Hash identifier: Q1Bfu/BU+a9BBUsFm1fFIAH1wgLPZBcZZuq0YCOjgew=
Subject key identifier: 7A:37:CE:DC:06:4A:CC:19:70:3D:B6:BA:C5:03:B9:F6:7E:CD:44:BA
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01959A0B0B50E4C22B67DB5A2EE4DD581D56
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/ejfO3AZKzBlwPba6xQO59n7NRLo.roa
Signing time: Sat 15 Mar 2025 13:42:49 +0000
ROA not before: Sat 15 Mar 2025 13:42:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 46.8.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9a:0b:0b:50:e4:c2:2b:67:db:5a:2e:e4:dd:58:1d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Mar 15 13:42:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a37cedc064acc19703db6bac503b9f67ecd44ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:7d:47:83:8d:d3:0c:66:14:af:e7:40:91:
44:6a:38:27:ed:2d:3b:d5:17:3e:4e:04:4e:91:9e:
7f:cc:a0:f2:58:34:17:d8:0d:1b:a8:21:d8:53:10:
d9:d5:c2:05:77:b1:18:10:b6:87:bc:a7:2c:07:a4:
f9:f2:7b:eb:47:44:99:60:28:e2:19:25:c2:30:46:
14:ec:63:51:af:ec:9e:06:a2:02:86:57:8c:1b:ab:
f0:1f:40:39:61:09:03:4c:16:f1:c1:bc:1d:03:c0:
bc:c5:df:66:3c:67:4d:18:c3:f5:75:6d:16:d8:cf:
17:b8:90:8c:6a:b1:58:8d:0a:29:f2:74:be:e1:60:
b6:7d:e5:f7:cf:02:34:d5:0a:f9:03:28:ce:92:9e:
7a:2b:38:75:95:24:5d:d8:9c:77:95:38:48:a4:cf:
06:07:96:30:3f:ee:1c:2c:60:b6:fd:4d:32:a2:fc:
e3:48:4c:7a:17:a8:4d:e0:62:58:ca:a9:ee:5d:e6:
de:a7:ca:51:5b:34:18:00:f9:1a:d2:8c:9b:59:fa:
df:9b:cf:67:8f:0c:d0:15:08:32:e0:a1:3c:4c:db:
84:91:38:70:7a:18:39:38:f0:9e:00:26:59:91:ef:
bb:48:90:36:1a:12:3d:d2:66:25:a3:cc:4b:79:89:
06:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:37:CE:DC:06:4A:CC:19:70:3D:B6:BA:C5:03:B9:F6:7E:CD:44:BA
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/ejfO3AZKzBlwPba6xQO59n7NRLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.194.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ea:d9:c1:b0:c4:08:58:ad:8e:c1:8f:67:79:f4:33:e1:01:
ea:41:a7:85:5a:f6:a3:cb:6c:35:ac:1a:42:bc:ec:0d:5b:09:
e3:66:7f:cc:69:5b:24:3f:d0:5e:90:88:33:ac:8e:eb:93:6c:
06:5b:b0:91:8c:85:c7:9b:33:00:6c:e2:ab:32:2c:45:14:0b:
7c:68:68:51:88:45:d3:60:f1:c0:da:75:9c:bf:c2:9d:da:3c:
bc:ce:76:be:41:14:91:ab:31:e0:d7:c4:db:cd:39:13:b3:28:
6f:cf:f0:c2:e2:8a:b4:34:b3:cf:59:eb:c8:c1:ff:49:3a:18:
c4:7d:48:7e:02:79:68:e7:7a:9f:92:a1:9f:bf:79:43:b0:52:
0e:06:c8:0a:9d:8b:27:cb:a2:24:00:2b:05:80:04:66:25:b2:
10:54:e1:54:24:c3:52:a7:3f:78:e4:90:3f:7f:02:0b:ad:60:
90:72:75:83:00:f9:21:14:1e:98:81:49:42:9d:3c:6f:9e:aa:
65:22:5e:10:0e:66:06:5e:70:fe:2b:ff:3a:fc:42:b8:80:53:
39:5c:88:da:5b:82:25:72:7d:72:37:79:90:05:37:4c:4a:42:
ce:50:c5:c1:1e:87:73:4c:8b:5d:97:7f:56:c7:b5:55:24:4e:
73:9c:53:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:41:59 2025 by rpki-client