Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/sOeZLkS_W2YPkC3HYpB8i1wbKrg.roa
File: sOeZLkS_W2YPkC3HYpB8i1wbKrg.roa (raw, json)
Hash identifier: DWoHvo/nHv6LK0hSEo+VRzoRkypYsm0PKW/N05fGfno=
Subject key identifier: B0:E7:99:2E:44:BF:5B:66:0F:90:2D:C7:62:90:7C:8B:5C:1B:2A:B8
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 018CC2DB072DB98DE138021ECF1F97194893
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/sOeZLkS_W2YPkC3HYpB8i1wbKrg.roa
Signing time: Mon 01 Jan 2024 02:29:43 +0000
ROA not before: Mon 01 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204427
IP address blocks: 37.148.171.0/24 maxlen: 24
37.148.169.0/24 maxlen: 24
37.148.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:07:2d:b9:8d:e1:38:02:1e:cf:1f:97:19:48:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jan 1 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0e7992e44bf5b660f902dc762907c8b5c1b2ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:58:e7:4f:23:03:16:a0:b3:b2:c2:47:90:5c:
b1:f0:78:ae:50:b4:43:cc:fe:a3:6a:fc:9f:3d:74:
57:f6:23:1a:c2:f5:22:89:dc:c1:f5:35:04:47:49:
cb:09:56:2e:36:1e:14:e3:08:08:04:70:00:87:ce:
b4:44:72:e2:7d:3f:5b:e4:46:ec:ce:34:aa:72:1e:
00:17:07:8f:b4:14:87:3b:7b:5f:ee:e6:72:ee:d0:
bf:9c:dd:fb:b2:ba:98:75:8e:15:70:91:31:86:6e:
9a:bd:60:79:4e:6b:51:62:68:f5:c3:5c:26:95:68:
8e:d4:40:5c:4f:00:ca:f5:5b:2e:a1:3b:6e:4e:35:
3a:dc:ce:8b:44:9b:0f:eb:98:05:15:91:3b:52:08:
ba:b3:5a:96:d3:a3:b4:1f:d2:59:c1:09:58:99:97:
2f:f7:c5:c9:a0:5f:67:2d:6a:1c:37:bd:69:ef:d7:
5b:8c:56:ba:21:b4:8e:4e:55:a3:fd:ba:ad:37:cd:
80:e2:b0:e6:40:5a:a4:df:40:2e:89:9a:6c:7a:38:
f4:79:e0:5d:ef:34:cc:81:fc:9c:7d:08:f6:00:a6:
45:35:72:bb:8f:9e:f2:38:66:88:34:2f:8a:f4:b3:
49:a2:41:86:fb:cc:a2:95:66:8e:e7:16:f9:fe:8d:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E7:99:2E:44:BF:5B:66:0F:90:2D:C7:62:90:7C:8B:5C:1B:2A:B8
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/sOeZLkS_W2YPkC3HYpB8i1wbKrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.169.0-37.148.171.255
Signature Algorithm: sha256WithRSAEncryption
50:3f:4b:c4:16:63:58:09:47:43:de:43:87:6a:ea:c1:e6:81:
ca:e3:8f:61:55:f3:ab:76:c9:82:9d:7b:00:ba:0b:82:ac:5b:
bd:81:1d:95:d3:e5:5e:ce:66:18:96:d5:08:67:88:dd:76:ca:
1e:6e:ac:57:07:59:1a:8f:b3:08:85:19:7d:a8:30:e9:37:83:
de:5e:a3:d8:eb:d3:5e:8d:5c:9c:e6:bf:97:e8:2b:c2:91:c1:
1d:7f:6d:1f:94:23:4f:a9:b9:44:6d:10:64:75:fa:bf:47:9a:
44:c8:ca:b7:d7:92:8a:b0:2e:df:86:3b:e8:07:4a:32:9c:fb:
a3:7b:17:d4:01:99:a4:0e:f6:a8:43:cf:cc:36:be:57:cd:ff:
0c:60:fc:9c:95:b0:8a:f7:c2:2f:14:91:7e:66:c8:b3:df:cb:
6f:41:60:d0:84:70:1c:79:13:b6:50:58:33:53:c7:87:43:c6:
47:d1:ef:94:38:e8:66:4e:83:ea:72:bc:92:f7:01:01:16:61:
28:ba:92:73:f7:09:e5:8a:53:b3:e4:55:b9:9f:f8:5c:bb:e9:
68:08:ac:f4:73:4e:28:b5:58:3e:64:79:48:ab:9b:d9:a8:6e:
bf:68:6d:f7:05:3b:18:96:28:36:5b:24:d4:24:a8:92:21:d2:
94:b5:7f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 08:47:52 2024 by rpki-client on console-fra.rpki-client.org