Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/ZjeNlcWBudEdSLjshKKHqmFZ9ls.roa
File: ZjeNlcWBudEdSLjshKKHqmFZ9ls.roa (raw, json)
Hash identifier: gjoOKBoQR4q/aRbaUsRk5cUyA6R9yBs2MMQlmFuB4/k=
Subject key identifier: 66:37:8D:95:C5:81:B9:D1:1D:48:B8:EC:84:A2:87:AA:61:59:F6:5B
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018B8507B3DBE31F0D0B5EA2371F24250DE2
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/ZjeNlcWBudEdSLjshKKHqmFZ9ls.roa
Signing time: Tue 31 Oct 2023 09:19:16 +0000
ROA not before: Tue 31 Oct 2023 09:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 37.1.229.0/24 maxlen: 24
37.1.228.0/24 maxlen: 24
37.1.231.0/24 maxlen: 24
37.1.230.0/24 maxlen: 24
77.75.197.0/24 maxlen: 24
77.75.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:07:b3:db:e3:1f:0d:0b:5e:a2:37:1f:24:25:0d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Oct 31 09:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66378d95c581b9d11d48b8ec84a287aa6159f65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:a0:bc:86:cb:d0:ce:99:03:3b:3b:21:b0:
3f:3d:44:44:e2:b1:21:13:02:d9:d1:d9:50:b8:b6:
a6:f8:43:1a:7e:ea:3e:62:2d:15:80:ff:e8:10:95:
d6:05:f6:c7:70:19:8e:a1:d3:8c:be:64:22:42:05:
26:72:db:69:87:27:b6:14:3a:a9:07:a4:74:59:c2:
b2:46:f1:76:55:10:e1:a3:06:b3:4e:55:6f:26:ac:
83:95:bb:4e:41:db:b7:2b:05:48:8b:bc:c0:c9:1b:
d2:39:22:a7:fd:78:93:2e:46:dd:46:c7:32:60:e6:
9e:f9:3d:aa:90:8b:96:ae:21:a8:5f:14:e5:42:cd:
91:c9:4a:ae:0f:d2:a9:9c:68:c4:fd:34:dd:ee:80:
8c:06:da:44:da:07:4a:ef:e8:3e:40:fa:6b:7f:95:
ac:f5:8b:81:29:c1:5e:19:3f:7f:01:ee:b7:64:9f:
bd:7a:ec:34:ee:4c:c3:9b:4e:10:5e:af:29:9f:04:
14:dc:e3:78:49:dd:77:62:52:20:4b:83:1b:6b:33:
10:ba:01:a2:40:ea:69:c3:43:7f:58:e3:74:e2:3c:
96:e6:5b:0f:90:68:3d:9d:c6:19:87:6c:ef:a0:83:
bb:d5:d9:9f:45:e1:a2:31:a8:59:b5:5b:2a:12:3a:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:37:8D:95:C5:81:B9:D1:1D:48:B8:EC:84:A2:87:AA:61:59:F6:5B
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/ZjeNlcWBudEdSLjshKKHqmFZ9ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.228.0/22
77.75.197.0-77.75.198.255
Signature Algorithm: sha256WithRSAEncryption
64:b9:d0:ba:1e:ab:05:5e:ac:d9:8d:1e:27:7e:74:dd:82:d2:
3e:d5:46:43:6a:6d:f4:ef:4d:a3:44:23:67:44:72:42:6a:dc:
d6:a4:b1:55:63:f3:ba:19:67:9b:aa:2f:d5:88:7e:6f:e4:fc:
7c:27:e6:30:19:57:94:3a:6c:dd:fb:e1:4f:22:b9:91:7b:b7:
9d:53:af:04:05:a6:99:8c:e0:13:86:11:2b:85:3b:85:23:e2:
87:b2:d9:ba:09:a0:9f:9d:11:ad:14:1a:79:00:bf:24:5d:01:
ca:63:f9:ca:e4:bf:d4:19:9b:03:f4:b6:63:c9:80:8d:6c:cb:
58:fd:5f:81:bd:9a:32:70:96:1d:88:f2:9c:c4:77:8c:bd:64:
2d:9c:09:8d:d4:51:fd:d6:29:22:5f:6d:4c:cb:2e:00:cb:89:
57:37:8b:99:17:a0:bf:85:ec:a6:82:82:8b:af:a5:ee:67:9b:
c2:94:00:4c:27:99:64:2b:8b:77:13:24:18:3c:fb:44:f7:e7:
54:60:f1:3c:8c:0a:ba:09:df:e3:88:b8:b7:f4:b6:7b:84:e3:
3c:89:a9:cd:bf:6b:e5:5d:71:cd:1f:0c:ed:84:99:e5:b8:d1:
11:2c:48:18:e3:cb:29:95:8c:b9:38:85:a3:69:58:32:cb:66:
d7:42:43:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org