Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/JCVVEoCuJqID3By5YoaCKDkKAp0.roa
File: JCVVEoCuJqID3By5YoaCKDkKAp0.roa (raw, json)
Hash identifier: gMyhSCl4BNPGq8CGsrCCeio0OQ/XS360J779uZvHBXg=
Subject key identifier: 24:25:55:12:80:AE:26:A2:03:DC:1C:B9:62:86:82:28:39:0A:02:9D
Certificate issuer: /CN=cafd3133df47ce2bb07c472fbe6bb4e9178c6233
Certificate serial: 018CC3B718CB45FF7EEB184DA48A68608E09
Authority key identifier: CA:FD:31:33:DF:47:CE:2B:B0:7C:47:2F:BE:6B:B4:E9:17:8C:62:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yv0xM99HziuwfEcvvmu06ReMYjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/JCVVEoCuJqID3By5YoaCKDkKAp0.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3561
IP address blocks: 37.72.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:18:cb:45:ff:7e:eb:18:4d:a4:8a:68:60:8e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafd3133df47ce2bb07c472fbe6bb4e9178c6233
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2425551280ae26a203dc1cb962868228390a029d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a8:d9:f5:49:09:3f:1b:e5:20:95:a3:6a:42:
89:1b:20:3f:0a:ff:73:d6:bb:13:85:4a:58:a7:a7:
ef:f4:b2:cf:be:b7:9e:21:fe:28:59:46:b1:cc:71:
f7:63:b2:e4:75:7e:27:52:f2:b0:32:87:a5:5e:7c:
5b:d0:c9:b4:61:c5:95:d6:1b:5c:73:59:e4:4e:b7:
44:b0:30:c7:eb:a0:6c:fd:ff:77:3b:ad:89:13:da:
c1:8f:21:fd:a1:a0:e9:08:ef:97:3d:15:60:88:7e:
83:41:40:e2:65:f5:66:65:b1:2a:56:3d:f5:6c:98:
e6:e5:22:07:77:c6:8c:39:07:a2:b9:32:c7:a3:ae:
f9:89:cd:c3:f3:85:92:3f:e7:79:ed:2a:07:d7:1a:
0d:08:36:d9:b7:01:ab:cb:e8:c6:fa:9e:f9:cb:ff:
de:33:ae:08:89:df:dd:fc:3e:66:0d:16:29:d0:d0:
ff:81:5f:3e:d4:c7:88:69:24:f8:2a:0d:57:c5:af:
a7:9a:2a:34:51:bd:ae:94:46:64:9c:96:fe:db:fd:
ab:f3:3c:e0:d2:95:41:50:fa:43:63:63:52:fc:a4:
45:aa:5b:c6:f5:a5:73:e0:ad:73:f3:3b:9a:b9:20:
c7:1e:0f:a0:21:a9:e2:03:5a:32:ec:ef:30:7f:ff:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:25:55:12:80:AE:26:A2:03:DC:1C:B9:62:86:82:28:39:0A:02:9D
X509v3 Authority Key Identifier:
keyid:CA:FD:31:33:DF:47:CE:2B:B0:7C:47:2F:BE:6B:B4:E9:17:8C:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yv0xM99HziuwfEcvvmu06ReMYjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/JCVVEoCuJqID3By5YoaCKDkKAp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/yv0xM99HziuwfEcvvmu06ReMYjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.133.0/24
Signature Algorithm: sha256WithRSAEncryption
04:dd:12:ff:29:ca:48:6b:9b:82:f1:3d:99:4b:b1:6c:6c:89:
bb:f8:5f:16:5a:0d:9c:26:e4:23:46:af:60:e6:44:8e:62:8a:
5a:64:33:66:a8:e7:24:1c:bd:8d:e8:21:d1:df:f7:60:57:73:
9a:a2:50:fb:e5:81:8a:5d:5f:bd:06:e2:3e:d7:e4:2a:f4:b8:
e9:98:84:e1:d9:21:4a:d8:87:96:9b:6e:45:09:f6:51:2b:be:
fb:6e:b1:76:7b:bd:6e:65:c3:14:74:90:8b:47:ad:ad:a9:45:
02:3e:db:98:09:8a:4c:e9:ae:86:69:d1:e9:3b:93:f4:19:6d:
c0:c5:7b:9b:52:eb:d1:4a:fd:61:b1:a4:a8:be:ae:8b:21:d2:
83:9e:42:c1:18:7d:63:b4:77:86:f9:8d:ed:4a:0a:a5:a2:97:
46:de:3e:04:de:be:25:7b:69:cd:a7:0b:9c:c1:a0:41:ce:91:
e6:6f:e0:e1:f9:98:21:f8:56:fb:30:9d:ee:21:d0:71:12:53:
06:b9:22:d0:c7:65:70:df:08:48:15:0a:06:d7:ec:5f:b8:2d:
09:6e:19:62:50:b4:70:c3:81:35:cf:5e:cb:e0:47:09:9e:2e:
08:49:8b:ec:3c:6e:13:36:d5:de:91:9d:fa:fe:79:d2:55:7e:
19:2d:8d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 12:13:18 2024 by rpki-client on console-fra.rpki-client.org