Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/oUN6hm9XIH9hez7uSosGEeiTS64.roa
File: oUN6hm9XIH9hez7uSosGEeiTS64.roa (raw, json)
Hash identifier: O2lJOrBjeZAv4ECvJJ0xPhkbtSeFQ6Qb6tFoYeeLtF0=
Subject key identifier: A1:43:7A:86:6F:57:20:7F:61:7B:3E:EE:4A:8B:06:11:E8:93:4B:AE
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019423D71057DA16304CBEA3C7163FFA7814
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/oUN6hm9XIH9hez7uSosGEeiTS64.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202492
IP address blocks: 46.32.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:10:57:da:16:30:4c:be:a3:c7:16:3f:fa:78:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1437a866f57207f617b3eee4a8b0611e8934bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:7c:db:ed:08:b1:6f:7b:76:9c:07:8d:21:
e1:06:ee:58:e4:c4:61:93:e5:43:a9:02:9a:31:92:
3c:ad:b8:56:57:0b:5b:62:12:0d:60:bc:48:dc:c6:
4a:36:2d:94:ad:44:81:76:65:f1:90:ac:9f:7e:38:
c7:be:2b:fb:da:03:cc:76:85:f1:a8:59:dd:9a:c2:
2d:74:08:55:91:ca:de:2f:d3:90:4b:1f:f1:00:e6:
61:87:92:ea:51:0a:66:4c:a6:45:e1:06:dc:a0:d2:
c2:99:57:e7:c4:fb:d4:68:9f:50:6f:92:bd:90:99:
a6:26:5b:49:80:08:ae:6d:54:dc:a9:2e:c4:5d:1b:
43:80:82:e4:72:c4:da:81:f2:21:ef:74:28:c5:a9:
82:27:75:a4:1b:0c:8e:ec:52:89:4a:3b:81:0f:8e:
2e:85:85:2b:4c:32:95:5d:b1:9d:35:ba:8b:51:51:
f0:f3:7d:90:df:64:2e:96:42:7c:84:4f:46:a6:54:
7e:10:41:fc:02:8a:f4:f5:14:05:c0:9b:e3:27:7c:
b3:50:f4:13:0f:ad:6d:d8:d3:15:cc:38:fe:c7:97:
dc:11:0e:cd:37:e9:e2:d9:ca:53:72:60:f2:7f:5f:
ed:f2:1a:f6:b5:ef:87:da:88:ec:2e:c4:92:73:71:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:43:7A:86:6F:57:20:7F:61:7B:3E:EE:4A:8B:06:11:E8:93:4B:AE
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/oUN6hm9XIH9hez7uSosGEeiTS64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.180.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:0d:a0:c3:0f:86:b7:b6:36:c3:56:94:da:48:03:7f:1b:bb:
2b:8d:d5:f7:a6:2a:6b:2c:94:2e:29:5a:d8:a1:0a:2d:9e:02:
fd:36:83:41:81:dd:51:e7:22:7c:66:06:3d:f8:aa:e4:61:48:
21:a4:18:10:d3:d3:4c:fc:a8:51:cf:2a:12:c4:f0:d9:f5:2a:
4e:16:8a:79:30:5e:1e:9e:96:54:ab:d1:04:4a:63:f2:52:7c:
38:28:c1:e2:36:de:8f:b7:e2:ba:0d:d1:29:c2:61:33:67:f8:
7b:98:2f:08:3f:85:84:9f:b5:06:eb:80:21:e6:58:09:28:2b:
13:2c:76:2e:ae:66:2f:fe:2e:cb:d1:7a:5d:0c:0b:55:00:2b:
5d:01:37:c5:9a:c1:9a:23:bf:81:0a:c6:76:f8:83:ce:94:bf:
80:40:55:d8:82:f0:98:7f:d6:19:9e:c6:1c:2f:b5:27:73:05:
98:0f:b6:c3:7b:eb:f3:b2:80:d8:74:c7:03:4b:b0:7a:6c:3e:
1c:f4:48:d4:a7:57:95:df:2c:bc:b2:5e:1c:de:62:c6:9c:87:
1e:a6:a7:63:94:ee:d5:9f:51:17:45:37:f7:ee:8c:b1:f4:e1:
ec:5d:a4:90:b5:a5:ea:e7:91:ad:52:bd:72:31:2b:63:30:bd:
32:54:1a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:28 2025 by rpki-client