Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/r9rbyLKE8i7Fw-ENJEzUTPECXLA.roa
File: r9rbyLKE8i7Fw-ENJEzUTPECXLA.roa (raw, json)
Hash identifier: wqHT6bzo8llL5sY2VWnVDlxdxp/3/yHtg4s/KtYCUUg=
Subject key identifier: AF:DA:DB:C8:B2:84:F2:2E:C5:C3:E1:0D:24:4C:D4:4C:F1:02:5C:B0
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D854D9C657EC3523DEED2F9E4ACF14
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/r9rbyLKE8i7Fw-ENJEzUTPECXLA.roa
Signing time: Thu 02 Jan 2025 11:48:19 +0000
ROA not before: Thu 02 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 46.37.112.0/24 maxlen: 24
91.205.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:54:d9:c6:57:ec:35:23:de:ed:2f:9e:4a:cf:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afdadbc8b284f22ec5c3e10d244cd44cf1025cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:16:27:c7:c8:26:db:ef:bc:a2:ee:bd:ff:
42:15:3f:94:f6:92:6e:fa:92:a6:33:5a:a8:ce:d7:
b3:d8:99:2a:7e:6a:a2:5c:ad:bf:74:d5:87:66:cd:
f1:7c:31:67:f9:3c:95:16:0e:49:7e:b5:af:67:98:
2e:d0:9f:94:37:21:e3:5e:60:5f:8e:94:e8:ed:05:
84:13:99:ae:b9:75:51:2b:e3:00:c0:09:6e:93:35:
a8:b4:e4:ba:8c:17:25:61:85:de:07:8d:cb:66:cd:
cd:98:50:5d:3e:48:26:47:5d:ac:e5:46:0f:3b:ae:
8a:0f:c8:c5:60:22:ea:3b:f0:a3:3b:51:6a:ca:34:
d7:2a:f9:bb:c5:2c:d6:96:48:c4:3f:ac:64:c5:4a:
89:55:3f:65:f6:e7:c4:36:33:93:ce:bf:ec:f9:d4:
5a:98:5c:da:d1:53:ac:32:d5:a7:c5:9a:4f:21:f8:
11:fe:95:ae:0e:b4:0b:c5:b4:17:76:33:32:89:6f:
a2:82:4d:60:83:37:24:3b:65:99:bd:9e:6b:cf:38:
60:7f:70:2a:cf:92:4c:d5:54:20:33:34:6f:40:25:
96:dd:10:8c:e1:48:90:75:c4:e5:3d:94:9d:d7:0f:
b5:b7:ba:ec:2b:c1:a6:3a:da:a2:58:75:05:0e:b5:
bf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DA:DB:C8:B2:84:F2:2E:C5:C3:E1:0D:24:4C:D4:4C:F1:02:5C:B0
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/r9rbyLKE8i7Fw-ENJEzUTPECXLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.112.0/24
91.205.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:98:e8:68:8f:39:e5:f6:14:f0:0d:25:de:bd:94:c4:e9:a9:
6c:eb:10:84:a3:a3:77:3e:81:b0:80:15:b2:e6:53:be:2a:f2:
79:94:72:85:d2:40:45:27:6a:74:0d:18:28:1e:28:7e:b4:46:
db:50:50:a2:15:bf:4d:c2:77:b9:49:c6:15:9d:95:37:d5:64:
e2:b4:b6:09:7c:43:b7:53:3f:33:7e:a2:5b:99:a9:fb:cf:7c:
e0:f0:e6:86:f5:23:35:cf:be:d0:bc:b9:a7:34:4a:75:da:1f:
ff:df:6d:9f:e3:e0:a7:89:80:c9:a6:b6:fb:fc:b3:54:e4:38:
46:a8:6e:ef:88:85:34:df:7c:17:de:2f:00:4c:20:ad:37:36:
c9:25:c1:9d:f6:f4:4d:50:d6:9b:4a:f3:2c:13:eb:d3:23:69:
70:3e:eb:d3:c2:3e:44:be:56:dd:d7:2e:6c:31:58:b3:ab:16:
24:12:e9:ae:ed:61:e8:3f:bc:ed:cd:8e:3c:e7:75:5b:bf:7c:
de:e4:e8:85:5e:73:20:2e:97:e0:b4:9f:99:18:81:7f:3e:a5:
2a:c0:28:e9:fe:d0:66:19:89:59:65:a3:e1:70:60:09:3d:0b:
c3:ff:42:5d:cc:1c:e7:1c:ee:83:4e:85:ee:4e:bc:11:f1:5f:
09:c3:da:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:06:00 2025 by rpki-client