Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/8h34ZnrpMeSXe4YFX1Tg6Z57-So.roa
File: 8h34ZnrpMeSXe4YFX1Tg6Z57-So.roa (raw, json)
Hash identifier: RF5kdoR62UZPeBgepPRvMAtAF1E4LgAyNJZMeuVy/s0=
Subject key identifier: F2:1D:F8:66:7A:E9:31:E4:97:7B:86:05:5F:54:E0:E9:9E:7B:F9:2A
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D85806F43C7D5A189E211B210E8AE7
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/8h34ZnrpMeSXe4YFX1Tg6Z57-So.roa
Signing time: Thu 02 Jan 2025 11:48:19 +0000
ROA not before: Thu 02 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203363
IP address blocks: 46.37.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:58:06:f4:3c:7d:5a:18:9e:21:1b:21:0e:8a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f21df8667ae931e4977b86055f54e0e99e7bf92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:9d:83:57:32:4f:ee:ab:5f:69:89:df:1e:
90:99:cf:7a:3e:ce:c2:6c:ec:29:4f:dd:33:f6:f5:
3e:b7:0d:75:21:0b:6e:31:15:cc:c0:cd:12:98:c2:
d8:a2:f3:ab:7f:9a:5d:95:0b:05:26:23:49:be:5e:
ef:13:f2:3f:5d:9c:e6:78:e9:d9:e1:62:79:9d:99:
8a:71:f8:b9:37:25:a5:5f:c5:6f:a0:69:b9:9c:a5:
43:f9:ac:a4:83:31:32:d9:e0:ce:a3:88:89:05:7e:
d1:9d:6a:9a:97:6c:a7:4c:60:7b:6b:fb:61:c8:e8:
be:36:a4:30:78:8a:f1:14:43:b1:a7:82:23:28:c6:
6d:30:97:84:2d:aa:e7:e6:bb:69:dc:61:d3:a9:b7:
2b:42:0d:e3:d5:26:fe:6c:c0:ca:0b:ce:31:b7:72:
5e:e3:5c:b6:52:dc:b8:b5:ac:82:c4:46:d5:69:77:
c7:85:dc:a0:66:b0:aa:5e:c8:80:80:fb:5e:b1:dc:
59:69:e0:30:4f:6c:8c:e4:5a:dd:ab:95:c5:f6:01:
65:e6:aa:f9:6b:92:68:4d:8a:78:f6:16:de:ee:30:
72:bd:67:bd:b9:3a:9e:e1:87:20:23:70:5b:c9:00:
5d:c2:77:8d:78:69:0a:1a:6a:d1:4a:38:8b:de:5d:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1D:F8:66:7A:E9:31:E4:97:7B:86:05:5F:54:E0:E9:9E:7B:F9:2A
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/8h34ZnrpMeSXe4YFX1Tg6Z57-So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.124.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:da:43:a7:7e:dd:06:e1:fb:38:37:c1:e7:70:7f:bb:d1:4d:
f0:f3:c6:25:bd:a4:ee:fe:89:4b:62:9e:48:b2:3b:de:ea:fc:
3f:27:10:e2:a5:e7:16:30:cd:d1:98:8a:83:61:6e:9e:b6:0e:
51:97:06:4a:3e:0a:53:88:14:2e:26:55:84:c0:58:b6:9d:9d:
e5:65:b7:bb:d1:66:28:9a:c3:5a:ce:a0:f3:83:83:1b:d9:6c:
ba:92:5d:17:05:63:d5:4e:d2:5f:8d:ba:f1:18:57:30:a0:02:
19:eb:91:12:f0:d4:5c:ca:7e:49:c4:27:2f:74:ad:b4:92:ad:
df:fa:30:46:da:7b:75:ab:e2:07:64:8b:eb:8e:9f:43:c0:b2:
43:b0:4d:55:0a:1b:2d:3d:0a:81:80:04:e6:46:63:72:eb:c2:
3b:7e:39:47:34:f3:ee:21:6e:8b:65:d1:1a:54:ff:81:81:0b:
5d:e6:77:51:ff:c1:93:e6:d7:64:4e:c8:24:d6:23:ff:ad:d0:
3d:4b:02:76:49:82:96:a4:a7:96:87:c9:6b:66:ff:7f:aa:15:
d2:8d:c7:04:d5:34:a1:9f:9e:ee:33:4e:37:45:2e:7d:2f:05:
a7:22:6c:15:f4:e3:9e:e0:d1:dd:47:86:e2:79:44:76:09:01:
a4:b9:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:16 2025 by rpki-client