Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kSe4cI6rG7M_60028Th819kvQz4.roa
File: kSe4cI6rG7M_60028Th819kvQz4.roa (raw, json)
Hash identifier: iHlo9+BIevUIW10FtCP/LGqNIRc0GfUQwDWCO/0Oq+Y=
Subject key identifier: 91:27:B8:70:8E:AB:1B:B3:3F:EB:4D:36:F1:38:7C:D7:D9:2F:43:3E
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D84E0C3276F956C668360782E303FC
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kSe4cI6rG7M_60028Th819kvQz4.roa
Signing time: Thu 02 Jan 2025 11:48:17 +0000
ROA not before: Thu 02 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 46.37.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:4e:0c:32:76:f9:56:c6:68:36:07:82:e3:03:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9127b8708eab1bb33feb4d36f1387cd7d92f433e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:52:72:73:39:35:ce:56:05:6f:23:a3:6e:
61:84:38:8b:29:90:d9:0a:c6:1a:31:a1:f2:f3:31:
bb:1b:35:e6:6d:ba:2f:4b:7c:b3:fb:38:e4:39:f0:
11:57:61:af:ce:d1:ea:82:da:35:a1:95:ff:8e:0c:
50:44:88:c3:41:9a:95:d8:e9:1a:49:d0:0a:12:b3:
45:30:5d:56:60:67:b4:af:66:26:45:2c:c8:62:f1:
89:4e:04:ad:e3:2f:14:e4:28:f7:78:0f:86:02:7c:
e4:29:1b:61:c8:15:84:bc:b1:fa:d5:12:c6:d9:f1:
b1:42:41:31:5d:49:57:5f:84:9f:9e:84:98:21:66:
0e:9f:76:ee:f7:4a:d1:ce:44:3f:33:f0:7a:de:7e:
b3:5b:31:62:d9:ba:ea:9a:cc:ff:f3:4f:26:b8:54:
9e:a0:22:3d:e1:ef:6c:57:f7:ed:a7:84:ec:c5:4c:
52:43:d6:27:82:d9:e3:2b:25:65:41:be:02:8d:f9:
47:89:f6:16:77:37:51:6f:de:41:e7:8b:ec:2b:5c:
1d:7f:99:e8:24:ec:f0:b9:c5:95:60:b4:03:db:9b:
4e:c7:36:11:b9:fc:8e:6e:ea:89:c2:81:fe:99:24:
e9:8b:e1:23:6f:ee:60:4e:10:bc:eb:26:8e:fe:2e:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:27:B8:70:8E:AB:1B:B3:3F:EB:4D:36:F1:38:7C:D7:D9:2F:43:3E
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kSe4cI6rG7M_60028Th819kvQz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f9:aa:36:a7:e5:57:a5:a3:c1:26:66:85:97:ae:e4:8f:02:
36:8b:b9:b3:eb:78:cc:d3:f3:17:0d:75:9f:d8:43:2e:bb:b3:
f3:47:67:6a:67:a7:bd:30:d9:a1:aa:19:48:a6:6a:09:5d:19:
9a:b4:86:fc:1e:e5:c3:03:04:01:78:cd:0a:9b:2c:d5:44:a0:
e6:7b:f5:e0:b8:f9:41:6e:32:45:5f:cd:1c:94:dd:33:7a:81:
ce:00:09:e7:87:cf:91:17:1c:d6:64:fd:e8:8e:28:b7:9e:c9:
e8:f5:af:8e:5b:75:b6:56:04:ce:96:53:0e:39:bd:cb:9d:05:
a3:a4:73:7d:c5:30:5e:3c:a2:e6:ef:54:b4:d9:a8:46:ed:85:
18:90:e7:a6:32:40:48:2a:11:86:00:12:ef:7a:75:2d:5b:9b:
25:36:0f:87:32:38:7a:21:e3:2c:8e:08:6f:ab:ac:4e:3e:6b:
13:49:a7:c3:9b:2d:94:15:9e:96:24:c8:ee:22:12:93:39:68:
77:c0:f6:d4:b5:d8:46:b3:db:91:27:f2:ac:ba:10:b0:df:ad:
5e:1f:cf:c9:e8:e5:32:ec:16:73:a5:9f:10:31:b5:24:67:df:
b4:f0:3c:e2:c0:d5:6c:64:da:a9:2b:a3:e9:25:e9:f2:cd:0e:
32:88:50:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:37 2025 by rpki-client