Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hH2fBILStnSVhO9IOuxESH2Mtgc.roa
File: hH2fBILStnSVhO9IOuxESH2Mtgc.roa (raw, json)
Hash identifier: Vn+yY/Yv23AhqS+txJOVE6cmwg8HSyPr5Lc2ZrMYwnc=
Subject key identifier: 84:7D:9F:04:82:D2:B6:74:95:84:EF:48:3A:EC:44:48:7D:8C:B6:07
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D84D9B4A5858EC851F139AF70C7050
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hH2fBILStnSVhO9IOuxESH2Mtgc.roa
Signing time: Thu 02 Jan 2025 11:48:17 +0000
ROA not before: Thu 02 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 46.37.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:4d:9b:4a:58:58:ec:85:1f:13:9a:f7:0c:70:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=847d9f0482d2b6749584ef483aec44487d8cb607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:07:55:c2:8a:49:da:a5:01:51:d9:cf:38:
77:d3:19:bf:1b:bd:d9:17:eb:b3:4a:ef:d6:cb:75:
24:01:19:81:20:54:14:cf:77:d4:82:0a:3d:6b:54:
c4:4d:38:b2:99:d8:28:b2:61:d1:1c:b7:39:fb:bd:
e1:4a:4d:ad:bd:f2:66:6d:c1:25:d3:1b:ae:3f:84:
81:4c:a0:83:77:2d:f2:54:2e:6f:01:54:01:05:0f:
dc:f3:5e:a6:ed:2f:fc:45:f9:b0:0f:b4:08:b7:58:
5b:3e:e1:1e:78:ea:1e:8b:0e:6f:2c:94:a6:dc:a2:
af:87:ed:a3:41:e1:fe:5b:a1:95:c2:f6:87:7d:b6:
9f:07:8f:5e:01:1a:b4:5a:17:2c:2e:bb:59:66:39:
f2:b0:20:3e:f8:1e:c2:12:46:b2:8d:4a:da:67:f6:
85:1d:aa:59:fe:a2:f9:bf:5b:a8:2d:49:4e:d3:28:
4c:a3:c0:14:82:3b:7d:75:62:a6:d0:bc:66:f9:1e:
2b:8d:96:fe:df:57:9d:0c:16:a0:94:29:b9:0e:34:
c4:40:a2:17:ba:3b:ee:2a:ff:85:04:fb:02:14:70:
44:d9:1c:d8:83:41:8b:93:2b:bc:c8:69:bd:a3:5d:
ec:75:bd:c0:99:30:6f:95:90:e2:cd:02:7f:8f:54:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7D:9F:04:82:D2:B6:74:95:84:EF:48:3A:EC:44:48:7D:8C:B6:07
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hH2fBILStnSVhO9IOuxESH2Mtgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:7a:fe:32:26:8f:7c:bc:1e:9b:9b:55:9d:bd:3a:c1:11:d2:
52:7f:9b:8c:5c:f8:3f:43:6e:dc:a0:c7:4a:1a:86:83:96:e8:
6f:25:b2:d5:e6:e9:f4:fd:d7:39:48:71:08:11:b6:cd:80:9b:
68:4b:3b:db:21:08:3c:f9:53:4b:69:d0:9b:3c:e4:5f:8a:c7:
2c:45:9f:4a:2c:23:6c:ec:7c:a3:2b:9e:20:0e:60:aa:c4:c4:
2d:07:72:df:1b:97:cd:92:b0:16:1b:04:89:66:c1:d4:fe:20:
55:3f:c8:1e:49:68:2a:88:91:28:f9:93:94:31:16:ef:f9:25:
1a:cd:fb:d4:b7:d8:bb:71:c4:5f:a8:f0:f5:df:58:e7:68:d4:
13:7d:63:a7:2a:b9:ba:6d:f8:e4:cf:a6:67:90:21:b1:7a:c9:
05:6f:0a:cf:f5:dc:21:62:41:36:96:e9:12:41:4c:d0:1b:37:
15:4b:c1:13:d0:84:69:7d:a0:2b:fe:f9:7d:1c:24:e6:51:a8:
df:2a:51:35:34:16:29:4f:05:0d:7b:ba:4a:c3:e6:d2:de:15:
65:88:08:8f:cc:8a:7f:d0:b7:a4:a9:a6:1d:b0:87:07:46:a8:
10:06:22:da:cc:87:04:5f:13:1b:82:90:1b:47:d4:86:57:d4:
04:f1:40:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:00:11 2025 by rpki-client