Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/xWT0vGiyeYFeT3MlbcSyxAQfDe0.roa
File: xWT0vGiyeYFeT3MlbcSyxAQfDe0.roa (raw, json)
Hash identifier: F4j2u+pN0Kwg6R9CG3jmLGvcL6lROMUw46GD8fLeKqU=
Subject key identifier: C5:64:F4:BC:68:B2:79:81:5E:4F:73:25:6D:C4:B2:C4:04:1F:0D:ED
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D850C97CBD339D2598AD18A6CE3210
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/xWT0vGiyeYFeT3MlbcSyxAQfDe0.roa
Signing time: Thu 02 Jan 2025 11:48:18 +0000
ROA not before: Thu 02 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35916
IP address blocks: 46.37.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:50:c9:7c:bd:33:9d:25:98:ad:18:a6:ce:32:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c564f4bc68b279815e4f73256dc4b2c4041f0ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:59:24:a6:04:2e:ac:ea:3f:2b:ce:db:f2:ca:
0d:af:bb:34:d2:52:ec:1d:7c:8c:f7:82:18:6d:59:
f8:19:e2:3f:87:2d:71:d0:f9:65:3d:c2:cc:5a:47:
71:09:8d:18:79:7b:ed:c2:3e:20:2a:bf:47:9c:03:
fc:dc:4c:41:c8:b1:11:6e:d7:e8:82:b0:5f:8b:fe:
09:e7:27:c5:20:e5:2c:b6:a8:31:fb:fe:6f:65:a3:
b8:a8:98:73:aa:93:45:2b:da:15:ce:1f:15:6a:09:
9b:65:d7:b0:07:8b:83:e9:57:52:e5:e5:32:9a:bd:
55:91:d2:79:25:d1:5f:50:c4:54:bc:f2:3f:7d:b8:
ea:20:eb:9f:3c:1f:38:48:60:06:dc:94:d3:8a:45:
54:27:51:38:08:8e:e9:70:e0:d5:4e:b1:7f:6f:d7:
ac:9a:36:e6:5b:07:74:f8:93:90:fc:78:01:0f:b5:
e0:48:59:fa:5f:24:40:71:e2:85:f2:b2:a8:11:74:
cd:0f:38:de:28:e6:6d:68:2b:45:51:05:1d:4c:a7:
50:a3:25:4b:d0:c4:9c:03:3e:20:2b:a8:f7:69:6c:
26:c2:1c:b4:95:63:a2:73:ab:05:93:72:f5:92:d9:
42:58:2c:74:4e:35:80:69:19:78:37:1c:03:8c:56:
73:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:64:F4:BC:68:B2:79:81:5E:4F:73:25:6D:C4:B2:C4:04:1F:0D:ED
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/xWT0vGiyeYFeT3MlbcSyxAQfDe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.119.0/24
Signature Algorithm: sha256WithRSAEncryption
41:9c:ad:46:07:ec:f3:d8:f7:6e:f8:9f:40:00:ab:72:0b:da:
82:a9:2c:6c:dd:32:8d:6c:31:1f:ea:93:ec:02:80:79:4e:54:
a1:27:5a:13:38:93:09:3e:6b:df:61:04:21:da:ee:53:b8:ec:
fe:16:27:70:4b:cd:8a:66:b6:45:0b:ff:a6:83:f5:03:8b:57:
17:38:6f:a2:db:db:46:ef:8e:53:73:86:fa:d8:6d:f7:b3:9c:
02:23:4b:ba:74:42:a3:b5:b2:02:49:11:22:1a:68:f9:c7:9f:
31:0a:f6:05:94:71:0f:6c:af:80:2a:d2:4e:a5:c7:81:34:36:
ab:a5:b9:57:32:36:cb:4c:2b:f0:49:d0:fb:01:66:c6:b3:fa:
46:f1:fd:ed:ad:af:16:3b:d5:0e:ae:b5:7c:2e:af:31:2e:2a:
d7:47:96:3c:c5:da:49:51:c5:a5:81:87:24:da:43:69:ed:d5:
a9:0f:11:fa:2d:f3:e1:47:fb:6f:01:b8:a4:40:7a:ee:55:46:
9f:cc:30:3e:b1:d1:6a:e7:a0:d1:bb:c7:e9:e5:6c:91:4a:7e:
68:d2:18:a1:eb:e7:fa:49:7a:a8:51:4d:56:e0:aa:30:dd:c7:
44:cd:72:34:7d:d0:68:6f:37:c3:cb:f7:e8:5b:a8:7a:e2:77:
a1:52:d9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:23 2025 by rpki-client