Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/687gtUPSJsm3-i7xBwQZZfUo7RA.roa
File: 687gtUPSJsm3-i7xBwQZZfUo7RA.roa (raw, json)
Hash identifier: ZJBlEAwm8vM/KO8KNVy3dQsPdyR1wyAD6U4kIMtu0no=
Subject key identifier: EB:CE:E0:B5:43:D2:26:C9:B7:FA:2E:F1:07:04:19:65:F5:28:ED:10
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D8546BF4434510F910627044DC0BE7
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/687gtUPSJsm3-i7xBwQZZfUo7RA.roa
Signing time: Thu 02 Jan 2025 11:48:19 +0000
ROA not before: Thu 02 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.100.0/24 maxlen: 24
46.37.101.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
46.37.109.0/24 maxlen: 24
46.37.126.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:54:6b:f4:43:45:10:f9:10:62:70:44:dc:0b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebcee0b543d226c9b7fa2ef107041965f528ed10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:81:ea:96:22:1f:5f:0c:4e:c5:ff:6f:54:
45:51:32:44:30:67:6c:df:17:55:b9:9a:fc:d0:24:
d4:91:3f:4a:87:80:40:69:82:9f:87:40:49:80:50:
b0:1d:61:4e:61:58:49:66:b9:ba:a5:eb:77:d4:ea:
29:c0:1c:42:c7:90:94:ac:2e:9e:96:17:05:b1:70:
84:19:34:d1:0d:95:88:5a:20:80:2d:5e:b4:8f:dd:
86:70:8f:89:f8:ff:c1:a5:11:b0:7b:e2:90:21:f7:
8a:db:c0:84:fd:93:6d:18:02:91:8a:a1:13:c3:91:
6f:53:f6:9b:e8:17:c6:93:4f:18:c7:41:fb:39:6a:
fd:35:39:a6:f4:3c:b4:4e:49:12:07:88:0f:63:2d:
e6:79:ca:cf:90:44:fb:1a:47:51:d7:47:10:d4:fb:
ca:25:fd:20:45:29:ab:b6:64:5a:f4:68:da:ee:2d:
00:98:a6:d4:ce:c2:9a:c7:9a:c7:7e:c3:70:96:23:
84:6b:35:57:70:7b:40:57:07:0b:5d:e6:f9:1a:89:
d3:d5:bc:25:98:41:29:e8:4c:8c:d9:12:ab:3f:c5:
bb:20:a1:16:13:2d:bc:2a:f0:fa:30:70:50:2c:d4:
dd:98:19:6e:30:9f:7b:26:5c:ed:bd:ef:0d:68:33:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CE:E0:B5:43:D2:26:C9:B7:FA:2E:F1:07:04:19:65:F5:28:ED:10
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/687gtUPSJsm3-i7xBwQZZfUo7RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.100.0-46.37.102.255
46.37.105.0-46.37.106.255
46.37.109.0/24
46.37.126.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:51:d4:bc:fb:dc:96:90:fd:8c:75:7f:55:39:b0:b2:05:dd:
ec:8d:92:07:50:dd:d4:e6:57:db:5c:91:ed:41:6b:c1:f3:70:
49:c1:a2:42:c5:8d:c6:d7:7f:46:7b:03:02:89:fd:57:3b:c9:
24:98:b4:c3:b2:d8:67:09:83:e3:6d:90:bc:99:ed:66:65:9a:
8f:24:0f:59:95:ef:06:3d:77:f2:3a:64:52:d2:e4:31:1b:d2:
6c:5e:12:5c:78:ae:95:cb:7c:b6:82:33:73:f0:93:99:2d:61:
ce:10:f3:17:b3:1a:e6:80:61:57:10:4f:20:05:cf:1e:c1:d4:
79:02:03:e4:82:f1:e7:58:74:bd:c5:bb:28:28:16:ef:da:9a:
17:75:3a:f8:7d:65:cc:bd:50:d4:04:04:bb:0c:af:14:0a:40:
6b:dc:2f:96:5f:83:86:08:83:a3:bb:ad:37:81:73:dd:88:3f:
13:69:a4:18:06:51:bb:d4:d6:17:47:56:22:aa:8d:15:f3:69:
2a:47:8f:26:af:3e:76:23:9d:ba:ae:85:28:64:0b:36:f5:95:
f6:75:8f:78:55:7a:57:5d:cd:8e:a7:90:65:4b:a8:6d:e4:f5:
16:85:89:58:35:d1:9c:8b:c5:77:9e:aa:22:82:63:d7:ef:0c:
40:26:6d:64
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZQm2FRr9ENFEPkQYnBE3AvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjUwMTAyMTE0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmNlZTBiNTQzZDIyNmM5YjdmYTJlZjEwNzA0MTk2NWY1MjhlZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7eB6pYiH18MTsX/b1RFUTJEMGds
3xdVuZr80CTUkT9Kh4BAaYKfh0BJgFCwHWFOYVhJZrm6pet31OopwBxCx5CUrC6e
lhcFsXCEGTTRDZWIWiCALV60j92GcI+J+P/BpRGwe+KQIfeK28CE/ZNtGAKRiqET
w5FvU/ab6BfGk08Yx0H7OWr9NTmm9Dy0TkkSB4gPYy3mecrPkET7GkdR10cQ1PvK
Jf0gRSmrtmRa9Gja7i0AmKbUzsKax5rHfsNwliOEazVXcHtAVwcLXeb5GonT1bwl
mEEp6EyM2RKrP8W7IKEWEy28KvD6MHBQLNTdmBluMJ97Jlztve8NaDPQIQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFOvO4LVD0ibJt/ou8QcEGWX1KO0QMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvNjg3Z3RVUFNKc20zLWk3eEJ3UVpaZlVvN1JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQALiViMAwD
BAIuJWQDBAAuJWYwDAMEAC4laQMEAC4lagMEAC4lbQMEAC4lfgMEALlcLjANBgkq
hkiG9w0BAQsFAAOCAQEAjVHUvPvclpD9jHV/VTmwsgXd7I2SB1Dd1OZX21yR7UFr
wfNwScGiQsWNxtd/RnsDAon9VzvJJJi0w7LYZwmD422QvJntZmWajyQPWZXvBj13
8jpkUtLkMRvSbF4SXHiulct8toIzc/CTmS1hzhDzF7Ma5oBhVxBPIAXPHsHUeQID
5ILx51h0vcW7KCgW79qaF3U6+H1lzL1Q1AQEuwyvFApAa9wvll+DhgiDo7utN4Fz
3Yg/E2mkGAZRu9TWF0dWIqqNFfNpKkePJq8+diOduq6FKGQLNvWV9nWPeFV6V13N
jqeQZUuobeT1FoWJWDXRnIvFd56qIoJj1+8MQCZtZA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:19 2025 by rpki-client