Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/aC1QO05_hACeNyfDdVlz39paaws.roa
File: aC1QO05_hACeNyfDdVlz39paaws.roa (raw, json)
Hash identifier: EK0pIgS4U4nCWDqvGXT363oh3mh7a0e4J4P8dGgdtF0=
Subject key identifier: 68:2D:50:3B:4E:7F:84:00:9E:37:27:C3:75:59:73:DF:DA:5A:6B:0B
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 0189638D9C4EFE7EE385DE83BF970DC26986
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/aC1QO05_hACeNyfDdVlz39paaws.roa
Signing time: Mon 17 Jul 2023 11:12:52 +0000
ROA not before: Mon 17 Jul 2023 11:12:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 37.1.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:8d:9c:4e:fe:7e:e3:85:de:83:bf:97:0d:c2:69:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jul 17 11:12:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=682d503b4e7f84009e3727c3755973dfda5a6b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:6e:b2:66:24:51:63:f2:19:9d:ee:00:b2:
27:b5:cd:b2:93:3a:1c:71:3b:24:67:22:7b:0e:ba:
f6:86:e8:f2:51:5b:46:2a:ef:c0:3c:55:db:7f:0f:
03:e4:3c:dd:51:35:81:ea:fc:be:8b:56:11:7e:08:
d6:bd:c8:67:75:22:53:1a:32:83:17:a6:21:64:25:
e0:82:2b:e9:8d:57:81:dc:74:93:74:e9:d4:b6:6d:
2c:90:bc:57:21:cf:7d:03:1c:6c:b3:75:f3:6c:8e:
11:3d:d8:91:6b:8f:cb:c9:8c:57:00:e0:a6:18:05:
72:5d:54:e3:6f:01:23:0b:c3:55:de:76:fb:5a:d6:
d6:14:93:c5:1f:20:88:f1:9c:b2:9a:d1:e4:c3:ad:
d9:87:91:a9:80:fb:ef:19:08:ee:4c:70:ee:88:84:
0a:bb:0d:4a:ec:8a:75:52:fa:50:6d:42:e4:8a:c9:
22:ba:5e:06:6f:70:b5:8d:35:03:20:4f:e8:38:1b:
cf:db:70:59:46:bd:70:b2:81:88:8e:0d:da:29:4f:
cd:66:0a:0a:ae:be:96:ee:37:84:74:e9:6c:0a:17:
ba:c8:f0:7a:97:00:50:ef:94:d5:e9:61:a9:f8:89:
7a:13:d7:15:99:3d:94:49:75:d5:16:2e:3a:7b:39:
35:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2D:50:3B:4E:7F:84:00:9E:37:27:C3:75:59:73:DF:DA:5A:6B:0B
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/aC1QO05_hACeNyfDdVlz39paaws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.224.0/24
Signature Algorithm: sha256WithRSAEncryption
85:67:14:ef:5f:6d:3a:2f:e6:64:fa:ff:77:de:95:e7:2a:7f:
02:bf:79:5f:9d:6a:61:81:ce:c8:b3:e3:1a:b2:54:f6:2d:5c:
f4:86:75:34:c2:34:8f:bb:31:45:0b:1b:3a:42:a4:29:64:5f:
8f:c5:c8:a4:f9:c6:a2:04:61:b4:d5:ef:0b:10:d2:c4:19:6f:
66:fa:da:df:b2:97:4f:55:41:c6:3f:3e:83:43:de:51:88:16:
31:de:c1:5a:fc:9a:05:59:f0:d1:fc:2e:db:cc:f7:e1:3a:8b:
f4:95:8f:7f:be:86:13:59:ae:7d:71:8c:e5:6d:a8:b0:d7:7e:
dc:ac:fd:e0:ce:e5:ef:ea:c4:0b:08:b8:a8:74:ac:73:b8:a2:
a0:85:aa:21:e4:4d:31:ab:ab:60:f8:54:14:ae:c9:6b:59:ff:
7d:98:29:53:16:44:99:82:a6:2a:10:f3:15:29:38:9f:8f:30:
ce:39:f8:7b:ce:d1:3b:ff:f1:5a:b3:73:8f:58:96:9d:5f:a9:
b2:ed:af:ff:55:09:c1:7d:16:65:6c:2d:e7:34:cb:6f:df:51:
d0:19:91:97:9a:31:75:d2:99:d3:1e:9c:1e:cb:c1:cf:24:fc:
88:ec:8a:7f:72:27:74:8d:31:93:8e:31:9c:33:c3:f3:f0:a4:
6f:b9:b0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org