Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1RmATe-GJ6oEdPBT8b5qksHX7wQ.roa
File: 1RmATe-GJ6oEdPBT8b5qksHX7wQ.roa (raw, json)
Hash identifier: PMYS7G3p6M7ftReZl/OCNhJ3MP4Xc9JJAViohz780Zs=
Subject key identifier: D5:19:80:4D:EF:86:27:AA:04:74:F0:53:F1:BE:6A:92:C1:D7:EF:04
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D851B88EE21B827545ABEF153036D1
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1RmATe-GJ6oEdPBT8b5qksHX7wQ.roa
Signing time: Thu 02 Jan 2025 11:48:18 +0000
ROA not before: Thu 02 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 46.37.118.0/24 maxlen: 24
46.37.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:51:b8:8e:e2:1b:82:75:45:ab:ef:15:30:36:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d519804def8627aa0474f053f1be6a92c1d7ef04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:91:9d:cd:8e:95:dc:9f:e2:a2:63:49:f0:24:
1d:10:38:26:02:20:53:61:1a:a2:fb:e5:d9:d8:b5:
c7:83:58:42:05:bf:41:0a:65:e9:4b:89:11:49:d1:
9d:9c:ba:eb:da:67:73:9e:5e:f3:96:c6:40:2c:8f:
3c:a1:28:62:90:31:ab:9f:0a:0f:43:ef:3e:eb:4e:
82:74:e4:d9:9d:49:41:1c:ab:ee:47:73:17:d5:c0:
f6:3b:51:f2:21:60:25:07:41:16:20:7c:9a:63:0a:
61:9f:30:c7:c3:83:73:ff:39:b0:b6:64:0f:61:40:
50:61:42:a6:c7:5f:94:d7:a1:fd:4b:d4:71:73:c3:
17:9e:a5:e5:38:20:4a:70:0d:44:14:0a:fe:52:3b:
5f:00:93:aa:d4:b3:bf:99:d4:d1:1c:cf:bc:4c:79:
13:a3:37:c3:c1:13:4b:f2:fa:7e:44:14:91:e7:b7:
07:29:0c:e4:fa:2c:90:80:c4:ad:60:7f:31:1f:01:
ac:97:ca:4c:86:53:37:5c:e1:c2:b0:9b:e0:9f:53:
1c:2f:e3:1d:2d:6b:2a:28:8c:a7:7f:4c:dc:7b:46:
11:1c:ea:af:0a:5d:ea:ba:4d:51:d8:5c:29:0b:dd:
42:2c:1e:fc:c0:d7:15:6b:f9:5c:4b:57:05:4d:95:
bd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:19:80:4D:EF:86:27:AA:04:74:F0:53:F1:BE:6A:92:C1:D7:EF:04
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1RmATe-GJ6oEdPBT8b5qksHX7wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.118.0/24
46.37.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c2:e0:d4:e7:7d:53:80:48:76:f8:17:8d:f8:5d:6a:ae:d4:
f8:d8:97:b1:a1:15:5c:1d:a9:d7:73:8c:a1:f4:6e:09:a3:97:
c6:31:72:51:f9:fb:03:e7:12:4c:18:a6:85:b8:74:6b:bf:b1:
9f:74:3c:79:63:6f:67:73:40:30:9f:0f:8f:31:a9:80:12:65:
4a:8a:cb:31:ee:01:89:7b:1c:3c:31:fd:a2:d4:cb:7e:c3:70:
92:e0:1f:2e:94:ec:09:59:c2:a0:2a:07:e7:74:de:cb:b8:43:
53:4f:ee:2b:23:02:67:96:09:43:f7:c1:ce:86:52:98:8c:d6:
a3:0c:81:88:5a:8a:31:5a:06:73:9e:81:e1:52:02:56:bd:48:
ba:09:62:56:4e:91:c5:23:fc:30:40:7a:9d:be:15:bd:82:ef:
62:8b:28:16:70:f4:d1:1f:0d:3e:c8:2b:35:ed:4c:6c:a5:73:
fb:26:aa:cb:dd:a9:74:0c:4e:8f:d3:02:bd:8b:fe:10:09:f2:
9a:03:cb:b7:c1:b5:6b:96:53:85:2f:55:d0:96:2d:80:75:f0:
d3:dc:a3:0e:3a:75:98:9f:a3:90:7e:a4:7d:5f:b3:e2:f4:85:
c4:37:75:76:b4:1a:72:5b:c4:3d:e0:d6:c1:a4:c4:54:87:1c:
9d:8a:26:20
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQm2FG4juIbgnVFq+8VMDbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjUwMTAyMTE0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTE5ODA0ZGVmODYyN2FhMDQ3NGYwNTNmMWJlNmE5MmMxZDdlZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JGdzY6V3J/iomNJ8CQdEDgmAiBT
YRqi++XZ2LXHg1hCBb9BCmXpS4kRSdGdnLrr2mdznl7zlsZALI88oShikDGrnwoP
Q+8+606CdOTZnUlBHKvuR3MX1cD2O1HyIWAlB0EWIHyaYwphnzDHw4Nz/zmwtmQP
YUBQYUKmx1+U16H9S9Rxc8MXnqXlOCBKcA1EFAr+UjtfAJOq1LO/mdTRHM+8THkT
ozfDwRNL8vp+RBSR57cHKQzk+iyQgMStYH8xHwGsl8pMhlM3XOHCsJvgn1McL+Md
LWsqKIynf0zce0YRHOqvCl3quk1R2FwpC91CLB78wNcVa/lcS1cFTZW9SwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNUZgE3vhieqBHTwU/G+apLB1+8EMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvMVJtQVRlLUdKNm9FZFBCVDhiNXFrc0hYN3dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiV2AwQA
LiV7MA0GCSqGSIb3DQEBCwUAA4IBAQBOwuDU531TgEh2+BeN+F1qrtT42JexoRVc
HanXc4yh9G4Jo5fGMXJR+fsD5xJMGKaFuHRrv7GfdDx5Y29nc0Awnw+PMamAEmVK
issx7gGJexw8Mf2i1Mt+w3CS4B8ulOwJWcKgKgfndN7LuENTT+4rIwJnlglD98HO
hlKYjNajDIGIWooxWgZznoHhUgJWvUi6CWJWTpHFI/wwQHqdvhW9gu9iiygWcPTR
Hw0+yCs17UxspXP7JqrL3al0DE6P0wK9i/4QCfKaA8u3wbVrllOFL1XQli2AdfDT
3KMOOnWYn6OQfqR9X7Pi9IXEN3V2tBpyW8Q94NbBpMRUhxydiiYg
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:58:58 2025 by rpki-client