Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GdVfMn99GCEaRf_NMRqcGzJjjMA.roa
File: GdVfMn99GCEaRf_NMRqcGzJjjMA.roa (raw, json)
Hash identifier: qiitLByIe7OfviCT5Cw4nPlSlgMBgdhVEIHbh2M9XZc=
Subject key identifier: 19:D5:5F:32:7F:7D:18:21:1A:45:FF:CD:31:1A:9C:1B:32:63:8C:C0
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D853EA8F52124D3BDA3B1594830504
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GdVfMn99GCEaRf_NMRqcGzJjjMA.roa
Signing time: Thu 02 Jan 2025 11:48:18 +0000
ROA not before: Thu 02 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 46.37.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:53:ea:8f:52:12:4d:3b:da:3b:15:94:83:05:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19d55f327f7d18211a45ffcd311a9c1b32638cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:b5:76:71:62:a5:0d:47:3a:c7:9a:28:9e:
26:cd:d6:82:a8:fb:db:30:bb:93:f9:62:fb:77:dc:
c7:4a:f9:65:99:c1:19:85:70:b0:93:0b:87:d0:51:
1c:55:9b:12:a0:5e:25:ce:8b:56:d0:89:d4:ca:91:
cf:98:62:f6:60:8a:f0:6b:4b:24:da:ee:80:93:ca:
02:85:b9:88:03:e3:7b:2e:d8:bd:00:3d:94:4b:d2:
16:12:5e:a4:f4:6c:89:aa:d4:f9:99:bc:ef:76:00:
67:f7:56:85:95:af:8c:c7:08:9c:82:2a:4b:2f:61:
05:fa:f0:af:87:3d:d8:23:4a:96:f2:8f:37:ee:73:
15:99:c7:49:35:a5:59:c5:f7:41:01:3b:79:8a:e9:
7c:0c:02:b6:ab:9a:89:32:be:d6:35:cc:a9:0f:86:
d2:72:83:ef:b6:d3:ca:06:29:cb:9a:0e:c6:73:3a:
5a:8d:66:71:a5:dd:96:c2:69:6f:16:4d:e9:a4:81:
57:77:0c:eb:cc:6a:4e:c3:4d:12:89:68:c5:ab:de:
6f:d4:2a:9a:fc:f1:0e:e8:4e:f0:c7:81:63:53:0b:
f8:e3:47:aa:3e:ff:b5:ae:d7:08:52:de:57:05:8e:
81:ad:75:17:dc:41:e8:a0:a2:09:36:56:60:19:a7:
90:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D5:5F:32:7F:7D:18:21:1A:45:FF:CD:31:1A:9C:1B:32:63:8C:C0
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GdVfMn99GCEaRf_NMRqcGzJjjMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
83:94:c7:76:23:cc:cc:a2:9b:a2:88:d8:28:c6:0b:5e:57:5f:
3b:f0:5e:5b:66:79:4c:0a:90:34:fb:86:38:c8:a2:8a:37:fa:
56:5f:e1:65:fe:03:82:98:e6:0a:46:ac:bc:3a:22:d4:31:30:
91:93:54:af:3f:d7:30:4e:c7:3f:3d:5b:d8:f8:a0:5f:1b:19:
62:01:ee:3d:87:83:f7:cf:51:4e:37:d2:fa:32:2c:21:cb:bd:
6a:f0:1d:eb:cf:66:9a:87:36:41:72:44:da:9b:3d:fe:5f:35:
9d:dc:76:7e:2d:8f:b5:cd:69:3f:1d:fc:f3:73:44:a5:de:c7:
d2:22:93:76:04:61:d1:36:3c:57:50:ee:7d:82:ad:66:28:6b:
68:35:b9:4a:6a:5c:af:d0:39:de:6a:8a:08:9c:ee:3d:c5:7b:
3f:56:27:ae:61:5a:d3:41:5f:1c:e2:73:19:6e:34:d4:6d:d3:
3b:57:1a:93:e3:28:ca:cd:91:f3:29:83:87:6e:dc:a6:2a:aa:
f7:b9:61:37:fd:f7:e9:47:77:14:47:3f:db:f9:36:4c:48:3d:
05:83:ee:21:1c:6c:7a:37:11:b4:7d:8c:f4:75:87:d1:d7:d4:
9e:d4:46:79:4f:1a:9a:ed:72:af:32:c5:10:da:e3:45:4d:bb:
db:17:8a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:52 2025 by rpki-client