Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/w8TSE6TWhxYEC3G7690lp4jAZQ0.roa
File: w8TSE6TWhxYEC3G7690lp4jAZQ0.roa (raw, json)
Hash identifier: kKIXoDx5kHVxX6nKrBuw4NO0boqNhoiQXe6SSC6VUsE=
Subject key identifier: C3:C4:D2:13:A4:D6:87:16:04:0B:71:BB:EB:DD:25:A7:88:C0:65:0D
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D8567AC7E80D980432F79B95FBE669
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/w8TSE6TWhxYEC3G7690lp4jAZQ0.roa
Signing time: Thu 02 Jan 2025 11:48:19 +0000
ROA not before: Thu 02 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142111
IP address blocks: 46.37.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:56:7a:c7:e8:0d:98:04:32:f7:9b:95:fb:e6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3c4d213a4d68716040b71bbebdd25a788c0650d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:f6:3b:65:5b:25:7d:e9:31:35:3d:c1:fe:
0a:34:0f:bb:6a:87:83:b5:40:39:0d:f4:cb:48:89:
79:be:c3:e3:14:6b:37:e9:34:cb:80:c1:a4:28:e9:
27:24:d1:f1:6b:1e:f8:9b:71:74:7d:98:61:0d:61:
de:3a:c9:fe:80:37:ec:6f:47:8f:d5:fa:29:4b:3c:
0e:48:b1:a4:f1:a4:d7:df:bb:59:b7:82:28:53:91:
df:2f:f4:1e:91:7f:7e:e3:ef:44:0c:00:91:ae:4a:
e8:4b:27:88:8f:5b:1f:71:d0:ab:f4:9a:2b:77:e5:
ea:a9:cd:3c:68:2e:d8:0c:14:32:75:e2:1f:eb:8f:
94:34:87:a0:a3:f2:18:c1:da:9b:e8:f0:a9:d2:e5:
e6:84:51:c9:71:cf:c2:f9:18:f4:2f:ab:f4:d5:c8:
ec:a7:42:c4:f0:b4:db:5d:bb:b6:60:da:bf:63:91:
bb:6b:50:8c:df:1a:52:c1:0f:4e:02:dc:1e:43:1d:
47:e3:9e:26:40:a8:15:e0:fc:df:46:e0:44:1e:a9:
e5:84:2d:ec:15:36:f4:42:7a:08:a3:02:22:ea:3b:
6a:28:43:d1:31:b9:76:16:fa:af:65:26:60:a3:b7:
91:8a:29:12:e6:ea:dc:16:24:3a:21:12:97:dd:cf:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C4:D2:13:A4:D6:87:16:04:0B:71:BB:EB:DD:25:A7:88:C0:65:0D
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/w8TSE6TWhxYEC3G7690lp4jAZQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.112.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ba:0e:66:50:a6:8c:62:fe:c5:ae:b8:8d:6b:9e:f4:00:fc:
d9:7c:9c:f1:97:50:2c:43:ae:24:2a:56:fc:76:98:3c:0a:2e:
06:48:9f:10:43:d0:a4:a3:ce:40:33:1d:89:86:8f:e2:f4:df:
8a:a1:f2:f6:c1:94:94:ba:6d:15:b4:d3:ce:7a:6c:d9:b2:8a:
1e:e5:f2:23:82:b4:d6:fc:85:b0:b3:96:b6:6f:6e:61:76:ba:
9e:ba:6b:19:f9:2b:29:37:53:9f:29:82:ff:2b:ea:23:27:f5:
0e:7d:bc:a7:39:7a:44:85:ed:13:1d:d4:31:9a:c6:f0:b0:c6:
0e:37:70:3d:d2:d8:3e:4a:5e:50:2f:fa:1d:5d:dd:b7:0a:25:
79:8f:25:1c:db:15:0e:8c:68:3c:d2:f5:b0:6e:07:15:f8:58:
00:aa:dd:66:80:65:10:9b:6e:b5:bd:29:f9:62:e7:ff:2d:bc:
4d:6f:42:d2:f9:91:b0:63:85:db:20:2c:91:45:e8:51:51:75:
2f:e6:9d:9a:cc:3c:89:f6:79:1a:df:49:27:e3:12:45:cc:1b:
d5:77:95:3b:ee:02:ec:4e:ed:a9:a2:de:fb:31:32:4a:56:0e:
ff:4e:25:b4:24:2b:69:f6:58:dd:8c:e8:ac:f1:53:cd:1b:b6:
c5:49:c0:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2FZ6x+gNmAQy95uV++ZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjUwMTAyMTE0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2M0ZDIxM2E0ZDY4NzE2MDQwYjcxYmJlYmRkMjVhNzg4YzA2NTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdf2O2VbJX3pMTU9wf4KNA+7aoeD
tUA5DfTLSIl5vsPjFGs36TTLgMGkKOknJNHxax74m3F0fZhhDWHeOsn+gDfsb0eP
1fopSzwOSLGk8aTX37tZt4IoU5HfL/QekX9+4+9EDACRrkroSyeIj1sfcdCr9Jor
d+Xqqc08aC7YDBQydeIf64+UNIego/IYwdqb6PCp0uXmhFHJcc/C+Rj0L6v01cjs
p0LE8LTbXbu2YNq/Y5G7a1CM3xpSwQ9OAtweQx1H454mQKgV4PzfRuBEHqnlhC3s
FTb0QnoIowIi6jtqKEPRMbl2FvqvZSZgo7eRiikS5urcFiQ6IRKX3c/S9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMPE0hOk1ocWBAtxu+vdJaeIwGUNMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvdzhUU0U2VFdoeFlFQzNHNzY5MGxwNGpBWlEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVwMA0G
CSqGSIb3DQEBCwUAA4IBAQAnug5mUKaMYv7FrriNa570APzZfJzxl1AsQ64kKlb8
dpg8Ci4GSJ8QQ9Cko85AMx2Jho/i9N+KofL2wZSUum0VtNPOemzZsooe5fIjgrTW
/IWws5a2b25hdrqeumsZ+SspN1OfKYL/K+ojJ/UOfbynOXpEhe0THdQxmsbwsMYO
N3A90tg+Sl5QL/odXd23CiV5jyUc2xUOjGg80vWwbgcV+FgAqt1mgGUQm261vSn5
Yuf/LbxNb0LS+ZGwY4XbICyRRehRUXUv5p2azDyJ9nka30kn4xJFzBvVd5U77gLs
Tu2pot77MTJKVg7/TiW0JCtp9ljdjOis8VPNG7bFScAo
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:56 2025 by rpki-client