Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/APDShfQ5fTalGyC4SBo8RAi1CX0.roa
File: APDShfQ5fTalGyC4SBo8RAi1CX0.roa (raw, json)
Hash identifier: GVwQ1jASDPqodk4Ob+KA3Rvnm3OqeG6qZVaO5YDkwkI=
Subject key identifier: 00:F0:D2:85:F4:39:7D:36:A5:1B:20:B8:48:1A:3C:44:08:B5:09:7D
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018A11F68A842C1D35C1D55521EE1496BC82
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/APDShfQ5fTalGyC4SBo8RAi1CX0.roa
Signing time: Sun 20 Aug 2023 08:01:24 +0000
ROA not before: Sun 20 Aug 2023 08:01:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.1.227.0/24 maxlen: 24
77.75.196.0/24 maxlen: 24
77.75.197.0/24 maxlen: 24
77.75.199.0/24 maxlen: 24
37.1.224.0/24 maxlen: 24
37.1.225.0/24 maxlen: 24
37.1.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:11:f6:8a:84:2c:1d:35:c1:d5:55:21:ee:14:96:bc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Aug 20 08:01:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00f0d285f4397d36a51b20b8481a3c4408b5097d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:d4:94:cd:c6:77:58:31:29:86:74:96:48:
d7:88:af:16:e0:61:88:ae:f0:3e:4a:2d:48:71:b8:
db:d1:0a:ae:79:8c:73:3a:f4:c2:ed:f7:91:2d:28:
22:51:03:e8:48:7a:1e:ec:fb:e6:ae:8b:04:67:aa:
49:4c:7c:03:9f:33:b9:5e:8f:40:5a:ed:68:5c:68:
f0:13:6e:47:ab:a7:f6:9d:0d:ec:93:35:1d:68:bd:
d0:05:78:93:5b:ab:d3:ee:62:60:a4:46:71:ff:49:
e7:04:15:fa:6a:2b:95:6e:b9:cd:5f:ef:5c:ab:3c:
2e:bb:ad:28:af:3e:5a:a6:07:a5:59:f4:72:63:61:
e4:a1:d4:3d:bd:02:1c:f5:f1:6d:0b:10:cc:c5:43:
ab:07:50:c7:7a:f2:c8:b3:3d:7e:f8:c1:9b:eb:f6:
06:01:76:4b:61:89:29:02:ed:1c:11:09:04:61:b2:
85:9b:5c:70:d5:ad:53:69:65:72:c0:df:f5:ab:62:
90:3f:5d:8c:ea:63:2f:8f:e6:77:d5:8f:d8:c0:09:
69:61:91:21:dd:c4:e4:c8:16:44:cd:b9:f9:e2:3e:
70:93:83:7c:87:71:98:2d:84:93:2d:dc:7d:81:36:
76:be:3c:64:6e:92:6f:f5:cc:cd:0b:67:85:ea:7b:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F0:D2:85:F4:39:7D:36:A5:1B:20:B8:48:1A:3C:44:08:B5:09:7D
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/APDShfQ5fTalGyC4SBo8RAi1CX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.224.0/22
77.75.196.0/23
77.75.199.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ac:25:f2:d7:ba:4a:7e:27:2c:33:fe:81:c7:03:25:6b:1f:
af:ea:ad:d5:09:84:b9:e7:3a:6e:0f:5b:c1:72:15:e5:35:4d:
74:6b:67:f8:3f:2b:b1:89:24:e9:a9:3c:40:fb:e8:65:bf:cc:
a1:6b:a1:2a:45:7b:23:48:38:07:c1:9d:59:d6:16:dc:77:b0:
b6:fe:22:f9:72:71:f9:27:47:27:22:29:5b:bc:66:e3:21:3e:
86:61:48:2f:84:32:53:92:be:91:7c:12:b0:45:da:8f:17:7c:
b0:c9:64:0d:2e:12:34:fa:f4:e8:aa:30:71:84:33:08:ab:d3:
a4:c3:cf:84:3c:f4:6f:0d:94:e0:91:88:da:10:31:fe:b7:2d:
45:24:48:df:a7:31:e2:db:3e:15:ef:73:69:40:83:8c:ae:b3:
f3:b6:70:69:d2:9a:83:20:b5:fc:2e:f6:33:f5:ea:26:2d:f7:
23:f9:89:b9:4f:d9:70:50:d3:13:aa:39:6f:ab:91:e7:e6:42:
60:04:47:66:cf:60:1d:96:04:9a:47:62:87:93:10:ae:4d:8a:
6a:30:e6:a4:67:69:db:fa:c6:39:53:e6:a4:86:c3:61:99:c1:
01:d6:3b:4b:52:a5:56:a4:36:81:89:22:b0:01:61:5e:fc:17:
6b:43:f6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org