Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/AsC-q30z89pJck5H5hHBxw66NJo.roa
File: AsC-q30z89pJck5H5hHBxw66NJo.roa (raw, json)
Hash identifier: HYOlUVyaZQbHX99tlAWDD1ZH2yv6YvAt3KVyidToqsA=
Subject key identifier: 02:C0:BE:AB:7D:33:F3:DA:49:72:4E:47:E6:11:C1:C7:0E:BA:34:9A
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 01944AB192CFFF3C9312B0F7A83F9DF26E8E
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/AsC-q30z89pJck5H5hHBxw66NJo.roa
Signing time: Thu 09 Jan 2025 10:52:18 +0000
ROA not before: Thu 09 Jan 2025 10:52:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211790
IP address blocks: 46.32.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:b1:92:cf:ff:3c:93:12:b0:f7:a8:3f:9d:f2:6e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 9 10:52:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02c0beab7d33f3da49724e47e611c1c70eba349a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:c3:10:43:4e:a5:a6:aa:61:5f:f9:30:ab:
9d:ff:1b:b5:3a:c2:a5:2a:c4:76:47:6d:52:a9:1d:
fe:4b:c5:5a:a3:7e:b8:f5:88:d6:4d:b9:5c:c6:e7:
75:9b:42:87:af:be:a1:35:40:ce:dd:46:e2:84:83:
1c:f4:43:24:cd:cc:c9:7c:a3:b2:b9:22:4b:ae:be:
68:d1:91:d5:ab:4d:11:f2:32:ba:2c:24:87:83:43:
a2:ca:7d:f9:ac:83:33:c0:22:9a:60:1b:50:86:23:
8f:9c:66:7c:17:54:96:16:15:10:5a:b8:b3:b2:d1:
4c:54:61:73:45:6a:33:0a:24:9e:eb:a7:4d:b9:ea:
79:d1:7c:42:c0:d1:fd:c2:9d:7e:e3:dd:12:46:f5:
bb:b8:76:9a:f7:4c:50:0a:10:60:3c:36:43:02:76:
0c:8d:7b:2a:fd:ec:18:56:ad:58:e7:08:f5:3b:7d:
d7:71:7c:13:53:12:82:ed:b3:7a:c0:b0:3f:b8:17:
94:f5:4d:a2:8b:21:00:d5:a3:ac:61:f6:b9:cb:e4:
43:e3:13:ad:3b:a0:c6:11:6d:60:26:ae:87:78:64:
c1:03:5c:4b:1c:a7:fe:96:29:0b:31:91:70:b0:88:
f1:17:15:3b:5f:4c:41:13:61:1e:0e:a4:0a:b8:4f:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C0:BE:AB:7D:33:F3:DA:49:72:4E:47:E6:11:C1:C7:0E:BA:34:9A
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/AsC-q30z89pJck5H5hHBxw66NJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.176.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b2:c5:66:c1:b0:b9:d7:1e:9c:74:7d:0a:ab:88:3e:73:75:
d8:57:b7:af:42:e2:09:db:84:bc:d6:fc:0c:c6:0d:e5:69:78:
c7:0a:a7:b7:d2:fc:77:e0:16:7f:1b:cf:26:08:be:b4:8f:42:
d4:9d:0f:5b:2e:82:98:9c:3d:a7:f2:52:ea:86:2f:4b:b2:c3:
47:c1:64:e1:cf:e1:f4:1b:5c:b8:3d:8e:d6:3d:39:5c:2a:75:
d0:25:06:b8:9a:a3:6c:fc:ee:64:79:4c:df:88:9d:86:2e:0f:
41:d4:19:09:f4:d6:65:c8:5c:6a:af:87:17:e8:71:09:9d:e9:
ef:30:e1:7c:08:51:c5:2d:87:7b:76:ba:62:7e:35:da:86:f6:
8e:5f:64:82:4f:42:9e:b8:f3:39:57:85:24:cc:44:32:39:ad:
9f:00:bd:f2:0e:c0:30:a3:a8:40:65:e5:40:c6:52:51:ac:e0:
97:db:30:72:76:4c:a3:13:e7:a9:1e:c4:b6:42:c7:a5:04:01:
f1:44:87:57:cd:cc:1f:e1:e3:42:6b:ad:8f:6d:e5:54:9a:56:
72:0f:c1:26:59:fa:2c:d1:37:3a:36:5a:f4:fa:7a:a9:46:ac:
10:24:68:a8:da:e8:06:94:51:2e:c9:d3:9f:85:48:b0:59:0b:
a8:00:d1:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRKsZLP/zyTErD3qD+d8m6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0
Mzc3OTUwHhcNMjUwMTA5MTA1MjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmMwYmVhYjdkMzNmM2RhNDk3MjRlNDdlNjExYzFjNzBlYmEzNDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnObDEENOpaaqYV/5MKud/xu1OsKl
KsR2R21SqR3+S8Vao3649YjWTblcxud1m0KHr76hNUDO3UbihIMc9EMkzczJfKOy
uSJLrr5o0ZHVq00R8jK6LCSHg0Oiyn35rIMzwCKaYBtQhiOPnGZ8F1SWFhUQWriz
stFMVGFzRWozCiSe66dNuep50XxCwNH9wp1+490SRvW7uHaa90xQChBgPDZDAnYM
jXsq/ewYVq1Y5wj1O33XcXwTUxKC7bN6wLA/uBeU9U2iiyEA1aOsYfa5y+RD4xOt
O6DGEW1gJq6HeGTBA1xLHKf+likLMZFwsIjxFxU7X0xBE2EeDqQKuE/UCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFALAvqt9M/PaSXJOR+YRwccOujSaMB8GA1UdIwQY
MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt
MzZlMzQ0YWJjOWQzLzEvQXNDLXEzMHo4OXBKY2s1SDVoSEJ4dzY2TkpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz
LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiCwMA0G
CSqGSIb3DQEBCwUAA4IBAQCHssVmwbC51x6cdH0Kq4g+c3XYV7evQuIJ24S81vwM
xg3laXjHCqe30vx34BZ/G88mCL60j0LUnQ9bLoKYnD2n8lLqhi9LssNHwWThz+H0
G1y4PY7WPTlcKnXQJQa4mqNs/O5keUzfiJ2GLg9B1BkJ9NZlyFxqr4cX6HEJnenv
MOF8CFHFLYd7drpifjXahvaOX2SCT0KeuPM5V4UkzEQyOa2fAL3yDsAwo6hAZeVA
xlJRrOCX2zBydkyjE+epHsS2QselBAHxRIdXzcwf4eNCa62PbeVUmlZyD8EmWfos
0Tc6Nlr0+nqpRqwQJGio2ugGlFEuydOfhUiwWQuoANHW
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:44 2025 by rpki-client