Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/GLidA6fR-uns0ecV7C7nwJmM6Eg.roa
File: GLidA6fR-uns0ecV7C7nwJmM6Eg.roa (raw, json)
Hash identifier: gjOLphwv5SAXE1sgMSOAwiw9hzk2nMC1e5UZkFij13M=
Subject key identifier: 18:B8:9D:03:A7:D1:FA:E9:EC:D1:E7:15:EC:2E:E7:C0:99:8C:E8:48
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 0189D04654BBA34338317A2EB1BBDD469131
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/GLidA6fR-uns0ecV7C7nwJmM6Eg.roa
Signing time: Mon 07 Aug 2023 13:53:37 +0000
ROA not before: Mon 07 Aug 2023 13:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.1.231.0/24 maxlen: 24
37.1.228.0/24 maxlen: 24
77.75.196.0/24 maxlen: 24
77.75.197.0/24 maxlen: 24
37.1.224.0/24 maxlen: 24
37.1.225.0/24 maxlen: 24
37.1.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:46:54:bb:a3:43:38:31:7a:2e:b1:bb:dd:46:91:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Aug 7 13:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18b89d03a7d1fae9ecd1e715ec2ee7c0998ce848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:d7:ca:45:21:69:3e:38:2e:77:5a:ef:95:
30:eb:0a:16:75:a2:8c:7c:3a:81:e4:c9:0f:ab:ff:
b2:59:14:1f:d3:b9:d2:9d:e4:46:80:31:f4:fc:af:
0e:ea:d8:dc:cd:21:c8:7b:2d:91:8f:6b:00:bd:aa:
80:4e:45:97:88:8a:2d:e1:1c:02:07:ab:d1:08:99:
95:f8:13:a0:d0:6e:e7:21:d9:58:95:0d:75:94:e9:
54:44:9c:66:6e:35:fc:4f:41:02:d6:63:18:ae:8c:
88:cb:58:1c:5b:4f:df:3e:d0:33:11:ed:4c:b0:74:
04:71:ca:34:87:1b:c0:8a:3c:e5:74:62:f4:66:72:
80:3f:98:36:ba:23:1b:92:e6:1e:03:f6:89:27:c5:
a6:5a:a9:4d:42:1d:e5:4e:db:56:ae:6e:2c:45:ae:
cb:fd:49:57:ba:d1:dd:89:ed:0d:b9:58:1e:98:f0:
26:d2:02:5a:3e:3a:0e:e1:f6:f6:cb:8b:73:cc:12:
a1:50:59:94:b4:c7:44:7b:23:31:da:51:df:e4:a7:
fa:4b:4a:a2:07:3c:98:2b:83:4f:97:3e:e6:6d:f7:
93:ad:ce:93:c9:70:28:73:17:84:52:57:fb:4c:7d:
33:1b:c1:15:21:a1:e1:93:31:ad:bf:a1:54:ad:9b:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B8:9D:03:A7:D1:FA:E9:EC:D1:E7:15:EC:2E:E7:C0:99:8C:E8:48
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/GLidA6fR-uns0ecV7C7nwJmM6Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.224.0-37.1.226.255
37.1.228.0/24
37.1.231.0/24
77.75.196.0/23
Signature Algorithm: sha256WithRSAEncryption
93:9b:cd:05:00:20:c4:07:53:de:65:0d:c4:5e:0e:bc:26:fc:
39:5a:69:17:8e:c7:29:f8:ab:ed:cd:87:25:67:3d:ae:0e:37:
79:98:0c:94:61:58:23:5c:bc:ca:49:28:11:c3:67:d6:ec:cc:
50:79:58:95:03:af:62:53:63:94:3b:59:ce:c3:0f:62:be:ba:
c4:0c:c9:51:b8:f2:d9:86:e2:c5:91:64:2b:e0:22:66:01:c9:
07:40:7c:2c:e9:d2:f5:ba:ab:eb:bd:38:9d:0d:08:fa:e1:6a:
c3:58:56:71:90:a8:2f:49:ca:e9:22:0e:d2:a1:66:76:14:e5:
c9:30:a8:ca:cf:3c:08:aa:e1:0b:e2:84:88:de:5f:44:0a:dd:
af:4f:6c:c4:90:da:0d:de:0e:13:bb:6e:71:82:04:26:7c:70:
3e:f4:4b:d2:26:86:9d:b0:7d:95:96:d3:89:46:3b:94:94:12:
90:6c:ac:f4:96:ee:25:fc:a3:a8:70:25:f4:10:9d:28:a5:a1:
27:4e:32:8f:79:bc:05:47:a7:ee:2c:50:d0:70:11:c6:26:71:
c6:48:d0:a6:e8:6c:6c:bc:b4:50:74:59:10:50:37:87:90:92:
2f:b8:3d:f1:ee:af:96:91:b2:9b:43:99:d0:54:ab:f9:bb:02:
8d:68:70:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org