Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/ZYpsBpM0wwxlMmlECWbdAGjnrKw.roa
File: ZYpsBpM0wwxlMmlECWbdAGjnrKw.roa (raw, json)
Hash identifier: xaidAeeTjzkBYrc1c8wckg30QGtEeAhU3g82upCbm0o=
Subject key identifier: 65:8A:6C:06:93:34:C3:0C:65:32:69:44:09:66:DD:00:68:E7:AC:AC
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 0189F40E097D0A0AD1825635B16EA6B8D149
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/ZYpsBpM0wwxlMmlECWbdAGjnrKw.roa
Signing time: Mon 14 Aug 2023 12:38:27 +0000
ROA not before: Mon 14 Aug 2023 12:38:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.1.231.0/24 maxlen: 24
37.1.228.0/24 maxlen: 24
77.75.196.0/24 maxlen: 24
77.75.197.0/24 maxlen: 24
77.75.199.0/24 maxlen: 24
37.1.224.0/24 maxlen: 24
37.1.225.0/24 maxlen: 24
37.1.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:0e:09:7d:0a:0a:d1:82:56:35:b1:6e:a6:b8:d1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Aug 14 12:38:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=658a6c069334c30c653269440966dd0068e7acac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4c:24:70:56:a4:93:94:a3:17:77:bc:c4:2d:
ef:67:b9:10:44:2f:fd:39:bf:29:3c:15:63:38:78:
ff:ed:23:48:7b:03:e1:a2:79:60:d5:c8:38:90:10:
24:5c:98:1e:4e:cb:37:69:0d:34:0d:33:c4:cf:d7:
d6:c7:20:fe:ef:89:aa:46:5c:e4:9c:8a:10:81:88:
06:8a:a7:3b:c9:3a:f8:cd:98:3a:4f:16:88:ab:41:
75:20:6f:e8:7b:fa:c2:8e:99:1a:2e:96:43:b0:37:
f4:46:5e:f2:93:37:f7:c0:82:f3:53:90:d1:c3:dc:
c3:4e:b6:c4:2b:c2:a4:e7:0e:f8:d8:e7:94:99:a8:
85:38:0b:8f:5c:c9:6e:ef:8b:a3:dc:81:93:eb:6d:
2e:46:b9:53:16:53:9b:7c:8f:4f:f9:1f:18:7b:f2:
02:96:4a:04:1f:1a:f7:f8:b1:e7:38:fe:b8:b6:f5:
75:17:25:91:a6:d9:67:83:f5:27:ff:b3:e8:67:1c:
ff:bd:93:ae:78:0d:f7:28:26:3c:51:db:5b:26:02:
67:65:a2:03:fd:be:94:42:ca:4c:e8:7b:0e:d7:5f:
8e:e0:97:a9:84:fb:71:7f:11:71:df:e0:cc:44:21:
4e:60:06:35:73:d4:b4:ba:5c:e6:08:82:75:3a:0e:
76:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8A:6C:06:93:34:C3:0C:65:32:69:44:09:66:DD:00:68:E7:AC:AC
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/ZYpsBpM0wwxlMmlECWbdAGjnrKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.224.0-37.1.226.255
37.1.228.0/24
37.1.231.0/24
77.75.196.0/23
77.75.199.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:41:31:96:a0:13:b6:43:ce:77:5d:2f:82:99:50:62:dc:26:
ae:43:72:1f:0e:78:0f:b6:ef:7a:69:37:e3:a3:c2:4b:e9:ee:
e5:7d:92:41:e4:f0:7b:da:7e:b2:c7:b6:e8:73:71:42:3b:cb:
1b:37:ce:72:51:2e:30:b0:03:75:6b:89:5c:ca:88:62:f6:c6:
9d:0b:50:6c:f1:e3:61:6b:30:6d:07:96:60:47:7e:87:85:dd:
d0:b0:18:95:14:7b:2f:10:3a:6f:43:5a:4f:87:28:b7:ba:51:
df:cb:a7:30:11:84:6b:aa:2c:d0:9d:4c:f2:00:0b:cd:cd:13:
a8:32:b2:7b:1d:ce:3b:6f:92:ce:a8:17:5f:86:99:8c:a2:1f:
f9:33:6d:6f:ef:ab:ea:db:ad:9d:3f:2b:0c:e2:76:4a:d4:2c:
38:9b:a2:c3:7a:87:b1:de:0f:31:ad:be:6a:58:14:82:76:97:
a5:e8:e9:8d:2b:d9:d9:e8:a9:48:53:3d:47:ba:80:48:2a:63:
ec:fc:19:91:a1:bf:69:1b:c5:9e:88:a2:fe:20:85:e7:87:bb:
83:d8:54:8c:78:a1:d6:3b:a6:d5:31:8d:90:23:1e:af:b0:cb:
45:1d:8a:01:42:db:7a:b3:27:91:aa:5b:6b:2d:15:19:7c:1f:
ab:e8:9e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org