Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/YrbKy4EaAwvT6FkqHaCMmbUjraM.roa
File: YrbKy4EaAwvT6FkqHaCMmbUjraM.roa (raw, json)
Hash identifier: J5kl9flk/C9M/Pbv9sQIRuULN6o6prVq9e3pSq0TiPY=
Subject key identifier: 62:B6:CA:CB:81:1A:03:0B:D3:E8:59:2A:1D:A0:8C:99:B5:23:AD:A3
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 0189FD6AD656CACC84BC9A30FC4B1CACA180
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/YrbKy4EaAwvT6FkqHaCMmbUjraM.roa
Signing time: Wed 16 Aug 2023 08:16:24 +0000
ROA not before: Wed 16 Aug 2023 08:16:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.1.231.0/24 maxlen: 24
37.1.227.0/24 maxlen: 24
37.1.228.0/24 maxlen: 24
77.75.196.0/24 maxlen: 24
77.75.197.0/24 maxlen: 24
77.75.199.0/24 maxlen: 24
37.1.224.0/24 maxlen: 24
37.1.225.0/24 maxlen: 24
37.1.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:6a:d6:56:ca:cc:84:bc:9a:30:fc:4b:1c:ac:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Aug 16 08:16:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62b6cacb811a030bd3e8592a1da08c99b523ada3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:ec:35:c6:68:68:43:05:ec:ff:d0:7f:80:
67:c4:bd:bd:42:4d:cc:02:2d:58:42:80:cc:36:33:
a7:de:7e:20:0a:a9:25:78:6e:c5:75:38:80:a4:68:
57:be:e9:81:e1:40:a7:c3:1f:df:57:b2:c5:9b:91:
55:33:8b:27:45:b6:b3:3d:e6:18:61:d9:a3:dd:3b:
ff:35:d3:e6:f3:21:3d:83:37:35:f9:3c:17:48:e2:
b7:86:cc:ca:5e:13:50:6d:5c:27:38:9b:07:e6:49:
b5:92:a1:2a:60:e7:0e:03:3a:04:db:5b:eb:3d:31:
9d:df:a3:9e:fc:a8:d5:0d:a1:90:96:11:e6:de:d4:
8a:da:2c:a4:f9:5c:76:29:33:04:68:bc:31:ff:cd:
ca:dc:0e:d8:2f:08:8f:6f:8a:4e:6e:ef:88:a2:8f:
0d:85:26:08:26:81:de:dd:c0:f3:9e:60:d7:07:74:
a8:0a:e2:4c:61:0c:57:f1:6b:70:85:0d:7c:51:ad:
ae:50:3b:b4:9b:8b:8a:54:15:41:d7:09:7a:0a:5d:
29:49:2f:58:1e:11:ad:b4:88:9e:79:b0:df:06:3d:
4b:3f:60:43:58:80:5e:fb:0b:b0:ea:94:c1:e4:c8:
30:b2:ae:a6:6b:a2:46:f1:04:38:9c:79:82:03:10:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B6:CA:CB:81:1A:03:0B:D3:E8:59:2A:1D:A0:8C:99:B5:23:AD:A3
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/YrbKy4EaAwvT6FkqHaCMmbUjraM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.224.0-37.1.228.255
37.1.231.0/24
77.75.196.0/23
77.75.199.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:64:50:9b:74:29:50:e2:d1:30:95:a0:e9:61:ae:9d:fe:2b:
63:1f:92:d4:c0:a6:ce:57:0e:ef:a1:41:ff:5a:c3:c4:f3:d7:
cc:08:d9:bd:70:33:5e:f9:3f:52:cc:1b:57:b7:e7:9d:f0:66:
26:1e:67:3e:32:1f:07:9f:5c:f8:f7:34:3e:13:82:ce:00:d7:
11:3d:fe:4b:bb:ef:56:0e:ac:d1:13:fb:f8:be:cd:6f:cc:02:
71:6d:03:1b:b9:7e:0c:6b:c2:db:19:2b:d2:a1:32:47:1b:ed:
0f:8a:da:ee:98:43:ba:7b:46:e3:1e:66:5c:04:d9:89:45:02:
c7:c5:0c:e8:92:a6:ff:2c:23:72:75:49:e2:ad:7e:e4:5e:64:
d3:8b:21:62:bc:e8:10:ab:52:ef:81:49:f4:3a:cd:a5:50:ee:
f3:07:fc:0f:6d:6d:54:19:4b:e6:3e:c8:3e:cf:ca:85:ef:90:
67:bf:da:bc:d3:5c:6d:52:7d:4b:f1:22:4d:2f:db:4b:31:e8:
01:37:3f:bc:9f:7d:22:fd:c4:1f:72:f9:ad:a5:4e:3c:9d:35:
eb:12:f3:cf:d2:72:ff:cc:39:74:a4:e5:d0:ea:82:d6:63:a5:
fb:06:4d:3b:65:c6:f4:1b:ca:64:d9:97:39:d3:9c:6d:eb:37:
a8:41:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org