Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/Ha5upAoCmCkgHpv_bzidQHciZpU.roa
File: Ha5upAoCmCkgHpv_bzidQHciZpU.roa (raw, json)
Hash identifier: dLaRJkdtGcshL2ZliATq/iRbMaN6GbsblgbG4F90nyk=
Subject key identifier: 1D:AE:6E:A4:0A:02:98:29:20:1E:9B:FF:6F:38:9D:40:77:22:66:95
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 01942144243ABA31AA222CD51AB50908B3FE
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/Ha5upAoCmCkgHpv_bzidQHciZpU.roa
Signing time: Wed 01 Jan 2025 09:48:21 +0000
ROA not before: Wed 01 Jan 2025 09:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 37.46.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:24:3a:ba:31:aa:22:2c:d5:1a:b5:09:08:b3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Jan 1 09:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dae6ea40a029829201e9bff6f389d4077226695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:e7:63:49:12:fc:f5:58:5c:6e:f5:c9:5b:
c6:77:4b:d4:0b:cc:6c:02:fc:4c:6c:fa:6d:cc:80:
58:7a:f1:22:73:5b:86:39:0b:10:a9:9b:d9:e5:56:
11:23:6b:08:13:ed:3b:0f:98:de:a8:cd:64:cd:ef:
5e:19:f4:fe:26:0e:9d:09:e8:a1:c7:ec:5a:6e:13:
09:d8:f6:66:62:dd:f0:21:8f:f2:ad:02:71:6a:3e:
22:0c:9f:c1:5a:2f:f4:bf:12:c0:4c:08:af:8c:bc:
57:a3:46:64:de:ef:b7:3a:28:e5:c7:8b:eb:e6:c6:
87:3d:1a:69:b2:7f:b0:03:a1:1e:73:84:b5:1f:21:
c0:ce:f0:cd:fa:6e:20:9a:8b:15:48:b0:f7:63:1e:
a9:4a:35:2d:85:b0:6b:6f:dc:a9:66:49:41:01:af:
20:87:64:78:ae:d9:72:50:96:1c:a3:ed:a6:82:31:
96:1e:f9:d5:12:50:aa:87:50:68:87:6b:bc:94:b5:
5f:ce:4e:b9:16:75:90:30:a6:94:4b:66:a4:8c:84:
61:f0:21:26:d5:b8:8d:24:56:e1:23:f0:99:39:52:
3f:8d:c3:e4:29:00:a6:86:bf:56:c4:b1:c8:e4:c5:
bd:c4:06:0b:a6:47:f2:d4:e2:37:f3:da:71:30:ac:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AE:6E:A4:0A:02:98:29:20:1E:9B:FF:6F:38:9D:40:77:22:66:95
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/Ha5upAoCmCkgHpv_bzidQHciZpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:be:13:aa:b2:a5:a7:cc:90:b7:c0:57:be:00:58:8f:17:85:
48:77:84:34:9f:0d:94:f4:0e:2f:17:be:9b:21:d0:18:03:ea:
7d:30:9d:26:51:64:0f:e3:53:ac:ef:51:7d:8b:5f:36:e5:ca:
0c:4f:96:bb:d5:d4:c5:33:40:22:26:41:a0:1c:c5:6c:b4:c0:
1e:c0:71:ba:81:dd:06:33:1e:56:bb:50:47:17:04:eb:f0:16:
da:d0:9d:78:c8:6e:12:d0:10:50:3c:c3:37:80:8d:4a:44:47:
70:eb:f6:7a:21:d2:ba:0b:10:c4:d1:ed:5c:b8:9f:ea:47:eb:
f5:56:fb:7e:0d:e8:26:30:aa:79:81:25:63:58:ae:ef:bb:7b:
ac:07:1f:13:83:a8:a9:1d:1b:2a:40:3a:b5:c1:3c:63:d7:a5:
68:4d:d2:04:36:b2:cb:3a:a2:3d:43:42:1e:6b:1e:6a:f6:59:
b1:57:7b:8d:0f:be:b2:53:c2:3d:4d:fe:04:47:d3:43:b6:53:
16:82:49:e5:d0:41:1a:9a:fe:d0:0e:b2:fc:28:b8:e7:d0:04:
b3:28:7e:8b:ca:98:65:7c:ed:9d:a8:7b:67:c5:62:47:8f:9d:
22:83:11:9c:97:02:2e:bc:d1:69:f3:a4:63:21:31:fb:04:67:
49:44:2f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:19 2025 by rpki-client