Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/ijEqoAEZpU0XwucBGAsnbQDDdNw.roa
File: ijEqoAEZpU0XwucBGAsnbQDDdNw.roa (raw, json)
Hash identifier: JCAoDA+s8OPB6Om2MtNX+ndsLOblJSylnwNeZbS7ZEI=
Subject key identifier: 8A:31:2A:A0:01:19:A5:4D:17:C2:E7:01:18:0B:27:6D:00:C3:74:DC
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019423D7127A9996CE35C60359231CF5ED66
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/ijEqoAEZpU0XwucBGAsnbQDDdNw.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209360
IP address blocks: 46.32.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:12:7a:99:96:ce:35:c6:03:59:23:1c:f5:ed:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a312aa00119a54d17c2e701180b276d00c374dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5e:83:88:a3:22:4c:fa:2e:d6:4d:fc:56:df:
da:4f:10:39:bf:f2:4b:10:44:63:f3:00:b2:8e:2f:
38:c2:39:ab:30:6e:ea:85:a0:dc:f2:82:8e:c9:83:
1f:4f:fa:d8:9c:da:da:db:3b:2c:36:4a:ea:81:10:
87:76:4d:65:4e:57:b6:28:98:50:1c:d3:94:d3:87:
0b:67:00:31:3a:29:30:59:d2:da:a5:f8:cc:2e:b9:
ee:c6:de:63:52:d0:a9:91:1b:29:b1:73:bb:2c:d6:
1f:67:7e:6f:12:f9:04:99:77:61:a4:77:af:27:4e:
42:f4:45:5e:7b:4d:65:bc:bf:c2:f5:8d:7c:1a:c1:
17:34:3f:6c:59:72:17:a9:e0:6e:c5:30:cd:84:72:
31:db:86:38:24:cf:34:b3:68:e1:c3:7d:69:3e:a6:
4d:29:6f:49:ae:05:95:69:bf:6b:9a:3e:54:8e:57:
9d:6a:1f:fc:c7:36:ae:79:d5:07:49:1e:4d:66:69:
88:aa:59:39:20:4f:55:03:90:a1:14:fb:3d:55:64:
5c:80:4d:6d:8c:be:42:86:8d:33:5a:19:93:a7:57:
6d:84:0b:80:38:51:04:3a:51:a4:ce:c9:57:7f:9c:
be:c9:6d:d0:3e:fa:f7:d1:67:74:98:30:c0:1f:a6:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:31:2A:A0:01:19:A5:4D:17:C2:E7:01:18:0B:27:6D:00:C3:74:DC
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/ijEqoAEZpU0XwucBGAsnbQDDdNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.177.0/24
Signature Algorithm: sha256WithRSAEncryption
17:36:58:e4:39:de:2b:0a:53:07:7c:83:3c:86:40:83:1f:87:
d2:a2:0f:b8:31:b2:30:c5:ed:6c:fd:b0:bb:82:74:91:29:10:
39:14:0e:8c:f4:08:03:cb:7a:e8:55:ae:ef:42:5a:54:ff:21:
ef:2b:e7:2c:00:e6:2a:da:d3:bf:a8:30:5a:65:5f:ce:fa:a5:
cc:1f:f2:39:02:9f:94:65:72:f7:ce:dd:b0:2f:b5:a0:3e:17:
79:9c:6a:a6:e5:30:97:ee:4e:04:2a:7d:0c:14:c7:6a:6c:4d:
0e:80:22:de:42:44:1d:ab:b1:76:21:e8:e8:13:6c:64:c1:34:
2d:48:2c:38:66:76:38:64:67:16:e6:b9:b2:1b:c6:32:6f:9a:
d4:78:03:90:8e:07:d5:16:fb:69:13:1a:27:55:8b:84:71:58:
1e:3e:7e:cd:88:6b:b5:ee:31:ae:5b:ab:fe:12:95:37:a1:8f:
b0:93:7d:13:c5:ab:87:26:00:02:35:4c:82:12:00:18:fd:67:
90:ca:83:b6:f5:17:ab:5e:19:ed:a2:78:68:c1:6e:19:57:22:
93:4d:2a:5a:3f:b0:05:e1:ff:53:cf:db:e9:6d:f0:73:ab:ba:
b7:6c:13:e4:d1:1e:60:71:26:e7:b0:55:2d:75:7d:04:b8:21:
4d:e3:ae:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:20 2025 by rpki-client