Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/iTq1k1-n5HC3mDH6yOxsGqky0UI.roa
File: iTq1k1-n5HC3mDH6yOxsGqky0UI.roa (raw, json)
Hash identifier: AGbGIRgcWmrYfxQjlQUEIVcfb2QPCldn/oJ/TJ7MR/A=
Subject key identifier: 89:3A:B5:93:5F:A7:E4:70:B7:98:31:FA:C8:EC:6C:1A:A9:32:D1:42
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019423D710DDFDC0E1389D8E48DFF6007DDD
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/iTq1k1-n5HC3mDH6yOxsGqky0UI.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204986
IP address blocks: 46.32.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:10:dd:fd:c0:e1:38:9d:8e:48:df:f6:00:7d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=893ab5935fa7e470b79831fac8ec6c1aa932d142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:ec:8b:95:fd:0f:85:fb:c9:60:4f:a5:0f:
a9:14:54:59:c3:e8:aa:6b:fa:25:50:a3:48:97:73:
d0:db:c3:77:ae:f8:fe:c5:7a:34:e6:e9:a3:24:eb:
31:6f:44:d2:30:2e:20:98:51:06:e5:f6:3a:09:f9:
92:5b:d0:f3:1c:24:50:c4:10:8d:1b:a5:24:13:61:
cc:3b:ab:71:04:84:8f:0f:0f:c2:00:fc:ef:9b:0c:
47:03:a2:a1:24:61:8e:ba:6c:84:74:fe:2d:56:fc:
11:f7:90:6f:0d:a0:5d:20:d8:b6:19:ca:9a:51:7c:
4b:fe:01:ee:a4:1e:e9:be:fc:27:b1:10:30:73:61:
55:47:92:c3:cb:4a:88:3e:39:c3:3c:99:8e:db:fd:
78:72:97:58:b0:42:17:1d:a8:5f:c4:4c:aa:03:52:
a0:c5:96:e6:df:c3:21:aa:de:dc:b0:a3:26:fb:f8:
c2:75:fa:9a:ba:d7:56:7b:86:4f:e3:b9:66:4a:c4:
e7:5a:df:13:ed:39:a9:5c:62:cc:3c:02:b0:16:41:
e6:06:84:82:8b:8a:c4:a0:5b:a0:00:36:3d:3e:5b:
ee:60:95:9e:c1:ed:b9:9d:0f:b6:30:c0:2b:00:47:
46:3d:1c:18:7a:02:d5:b2:1d:b5:44:fa:41:f4:21:
9c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3A:B5:93:5F:A7:E4:70:B7:98:31:FA:C8:EC:6C:1A:A9:32:D1:42
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/iTq1k1-n5HC3mDH6yOxsGqky0UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.179.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:43:90:6f:ae:72:6c:b9:b2:ee:03:f9:57:ee:e4:61:ac:b0:
72:3c:59:ce:4d:d2:8e:ba:38:29:6e:2c:f8:26:c4:06:88:ca:
1e:6a:6e:7c:1b:b2:db:37:5a:f2:59:92:ae:21:24:64:51:9a:
99:1f:8f:1d:08:3c:72:57:68:3e:1f:17:39:dc:bf:3a:bc:24:
72:d1:6e:9c:49:56:d8:b0:26:ab:e2:d3:f4:cc:c1:6c:c2:9e:
9f:3f:5d:66:32:ad:b5:aa:75:21:b6:98:a4:7a:96:cf:6b:fa:
e5:39:b5:35:65:1c:35:57:49:b7:cf:ff:aa:20:d2:a1:a9:db:
41:33:53:ec:a5:df:d7:27:4a:4a:32:db:eb:7a:64:22:8b:61:
66:fa:07:07:c6:3f:dd:2a:4b:41:e1:16:99:fd:ae:bb:cb:25:
e9:20:63:1c:f0:c4:ae:8e:85:5c:b0:6e:04:a6:c0:c9:69:96:
04:ac:31:c4:ca:0f:16:a5:b3:12:fa:92:b2:d0:c5:2c:7d:3a:
a6:32:cf:0c:83:c6:13:fd:72:3e:52:7b:f5:f7:6f:52:df:ce:
b9:cc:71:11:35:e6:10:33:4c:89:77:4e:78:2b:45:b0:dd:85:
5c:47:00:be:9b:ad:9c:4a:e1:e8:7b:ae:36:52:47:c9:56:05:
76:7f:72:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1xDd/cDhOJ2OSN/2AH3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0
Mzc3OTUwHhcNMjUwMTAxMjE0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTNhYjU5MzVmYTdlNDcwYjc5ODMxZmFjOGVjNmMxYWE5MzJkMTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDnsi5X9D4X7yWBPpQ+pFFRZw+iq
a/olUKNIl3PQ28N3rvj+xXo05umjJOsxb0TSMC4gmFEG5fY6CfmSW9DzHCRQxBCN
G6UkE2HMO6txBISPDw/CAPzvmwxHA6KhJGGOumyEdP4tVvwR95BvDaBdINi2Gcqa
UXxL/gHupB7pvvwnsRAwc2FVR5LDy0qIPjnDPJmO2/14cpdYsEIXHahfxEyqA1Kg
xZbm38Mhqt7csKMm+/jCdfqautdWe4ZP47lmSsTnWt8T7TmpXGLMPAKwFkHmBoSC
i4rEoFugADY9PlvuYJWewe25nQ+2MMArAEdGPRwYegLVsh21RPpB9CGcQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIk6tZNfp+Rwt5gx+sjsbBqpMtFCMB8GA1UdIwQY
MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt
MzZlMzQ0YWJjOWQzLzEvaVRxMWsxLW41SEMzbURINnlPeHNHcWt5MFVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz
LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiCzMA0G
CSqGSIb3DQEBCwUAA4IBAQBvQ5BvrnJsubLuA/lX7uRhrLByPFnOTdKOujgpbiz4
JsQGiMoeam58G7LbN1ryWZKuISRkUZqZH48dCDxyV2g+Hxc53L86vCRy0W6cSVbY
sCar4tP0zMFswp6fP11mMq21qnUhtpikepbPa/rlObU1ZRw1V0m3z/+qINKhqdtB
M1Pspd/XJ0pKMtvremQii2Fm+gcHxj/dKktB4RaZ/a67yyXpIGMc8MSujoVcsG4E
psDJaZYErDHEyg8WpbMS+pKy0MUsfTqmMs8Mg8YT/XI+Unv1929S3865zHERNeYQ
M0yJd054K0Ww3YVcRwC+m62cSuHoe642UkfJVgV2f3J6
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:45 2025 by rpki-client