Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6-E3GV-1zl_2yzB1tlLwKIaoDeo.roa
File: 6-E3GV-1zl_2yzB1tlLwKIaoDeo.roa (raw, json)
Hash identifier: Y4flrl4xeR5/WpyVgKZh1kuBPxjD9smyUQlEgtTVekg=
Subject key identifier: EB:E1:37:19:5F:B5:CE:5F:F6:CB:30:75:B6:52:F0:28:86:A8:0D:EA
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D84C77E7348279163ACFF08FE1CE99
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6-E3GV-1zl_2yzB1tlLwKIaoDeo.roa
Signing time: Thu 02 Jan 2025 11:48:17 +0000
ROA not before: Thu 02 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 46.37.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:4c:77:e7:34:82:79:16:3a:cf:f0:8f:e1:ce:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebe137195fb5ce5ff6cb3075b652f02886a80dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:68:20:02:2f:a4:a7:37:4c:ed:1c:be:15:
7c:55:e8:56:26:2d:03:8e:ec:a9:aa:60:89:67:4d:
f3:1d:8a:5f:0a:41:52:02:1b:35:98:33:04:f2:6c:
cc:d5:14:c0:c2:3c:3a:fc:90:04:13:54:fa:90:3a:
8b:93:cf:82:fe:eb:49:ea:90:94:4d:d1:d5:bd:08:
7f:83:bc:22:0e:f4:3b:3d:9c:e8:3e:2a:8f:20:0b:
68:9f:c4:80:f0:f0:9c:49:d8:24:51:2e:6f:a4:9e:
27:ee:7a:af:56:d1:ad:19:3e:ce:d4:38:ae:e3:68:
f9:72:a5:4d:81:da:ae:31:13:43:d4:e7:0b:3f:b1:
25:f4:54:b3:2e:9b:86:63:f9:e3:90:8c:1e:51:1a:
53:eb:46:0f:d6:56:49:7d:18:71:38:b6:8d:f2:6b:
96:19:02:19:b0:59:db:95:d6:5a:39:ed:c4:d8:58:
09:ff:ba:8b:ac:fb:4d:41:f3:3f:a2:6d:f0:e0:28:
aa:ed:2a:6a:4e:2a:e7:8d:6f:69:56:ad:9f:b3:2c:
fc:32:a4:c7:6f:a8:31:05:a1:d7:a3:25:ba:df:b8:
6d:6c:aa:6f:98:10:f4:66:e1:fd:6f:df:ce:ed:05:
fd:72:64:dc:7a:12:e1:cc:1c:d1:f8:5c:cd:7f:a1:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E1:37:19:5F:B5:CE:5F:F6:CB:30:75:B6:52:F0:28:86:A8:0D:EA
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6-E3GV-1zl_2yzB1tlLwKIaoDeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:61:4b:df:2e:a6:8f:58:ec:63:29:d8:da:e7:f5:81:ac:78:
4b:ee:70:6f:6a:cd:90:f9:19:93:97:2f:0f:ea:f6:ec:10:8c:
53:41:df:b6:40:1a:67:42:94:3e:ce:ea:2c:9f:12:a7:65:e0:
df:15:4b:b2:25:cd:78:28:28:40:79:d9:31:21:de:ac:25:da:
8f:de:79:5a:16:42:29:ec:56:35:70:31:09:5d:58:90:9b:63:
5e:5c:ba:9d:20:a1:2d:47:a7:a6:a9:e5:75:d5:f4:70:4a:99:
b8:96:bc:02:28:cf:7c:d3:bc:60:8f:8e:a1:73:8d:e5:69:28:
a1:e0:ec:29:0c:dd:94:84:8b:6d:b0:ee:78:36:86:34:b0:62:
1a:98:e9:c3:7f:8d:6a:46:67:1f:71:da:57:34:03:58:ba:93:
fc:13:e5:d9:cf:b3:ad:d6:7c:07:5c:cd:76:88:38:98:9f:5e:
5f:00:c1:ca:76:11:6f:d7:46:c4:33:dd:ee:d7:b0:e2:84:f6:
eb:f0:90:7d:a9:b3:10:68:fb:79:b7:a2:c1:c0:fa:aa:d0:96:
4b:c4:c9:84:7a:fe:be:2e:d0:ad:ce:a1:22:e5:15:3d:db:bf:
65:42:a8:89:1e:0e:69:48:93:c2:be:f1:d3:61:0b:c2:40:90:
5d:fc:c6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:15 2025 by rpki-client