Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/gTeouPyjDdiClKTIsrjmm-4QSAY.roa
File: gTeouPyjDdiClKTIsrjmm-4QSAY.roa (raw, json)
Hash identifier: Gn6t45fEt9l+/zAGQA8uRZuistHiw2vwGcnrPM6JDcQ=
Subject key identifier: 81:37:A8:B8:FC:A3:0D:D8:82:94:A4:C8:B2:B8:E6:9B:EE:10:48:06
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D84E76D480B19DD213925ED49522B9
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/gTeouPyjDdiClKTIsrjmm-4QSAY.roa
Signing time: Thu 02 Jan 2025 11:48:17 +0000
ROA not before: Thu 02 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 46.37.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:4e:76:d4:80:b1:9d:d2:13:92:5e:d4:95:22:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8137a8b8fca30dd88294a4c8b2b8e69bee104806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:db:dc:c1:4d:9c:f5:60:8a:1a:84:2a:54:
38:02:71:14:7c:3d:0f:6f:a7:d5:c3:d6:8f:05:be:
02:5e:ce:a7:4b:fa:9c:15:ee:af:8b:02:3d:48:df:
e6:dc:d8:44:e7:4e:81:f6:96:04:a1:6e:14:54:74:
e5:68:05:37:33:89:ad:e1:07:6e:e7:dc:34:38:80:
43:a9:1f:16:e7:ca:38:6a:29:e3:c0:fc:2c:15:68:
4f:be:41:20:8e:91:f4:60:a9:58:73:e0:5a:e1:18:
08:7d:ba:ff:1e:ba:d0:b3:b8:90:69:5c:39:d7:16:
24:6b:ce:c3:89:5c:b2:ac:c1:35:0f:19:c9:63:32:
cc:72:27:93:41:c5:41:1e:6c:b3:b9:be:73:b0:84:
dd:2c:e3:40:bb:83:85:91:6d:76:ee:73:1c:9e:56:
1d:d5:d0:fd:4a:72:3b:de:6b:bc:4c:c9:e5:78:d4:
4b:38:44:24:52:e2:ad:8c:8e:52:54:ca:59:95:c8:
03:fe:de:24:60:26:1b:45:e0:b4:8d:23:ea:4b:70:
b9:b7:f7:af:06:ed:64:10:e2:c8:0f:3a:91:e9:8e:
c5:a6:fa:47:d5:31:1b:34:1a:c3:71:60:ee:66:ba:
f3:3f:99:47:e0:fa:d6:01:c4:49:92:5b:1f:78:0e:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:37:A8:B8:FC:A3:0D:D8:82:94:A4:C8:B2:B8:E6:9B:EE:10:48:06
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/gTeouPyjDdiClKTIsrjmm-4QSAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.111.0/24
Signature Algorithm: sha256WithRSAEncryption
01:39:13:2f:95:d7:0f:43:a0:50:1a:8d:15:5b:2e:69:62:bd:
4e:6b:ba:7e:99:af:c7:78:77:6b:bf:de:4a:b7:63:7b:53:1d:
38:29:79:de:83:f1:0f:c0:a1:c8:fc:ed:70:be:d9:2d:25:f6:
c2:8d:f3:ee:d7:02:16:93:1d:70:53:c7:f5:a3:39:91:d7:87:
7d:db:96:c7:5f:3f:3a:b2:e6:b5:c3:08:0d:7d:c4:39:8d:5a:
ba:a5:50:d8:f2:2a:d8:3d:d6:41:a0:2f:30:e0:cc:03:7b:0d:
59:28:c9:39:46:00:31:c8:9a:a4:52:f0:08:38:47:f9:b5:98:
50:70:88:63:3a:15:cf:c3:95:dd:e1:4d:74:42:e9:c2:73:1f:
07:07:17:28:d7:c2:8e:0a:5b:f1:dc:01:9d:4f:d0:6c:f8:42:
17:fb:d3:46:15:8a:17:55:b4:db:62:45:7e:c8:e4:95:69:21:
d0:8b:bd:c5:90:43:07:30:e1:9b:d4:9a:5b:4f:4d:80:9a:d2:
97:09:bc:ea:a8:40:6c:80:f3:f3:b5:a9:d6:20:98:ab:62:9e:
9c:fc:5d:60:f2:60:37:75:79:38:06:ab:db:45:25:0f:f0:08:
ea:85:e0:11:8a:9f:48:c6:6a:f9:a0:dc:ac:f4:0a:3d:6a:cd:
e1:14:b6:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2E521ICxndITkl7UlSK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjUwMTAyMTE0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTM3YThiOGZjYTMwZGQ4ODI5NGE0YzhiMmI4ZTY5YmVlMTA0ODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR3b3MFNnPVgihqEKlQ4AnEUfD0P
b6fVw9aPBb4CXs6nS/qcFe6viwI9SN/m3NhE506B9pYEoW4UVHTlaAU3M4mt4Qdu
59w0OIBDqR8W58o4ainjwPwsFWhPvkEgjpH0YKlYc+Ba4RgIfbr/HrrQs7iQaVw5
1xYka87DiVyyrME1DxnJYzLMcieTQcVBHmyzub5zsITdLONAu4OFkW127nMcnlYd
1dD9SnI73mu8TMnleNRLOEQkUuKtjI5SVMpZlcgD/t4kYCYbReC0jSPqS3C5t/ev
Bu1kEOLIDzqR6Y7FpvpH1TEbNBrDcWDuZrrzP5lH4PrWAcRJklsfeA4d3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIE3qLj8ow3YgpSkyLK45pvuEEgGMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvZ1Rlb3VQeWpEZGlDbEtUSXNyam1tLTRRU0FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVvMA0G
CSqGSIb3DQEBCwUAA4IBAQABORMvldcPQ6BQGo0VWy5pYr1Oa7p+ma/HeHdrv95K
t2N7Ux04KXneg/EPwKHI/O1wvtktJfbCjfPu1wIWkx1wU8f1ozmR14d925bHXz86
sua1wwgNfcQ5jVq6pVDY8irYPdZBoC8w4MwDew1ZKMk5RgAxyJqkUvAIOEf5tZhQ
cIhjOhXPw5Xd4U10QunCcx8HBxco18KOClvx3AGdT9Bs+EIX+9NGFYoXVbTbYkV+
yOSVaSHQi73FkEMHMOGb1JpbT02AmtKXCbzqqEBsgPPztanWIJirYp6c/F1g8mA3
dXk4BqvbRSUP8AjqheARip9Ixmr5oNys9Ao9as3hFLZr
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:42:27 2025 by rpki-client