Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/SHcz6SyshrCg6_YKd6ASdw9R6fw.roa
File: SHcz6SyshrCg6_YKd6ASdw9R6fw.roa (raw, json)
Hash identifier: yl5VDRFPGVKfdhDkIp9HNPE8g0iVabltS7XXHjzSNj8=
Subject key identifier: 48:77:33:E9:2C:AC:86:B0:A0:EB:F6:0A:77:A0:12:77:0F:51:E9:FC
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D84BE82A389AF8F89891292915B8FE
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/SHcz6SyshrCg6_YKd6ASdw9R6fw.roa
Signing time: Thu 02 Jan 2025 11:48:16 +0000
ROA not before: Thu 02 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:4b:e8:2a:38:9a:f8:f8:98:91:29:29:15:b8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=487733e92cac86b0a0ebf60a77a012770f51e9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:f5:42:18:1b:9c:29:3f:61:24:59:cf:3d:
a4:09:8b:f2:23:33:86:e9:26:73:6c:2e:3e:f5:6f:
32:9c:a8:2d:5f:b8:64:a8:99:80:b6:a9:9e:ad:60:
35:00:bc:4a:27:54:e3:72:76:c0:de:43:36:80:67:
e8:d3:b1:26:6b:69:5c:60:e2:fe:a9:9b:b3:d3:87:
3d:15:12:d2:40:c4:76:f4:79:2f:14:2f:f3:de:b1:
83:12:2d:ea:10:0a:71:c7:ec:e7:65:83:e2:1d:d8:
1c:87:e1:bc:10:fd:bb:ae:15:bf:d2:2a:90:fb:20:
f0:a8:a0:20:0c:2b:b6:09:60:57:d1:c3:2f:a6:fd:
a6:c0:ff:d2:f0:b3:77:7e:ed:db:a7:9c:ed:33:0f:
6c:48:df:01:51:42:f1:16:76:b1:89:79:6f:9a:cd:
ef:09:4c:29:40:98:f6:d2:90:ad:f2:44:d4:57:4f:
99:9f:08:16:f2:5d:19:88:e6:6b:d2:10:d7:13:57:
14:4b:62:5c:e3:ad:17:1b:d4:f1:56:b3:08:1d:ea:
18:1a:99:86:2f:07:19:d9:8e:e5:6d:86:02:29:74:
9a:88:26:4c:08:08:4d:ce:83:ec:94:66:b5:1f:d8:
ba:dc:7b:03:9b:fb:cc:f9:48:9e:57:66:54:f9:e4:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:77:33:E9:2C:AC:86:B0:A0:EB:F6:0A:77:A0:12:77:0F:51:E9:FC
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/SHcz6SyshrCg6_YKd6ASdw9R6fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:2b:45:ab:a5:39:28:ab:48:35:ee:36:c2:b4:4f:01:7f:26:
39:25:9d:8e:28:dd:92:26:55:25:0d:a4:50:2a:70:73:c5:a9:
17:89:e2:bc:5b:26:1f:a4:ba:8b:bd:1d:d6:55:c2:0f:af:42:
29:d2:28:d9:71:8c:29:e0:89:b6:fa:9d:4f:72:ba:a0:e3:17:
e6:11:c7:03:83:fd:a5:62:11:d8:7c:a1:fb:2d:9c:d4:a5:84:
21:c6:5f:b8:07:99:d1:f4:4c:c8:6b:a9:95:09:d2:a3:5c:2a:
99:e2:ed:d8:d0:3d:fb:d1:4a:8e:73:45:9e:a7:c1:89:94:d8:
54:05:f4:2e:a3:4a:27:76:c7:6f:ee:97:85:63:00:ff:2e:9f:
24:81:d4:8c:ec:f3:fe:91:34:4c:77:1b:da:f4:0b:93:d3:47:
1a:5b:58:3d:20:22:9d:f9:5e:3a:4d:2a:c8:23:9f:13:1a:e1:
9d:30:42:90:cf:38:6b:78:f7:f3:30:bc:82:6a:7a:9f:06:aa:
13:19:2a:03:e9:e1:56:cc:06:9b:69:ce:2a:dd:a2:55:b1:20:
21:e5:0e:a9:69:4b:ef:c6:b2:be:d3:bf:fb:ea:3b:47:65:6b:
6e:64:45:fa:bc:d9:94:c3:72:c0:59:b3:f0:b0:21:07:2e:41:
d4:d8:aa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:14:07 2025 by rpki-client