Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1IpB1KwV9m_FKARx7ylIUMT4DwQ.roa
File: 1IpB1KwV9m_FKARx7ylIUMT4DwQ.roa (raw, json)
Hash identifier: efzAaMp8YPorhGhURmm5hw49DSGuTMXno8F72sN9BDs=
Subject key identifier: D4:8A:41:D4:AC:15:F6:6F:C5:28:04:71:EF:29:48:50:C4:F8:0F:04
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D85E33667C5455C517D363D2AA1BA9
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1IpB1KwV9m_FKARx7ylIUMT4DwQ.roa
Signing time: Thu 02 Jan 2025 11:48:21 +0000
ROA not before: Thu 02 Jan 2025 11:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400039
IP address blocks: 46.37.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:5e:33:66:7c:54:55:c5:17:d3:63:d2:aa:1b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d48a41d4ac15f66fc5280471ef294850c4f80f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:7e:b6:1b:86:45:14:16:f8:10:68:66:81:
88:da:46:fd:ee:98:c5:83:21:d8:60:f2:65:d3:38:
10:02:a8:26:76:9b:07:3d:62:67:2e:aa:d7:da:0b:
c1:6a:5f:0d:bf:ea:80:31:a4:d8:44:80:d1:40:46:
e5:2b:1d:f4:2d:0d:b6:ee:be:7e:66:33:e6:df:17:
a5:14:26:fa:1b:96:d1:83:1b:22:a9:b2:fc:e9:a1:
1c:f0:f5:6d:04:fa:eb:81:c7:09:71:6a:b2:0f:75:
7b:62:b0:1f:39:c7:05:36:19:de:24:c9:25:c4:d7:
34:1b:50:74:af:cf:3e:b4:38:da:81:35:6b:0f:e4:
0d:62:79:c2:45:e8:8b:ee:0f:6f:ec:c6:58:fa:68:
e1:ca:d8:31:24:8d:55:6e:a5:35:3c:53:24:b4:85:
df:41:78:25:76:b0:08:1e:52:eb:e2:40:60:ba:fd:
8b:a5:a4:14:ac:f3:7c:6b:5b:50:db:2c:b8:6d:f4:
c0:9e:3b:69:87:da:76:9b:0f:3d:5b:7d:6b:26:cd:
34:53:37:bf:65:9c:f9:ca:8a:85:77:f3:a6:96:ac:
33:49:db:80:20:01:ab:e0:f1:bc:fc:3b:bf:c2:a1:
35:92:76:dd:6e:e5:74:1d:55:0a:6b:b1:83:f6:2f:
9b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8A:41:D4:AC:15:F6:6F:C5:28:04:71:EF:29:48:50:C4:F8:0F:04
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1IpB1KwV9m_FKARx7ylIUMT4DwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.106.0/24
Signature Algorithm: sha256WithRSAEncryption
80:1e:e6:6d:ae:6f:68:85:2d:4e:19:e6:f5:e7:1d:1c:68:f7:
0f:94:d7:b2:89:58:b9:9e:48:bf:87:da:82:98:98:93:41:e0:
07:46:59:b8:a4:07:8b:ec:c9:a2:c0:b9:45:08:ce:26:88:b4:
94:de:e1:00:c8:f5:b1:4f:a8:9d:9b:41:a7:f8:9f:80:5c:b8:
83:aa:fc:87:df:a2:1a:0f:19:e0:46:96:f2:dd:9b:2a:d9:28:
33:c6:35:48:db:6a:ef:8c:9a:e5:09:d9:b1:44:22:9e:ba:3f:
b6:6d:c9:26:d1:35:64:c6:71:02:b1:a1:4c:e5:ee:ff:2c:94:
9b:40:4d:fc:d2:f9:4f:9b:8f:2f:0e:cc:37:fe:cb:33:f8:b8:
4d:f1:8d:b8:ee:43:35:de:0a:38:7e:32:db:18:a2:ed:4e:47:
2e:a6:bd:28:75:6e:01:de:57:84:ff:35:d7:1f:93:e9:7b:24:
13:aa:38:cb:b1:f7:41:e7:db:53:3b:75:37:a7:36:35:e6:dd:
23:ee:8e:60:73:5f:2c:52:e0:54:4c:94:b0:db:60:df:f0:5b:
1a:29:be:d9:cc:84:78:e9:51:74:b5:db:e6:5a:5b:86:c7:93:
0c:dd:ca:97:98:46:02:6e:c8:52:30:cc:13:21:d3:8b:be:00:
1f:ec:ce:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:00:04 2025 by rpki-client