Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/iimc9Zf7eDnJUU7sJsv967Ptuy8.roa
File: iimc9Zf7eDnJUU7sJsv967Ptuy8.roa (raw, json)
Hash identifier: 8BjeCOOPz5Pd+hLtbnZwnLmiX3W5LcV8Mk0yhqgIqKA=
Subject key identifier: 8A:29:9C:F5:97:FB:78:39:C9:51:4E:EC:26:CB:FD:EB:B3:ED:BB:2F
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01957FE26CDD6EC3F3B6FC5E954989CB4E73
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/iimc9Zf7eDnJUU7sJsv967Ptuy8.roa
Signing time: Mon 10 Mar 2025 11:48:19 +0000
ROA not before: Mon 10 Mar 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215703
IP address blocks: 46.37.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:e2:6c:dd:6e:c3:f3:b6:fc:5e:95:49:89:cb:4e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Mar 10 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a299cf597fb7839c9514eec26cbfdebb3edbb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:27:e9:6b:af:76:5c:e3:44:9d:11:34:75:
0e:68:4a:1f:70:2c:d8:23:e2:53:c3:10:af:73:a8:
c0:94:10:7a:1e:06:c2:a7:f8:2d:d4:e5:85:cb:39:
cd:be:fc:4a:21:f8:f1:a2:6b:7a:ec:cf:b0:56:96:
42:ae:1c:6d:78:1d:84:e4:20:94:e7:9d:fa:59:b5:
41:67:4f:24:df:4a:d9:cd:97:7d:8b:09:d3:3b:ee:
7b:74:62:c2:98:91:9e:ee:8c:8b:ca:e6:fd:b7:4e:
5f:2d:db:ff:0a:c0:9e:45:7f:92:b2:08:72:eb:95:
2a:2f:63:18:31:79:95:21:74:58:51:78:73:61:e4:
1b:07:21:12:d6:d1:c8:1b:b9:73:eb:58:84:fa:6c:
94:26:59:cc:59:79:8b:fc:13:e7:2e:99:6c:a2:3f:
b2:f1:e0:0a:15:6c:bc:6a:07:39:c4:d5:be:8c:e9:
a3:b5:c1:ae:98:33:d9:bf:c6:ff:59:26:03:03:6b:
66:da:1a:aa:1b:c5:6b:4d:83:ca:4b:a0:ef:58:5c:
2c:e6:a7:74:f6:bd:f7:39:e8:a0:4d:ed:f4:fe:d4:
c3:b9:18:91:9b:d6:dc:4c:35:a1:d3:52:ab:27:cf:
b4:c0:17:44:f5:46:eb:aa:2f:25:4d:dd:3d:c9:15:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:29:9C:F5:97:FB:78:39:C9:51:4E:EC:26:CB:FD:EB:B3:ED:BB:2F
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/iimc9Zf7eDnJUU7sJsv967Ptuy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.123.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7e:a1:1f:4a:2d:48:2f:b9:f2:d3:43:e9:7f:de:05:8c:2e:
c2:e7:aa:e6:53:55:44:c8:b4:50:74:fc:a1:1c:80:84:59:87:
1a:d4:58:03:fb:ff:0d:94:66:e4:24:0a:d2:d9:9c:5f:20:c7:
09:92:c7:64:1f:d2:1b:3e:57:fc:ee:aa:bb:36:6c:e7:e9:0b:
fd:9b:d0:2b:62:50:b5:aa:44:ca:40:9d:fe:5e:d1:2f:9a:1d:
8b:17:bd:8f:e8:fd:2f:51:1b:31:69:3d:78:80:27:1d:4e:67:
5e:d0:2f:2d:31:c8:aa:ef:09:60:b1:0e:cd:b9:fc:88:1d:20:
36:98:9b:db:6e:8b:d4:e2:72:71:9b:e2:a6:30:74:a7:29:6b:
37:c5:29:02:01:49:8c:63:91:ba:77:7e:5c:9f:42:86:6a:70:
79:22:53:6e:1f:e5:d2:a5:09:22:18:88:10:68:8c:a4:0a:bd:
94:16:5e:c2:c0:b4:fc:da:db:c0:4b:07:4d:52:c1:c7:b0:61:
18:89:9d:f3:f3:f6:8f:57:2f:e4:42:6d:1e:74:85:61:f8:b3:
7c:41:98:6f:22:99:70:9b:ee:74:48:00:94:c6:05:d9:30:04:
fe:57:27:97:97:88:4c:a1:cc:f0:0a:9d:f2:6a:bc:54:e8:0a:
ed:5d:23:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:54 2025 by rpki-client