Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nBIa_MgNpUDV3SBtlinbR6es4Rg.roa
File: nBIa_MgNpUDV3SBtlinbR6es4Rg.roa (raw, json)
Hash identifier: hC7k/XXxiWX1E2MebUDMjEyqkFmK2BgTyk5G2ezPJmw=
Subject key identifier: 9C:12:1A:FC:C8:0D:A5:40:D5:DD:20:6D:96:29:DB:47:A7:AC:E1:18
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0194CDF3FC70FCD41FFDA34D94000587EA93
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nBIa_MgNpUDV3SBtlinbR6es4Rg.roa
Signing time: Mon 03 Feb 2025 22:35:06 +0000
ROA not before: Mon 03 Feb 2025 22:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 46.37.99.0/24 maxlen: 24
46.37.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cd:f3:fc:70:fc:d4:1f:fd:a3:4d:94:00:05:87:ea:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 3 22:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c121afcc80da540d5dd206d9629db47a7ace118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:fe:c7:88:85:6a:cf:13:43:3b:9d:8b:c2:
70:10:30:1c:75:ba:83:98:5d:48:48:1a:86:31:dd:
0d:02:f2:db:0d:17:52:aa:68:0e:a5:47:fc:95:50:
2d:0c:57:1b:e3:87:11:d8:73:d1:0c:92:9a:01:0e:
df:ab:6a:e3:cb:fb:29:c9:7b:fe:c1:cb:70:e5:a9:
ed:58:4c:c3:73:d1:43:00:71:4b:6b:92:73:fa:1c:
27:ca:48:9e:f7:2a:e7:10:6c:ff:39:1d:6d:79:04:
b3:86:b8:c3:c1:30:d8:41:52:10:91:ec:44:55:8b:
3d:2c:4e:78:f4:ff:01:71:14:95:86:69:c6:6c:36:
ac:3a:d4:78:6b:06:87:93:db:c6:5d:58:56:af:4c:
96:1a:8c:80:7b:41:4f:d0:f6:6a:5e:ea:fb:7e:b4:
a6:ff:f5:21:2c:43:94:d3:bd:b2:8b:ae:d3:e0:6c:
9c:42:df:5d:75:3f:3c:fa:bb:6d:b7:87:b6:8b:9b:
fd:16:20:18:93:e8:0f:ea:ff:f1:72:ce:75:4e:91:
50:dc:1b:16:a1:fb:ae:dc:6a:86:fe:3a:8a:95:82:
b7:df:5b:a0:e1:28:0a:59:d1:77:47:cc:90:4e:bd:
38:6a:7c:e7:30:4a:0e:fc:ab:a7:b4:8a:1d:97:2c:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:12:1A:FC:C8:0D:A5:40:D5:DD:20:6D:96:29:DB:47:A7:AC:E1:18
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nBIa_MgNpUDV3SBtlinbR6es4Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.99.0/24
46.37.116.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b1:2e:b3:a0:55:92:fa:13:d2:6a:f4:74:af:3a:78:45:52:
ac:39:04:e7:f2:0d:97:1d:3c:38:5b:91:2a:c0:d7:5d:2c:ab:
78:fc:12:fa:88:4b:d2:b6:eb:d2:b8:e1:b8:68:89:70:64:0c:
e1:ad:f8:db:57:d4:36:67:11:3a:c6:31:33:6f:95:45:8d:97:
91:f7:77:15:38:69:42:e5:00:85:0a:75:9e:e1:a2:50:28:74:
7b:f3:cb:55:d5:85:f4:72:d1:e2:4d:aa:93:06:46:d6:a8:3e:
9e:5a:8b:c7:3d:89:29:61:4d:f3:7f:ac:ee:f0:73:33:fe:8b:
3c:9b:08:d9:6c:af:57:a0:84:13:69:ed:f0:6c:1a:38:cd:7d:
94:a3:96:d5:58:13:6e:bb:ad:8c:5b:2d:8e:14:66:1b:b8:54:
a9:50:42:c5:20:94:93:1e:96:76:ce:4b:d2:73:89:fe:09:b1:
d6:bc:2a:2d:22:20:8a:d3:7d:cf:46:ed:be:76:59:72:b8:7c:
f1:24:0d:1f:07:38:ff:3d:0b:eb:16:5d:ed:5d:73:2b:f7:70:
be:5a:46:37:7c:99:d0:df:58:51:ec:7a:3b:6e:ab:ce:47:41:
de:ca:8e:dc:72:02:27:97:37:3f:b3:7d:e7:10:59:e3:57:a3:
e4:19:ca:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:52 2025 by rpki-client