Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5Jm-BvPAKNHZFq96dxLsREv6a4A.roa
File: 5Jm-BvPAKNHZFq96dxLsREv6a4A.roa (raw, json)
Hash identifier: a/89u2WD7s95Qrynaw/nDEIXPn6qcHIzz4Nzpd0PT8A=
Subject key identifier: E4:99:BE:06:F3:C0:28:D1:D9:16:AF:7A:77:12:EC:44:4B:FA:6B:80
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019543E7D97E2675E45AA2B83062129F29FD
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5Jm-BvPAKNHZFq96dxLsREv6a4A.roa
Signing time: Wed 26 Feb 2025 20:17:02 +0000
ROA not before: Wed 26 Feb 2025 20:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 46.37.121.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:43:e7:d9:7e:26:75:e4:5a:a2:b8:30:62:12:9f:29:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 26 20:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e499be06f3c028d1d916af7a7712ec444bfa6b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:ed:ab:4a:a4:2e:c2:b6:6b:57:fc:ee:aa:
42:10:f3:c8:1a:c1:11:a6:b7:5d:57:82:5c:d4:f0:
6c:3f:07:8e:a0:37:7e:f8:7a:aa:d7:7b:d4:e2:fd:
e6:84:a5:76:c1:c0:b8:56:e7:bb:41:d0:ee:b8:fa:
bd:e7:78:da:12:a6:78:78:1c:25:e8:38:01:b7:65:
b3:f4:73:9a:e6:91:1f:34:78:ed:21:6a:77:2d:68:
5c:8f:7a:50:6d:0f:d7:6e:03:e8:23:62:19:92:d3:
f9:d0:26:71:9e:5c:c5:59:cf:6a:dc:9b:c2:0e:ce:
4a:15:61:bb:c5:5e:36:2f:a8:d8:d3:72:03:9f:7e:
70:41:9f:41:1e:a7:90:06:eb:36:fe:cf:ab:38:e6:
99:b7:95:74:a4:02:73:a5:62:83:de:18:12:d5:b1:
89:1a:83:37:a1:32:23:59:71:28:f7:f0:07:74:ac:
1d:d4:40:2e:fd:b9:07:e7:43:c7:9f:1f:38:47:88:
2a:59:92:b8:fd:16:fa:6f:04:8e:f4:ef:4c:e6:09:
01:c7:da:fc:30:c7:03:27:27:8e:d3:bb:2f:23:5c:
38:ee:a2:fe:18:3b:14:9f:46:42:e6:31:65:37:94:
0e:a1:42:83:65:a9:07:ab:a0:27:74:9f:0b:38:63:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:99:BE:06:F3:C0:28:D1:D9:16:AF:7A:77:12:EC:44:4B:FA:6B:80
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5Jm-BvPAKNHZFq96dxLsREv6a4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.121.0/24
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e5:44:a1:57:4d:bd:2e:f8:1f:60:1b:94:13:1a:71:4f:fb:
28:35:2b:4c:4b:e3:22:5a:bf:2e:14:c7:1e:8a:06:90:5d:6d:
b6:89:2d:cb:1a:7f:dc:76:73:39:9e:0a:7e:3d:c5:78:93:96:
68:f8:c3:2d:79:d0:f7:e7:a8:b0:8d:5d:81:ea:01:aa:af:0e:
ba:45:45:fc:8e:5f:07:8f:71:ee:e6:07:ba:96:54:02:51:21:
04:6b:0a:6f:3d:d8:94:c1:81:38:43:d0:39:46:04:01:96:13:
00:24:ee:1b:d8:b9:3c:bb:3b:f4:ea:aa:70:93:7e:6e:fd:13:
96:95:73:2d:6a:73:29:f8:9b:82:9a:40:54:bf:7b:72:fe:09:
6e:0d:40:db:5d:5f:d6:a4:51:92:19:4f:06:48:f6:bc:a7:d5:
43:a5:ad:3d:73:94:90:d4:fc:0b:3c:ee:7b:27:13:5b:fd:d0:
6e:ec:e5:33:a2:a1:b5:62:53:ff:d9:67:7b:10:79:f3:02:6e:
36:8a:d1:ca:6a:30:33:57:74:5b:5f:8e:e8:0d:a5:ec:d2:e0:
f5:6c:86:a9:db:29:41:a7:80:5d:97:38:e3:15:5a:f2:5a:06:
cd:bc:96:2b:77:fc:ac:af:82:6b:f5:6f:27:c2:0d:a1:da:68:
e6:7a:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:51 2025 by rpki-client