Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/5K_sdSN6fF3ehBb9lqRSCCahtlk.roa
File: 5K_sdSN6fF3ehBb9lqRSCCahtlk.roa (raw, json)
Hash identifier: QfeuqxSe0xZ/doSHSqR2/5qOkV1jlqxA1yLcxS1oxlo=
Subject key identifier: E4:AF:EC:75:23:7A:7C:5D:DE:84:16:FD:96:A4:52:08:26:A1:B6:59
Certificate issuer: /CN=878c83598fc7365aa909d6ae117bb1907d5192fd
Certificate serial: 01856CAF3BCCC7E47D07AB31E4C322EBAB57
Authority key identifier: 87:8C:83:59:8F:C7:36:5A:A9:09:D6:AE:11:7B:B1:90:7D:51:92:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4yDWY_HNlqpCdauEXuxkH1Rkv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/5K_sdSN6fF3ehBb9lqRSCCahtlk.roa
Signing time: Sun 01 Jan 2023 09:35:01 +0000
ROA not before: Sun 01 Jan 2023 09:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211114
IP address blocks: 37.140.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:3b:cc:c7:e4:7d:07:ab:31:e4:c3:22:eb:ab:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878c83598fc7365aa909d6ae117bb1907d5192fd
Validity
Not Before: Jan 1 09:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4afec75237a7c5dde8416fd96a4520826a1b659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:d7:db:e5:63:b3:1d:55:f8:e2:d5:cb:18:
70:5e:84:1a:b6:68:73:95:6d:d4:2c:49:e8:14:14:
23:3e:ff:99:66:75:e2:36:0f:1f:9d:7c:d4:8d:ef:
60:52:08:b4:70:13:36:84:00:9c:9e:5b:29:05:fa:
8b:ad:23:52:dd:a1:0e:da:2c:f2:2c:06:85:9f:58:
0d:6c:fd:07:93:a7:14:e6:1f:10:ee:bb:53:7b:4e:
12:92:7b:37:ce:14:29:d6:4c:10:da:39:68:5d:79:
04:63:e2:18:5d:c5:89:ae:df:21:c2:93:1f:07:79:
d4:88:06:65:49:95:1e:c0:8b:a1:43:75:60:fe:46:
a3:6a:f8:1b:4f:69:00:bd:be:d4:b3:b5:54:ad:f0:
f9:f3:ab:72:01:8b:d5:33:55:f7:a4:d5:82:01:87:
95:7a:d0:71:58:fd:9d:fa:8f:8d:48:e9:79:93:0c:
4c:36:26:62:c6:8f:65:90:72:3d:7d:52:93:51:81:
32:d0:58:f3:67:d3:70:33:78:9f:0c:f4:4a:38:ba:
82:04:bc:b6:43:9b:5f:ba:2f:12:df:e8:3f:16:fc:
26:74:72:0e:19:76:76:57:34:a7:19:95:f0:66:81:
72:31:95:c5:dd:16:c9:50:03:2a:21:41:2f:13:bd:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AF:EC:75:23:7A:7C:5D:DE:84:16:FD:96:A4:52:08:26:A1:B6:59
X509v3 Authority Key Identifier:
keyid:87:8C:83:59:8F:C7:36:5A:A9:09:D6:AE:11:7B:B1:90:7D:51:92:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4yDWY_HNlqpCdauEXuxkH1Rkv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/5K_sdSN6fF3ehBb9lqRSCCahtlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/h4yDWY_HNlqpCdauEXuxkH1Rkv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.242.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ff:19:a9:8c:97:71:99:3b:08:27:d3:48:bf:7f:50:db:ab:
e6:b4:e1:93:6f:39:22:15:d2:fe:44:8c:2d:e7:d6:fe:24:f0:
a1:64:65:b1:14:a8:34:a0:8c:0e:ff:72:7d:55:d4:2d:b8:0e:
95:3a:48:68:a7:6b:fb:a0:1f:8f:63:db:8a:19:0e:c1:ba:3a:
43:62:9a:ef:06:67:82:fa:e9:2e:d1:9b:ce:b2:b3:e2:2c:f9:
35:86:2e:7f:cc:cf:c0:67:4d:0e:ce:7b:4b:8a:1a:36:3f:9c:
64:32:78:ad:dd:ca:07:55:49:82:5c:32:d2:88:55:78:66:1d:
68:2f:05:ce:bb:21:94:2c:63:20:47:a9:d1:b5:f6:bf:00:ec:
e2:65:41:b4:ee:41:de:f8:c4:7b:84:78:dc:20:67:24:a8:55:
20:36:84:94:0c:f3:93:90:5c:c1:01:ae:a4:40:8b:66:6f:dd:
08:c2:73:55:30:f0:c0:f6:4d:df:19:8b:db:f5:09:3b:8a:51:
2b:94:57:30:fe:eb:cb:c4:a4:28:0d:39:3c:ea:e5:0e:49:2d:
ce:9d:7f:01:49:c1:02:4b:80:3d:5e:64:a1:d9:e9:1d:55:d8:
02:4e:5a:5f:32:01:1b:38:5e:7c:4d:c7:e7:0d:ac:28:e6:f4:
78:76:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:47 2024 by rpki-client on console-fra.rpki-client.org