Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/92c696-3889-49b4-9e97-c219f41a5cc2/1/PU4DIYdQs8q9Lyl2KalUEl2QE4w.roa
File: PU4DIYdQs8q9Lyl2KalUEl2QE4w.roa (raw, json)
Hash identifier: 2ZdL1Y+rRqtOlKgSxYemN0z6ao5jd/vPeWlbeo7/H+8=
Subject key identifier: 3D:4E:03:21:87:50:B3:CA:BD:2F:29:76:29:A9:54:12:5D:90:13:8C
Certificate issuer: /CN=179d6d74584f8b75803107e5c42ff9ec6915e866
Certificate serial: 01856F547011E21011D176836DD6CC697D64
Authority key identifier: 17:9D:6D:74:58:4F:8B:75:80:31:07:E5:C4:2F:F9:EC:69:15:E8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F51tdFhPi3WAMQflxC_57GkV6GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/92c696-3889-49b4-9e97-c219f41a5cc2/1/PU4DIYdQs8q9Lyl2KalUEl2QE4w.roa
Signing time: Sun 01 Jan 2023 21:54:42 +0000
ROA not before: Sun 01 Jan 2023 21:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 37.72.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:70:11:e2:10:11:d1:76:83:6d:d6:cc:69:7d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179d6d74584f8b75803107e5c42ff9ec6915e866
Validity
Not Before: Jan 1 21:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d4e03218750b3cabd2f297629a954125d90138c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:a7:43:2b:56:7b:75:54:f1:a8:64:96:af:
f2:3e:b7:16:c3:f3:5f:57:5d:17:a0:e5:87:e7:a3:
01:0c:05:ce:23:01:19:72:8e:2e:29:d0:cd:29:dc:
5f:80:75:6c:c0:bc:37:cb:3c:05:33:b1:42:18:bd:
0a:0f:91:86:9b:44:d4:15:f4:7f:ab:66:9b:2b:83:
7f:ce:f9:18:85:60:38:3d:9b:ad:49:15:0d:5b:50:
49:44:82:45:bc:32:75:f4:c1:68:0a:8e:88:9e:93:
c9:41:3e:f2:66:e9:33:83:ec:81:c3:c5:8f:92:17:
af:b2:d1:57:cc:a6:0f:a8:38:6b:2f:5b:5f:a6:5f:
38:05:91:65:93:d3:58:3f:52:39:e9:f6:42:3e:94:
22:18:02:f5:78:b2:70:94:ba:7b:44:a2:e6:0b:51:
fa:6d:5a:3b:82:c7:9d:66:ea:34:9c:b1:6b:4b:16:
ad:53:20:ea:e3:d2:23:e9:03:05:49:91:d7:df:00:
17:c8:8a:bd:21:93:21:a9:cc:fe:60:33:90:9c:34:
30:49:9f:43:3e:e9:fe:ab:a0:b4:fb:c0:63:28:3d:
5b:17:8a:23:0a:1c:b2:ea:28:f8:7a:4c:81:ee:94:
90:94:a4:af:5c:1f:d7:8e:18:04:40:30:d6:c1:7e:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4E:03:21:87:50:B3:CA:BD:2F:29:76:29:A9:54:12:5D:90:13:8C
X509v3 Authority Key Identifier:
keyid:17:9D:6D:74:58:4F:8B:75:80:31:07:E5:C4:2F:F9:EC:69:15:E8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F51tdFhPi3WAMQflxC_57GkV6GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/92c696-3889-49b4-9e97-c219f41a5cc2/1/PU4DIYdQs8q9Lyl2KalUEl2QE4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/92c696-3889-49b4-9e97-c219f41a5cc2/1/F51tdFhPi3WAMQflxC_57GkV6GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.134.0/24
Signature Algorithm: sha256WithRSAEncryption
32:47:3f:b4:8e:56:fa:82:10:a8:c5:c1:85:78:16:7d:57:53:
9f:75:95:8b:08:e9:a4:8a:e8:ce:22:53:e0:98:87:7e:6f:2b:
6e:22:c9:f0:3d:c2:fe:43:3e:f3:4c:c8:48:17:a0:d5:89:7c:
f9:9a:45:f3:4a:87:08:19:82:08:7a:2e:67:fe:be:5e:f4:d0:
1e:fb:89:41:97:7d:be:40:dc:c9:35:dd:fb:be:db:29:13:c6:
fe:f1:6a:80:d3:54:cd:ff:bf:a3:79:0b:f7:cf:13:cc:ec:de:
c0:42:7c:b5:9d:b2:3c:49:6a:49:f1:85:20:d1:23:35:6f:b9:
a4:57:ec:29:64:21:76:fc:ef:4f:44:04:7e:0b:24:ba:a4:a5:
f2:f6:40:44:63:11:76:b6:73:12:13:0a:fc:97:88:81:f7:23:
5f:81:64:23:77:0a:92:3b:3b:65:33:5c:6e:1a:de:af:36:f1:
77:a7:8f:bf:44:fa:c0:06:a4:94:4f:ce:72:89:e4:de:d2:f7:
29:15:2c:1e:bb:f9:25:e9:60:3e:fb:66:8c:04:90:f2:e9:00:
d5:a4:87:2d:58:01:99:36:cb:cd:04:26:7a:d8:4a:95:b2:ec:
bf:80:48:c9:c5:e7:62:f5:41:0f:94:4f:be:86:d0:4d:59:78:
57:99:24:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:42 2024 by rpki-client on console-fra.rpki-client.org