Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa
File: RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa (raw, json)
Hash identifier: c0wkjrnxIEHQj5HUBmajY9pyKvCItPr80kJiD5UVJ6c=
Subject key identifier: 45:7E:53:8D:B7:1A:13:06:24:D4:88:44:EB:D7:80:95:70:57:37:24
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019423D713B4C5E4D753E1B46FBA859286CB
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa
Signing time: Wed 01 Jan 2025 21:48:05 +0000
ROA not before: Wed 01 Jan 2025 21:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215284
IP address blocks: 46.32.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:13:b4:c5:e4:d7:53:e1:b4:6f:ba:85:92:86:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 21:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=457e538db71a130624d48844ebd7809570573724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f3:4f:bc:c8:46:1a:03:a2:a3:2f:66:5a:60:
f0:c5:5c:0d:76:26:ab:65:3a:ac:42:6d:e3:4f:12:
ee:25:ba:ba:02:13:e1:25:3d:36:61:cd:34:87:be:
4f:3a:bc:b0:79:64:d6:58:08:ab:bf:40:90:df:75:
e9:fe:05:13:8f:1b:8c:fb:97:a9:95:03:01:a1:4b:
56:5f:dc:6a:1b:48:27:fe:84:89:ef:01:fb:c4:9d:
12:fa:49:84:a5:15:3d:3c:51:47:6f:5f:5d:36:c3:
1e:f6:75:4f:69:be:7b:f1:8e:f7:69:e5:06:0b:f9:
ae:9e:bd:e8:e1:3f:60:e3:62:38:0b:ee:23:72:64:
90:ad:4a:ff:ff:07:90:ce:67:c0:b3:58:5b:59:cc:
26:34:b9:68:52:f0:5a:1a:82:41:57:12:7f:2a:22:
b2:12:2f:1c:50:b5:05:fe:12:50:e2:f6:3b:9b:75:
88:de:13:8a:0c:8e:d7:a2:fb:65:b3:74:87:1c:1b:
48:f0:92:43:a4:aa:9b:0e:56:ac:36:7f:97:6f:02:
9e:55:11:1f:e7:c7:56:af:91:a3:e8:4e:82:06:14:
27:8c:c5:dc:fb:9b:f1:1d:27:11:eb:0f:d1:f3:d8:
dc:c6:24:00:4c:0d:51:ed:8c:6d:ff:8b:45:91:b5:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7E:53:8D:B7:1A:13:06:24:D4:88:44:EB:D7:80:95:70:57:37:24
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.188.0/24
Signature Algorithm: sha256WithRSAEncryption
70:cb:fc:76:2c:0b:1d:7b:07:0a:0f:bf:59:4b:71:80:1c:85:
2e:5b:5c:6a:0b:fe:47:3f:96:4b:b1:a0:b1:f2:b0:9b:f0:07:
0c:fb:d1:52:7f:ed:ff:21:d1:17:1d:8e:2b:1e:ff:f6:f7:0f:
ae:1b:83:6a:f7:1f:a5:f2:6b:39:a4:17:76:3c:71:75:0a:2e:
fa:03:67:26:7a:c1:67:0c:ea:0a:15:99:39:96:42:46:e7:40:
ab:1c:67:e8:6f:38:0d:f0:96:d4:e5:42:93:fa:9c:64:33:a2:
78:89:ba:12:39:c5:19:ae:80:21:18:e6:e4:1a:a7:98:0e:8e:
b6:50:f2:75:5a:c7:ad:9f:b8:50:de:13:33:4b:1c:d9:e7:13:
e7:69:27:e7:5c:19:69:73:ff:19:71:b8:05:0f:2f:62:d8:9c:
ff:f3:8a:bb:2f:10:28:85:6c:61:be:3b:01:a2:e7:f4:ba:d1:
04:68:56:bc:5b:3e:d0:40:b1:6d:70:3a:64:58:90:13:2e:a8:
eb:f9:b0:28:a2:fd:52:7c:15:ae:b4:ba:54:d3:c0:66:57:8b:
5f:22:b2:09:09:54:94:42:61:15:8a:0c:b3:d9:1f:94:e1:be:
8a:a8:92:b8:ed:d9:06:a8:f4:bf:c0:88:fb:63:db:5a:47:54:
72:32:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:14 2025 by rpki-client