Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/EUc4YFLM0F-cD71edEEhp0VUgG4.roa
File: EUc4YFLM0F-cD71edEEhp0VUgG4.roa (raw, json)
Hash identifier: qE0+2vY/3wtRI1n0fytWvhgAfpKR/S3jSs83PPWxlvs=
Subject key identifier: 11:47:38:60:52:CC:D0:5F:9C:0F:BD:5E:74:41:21:A7:45:54:80:6E
Certificate issuer: /CN=878c83598fc7365aa909d6ae117bb1907d5192fd
Certificate serial: 01856CAF39D016E5D48BFC480BDE4182941F
Authority key identifier: 87:8C:83:59:8F:C7:36:5A:A9:09:D6:AE:11:7B:B1:90:7D:51:92:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4yDWY_HNlqpCdauEXuxkH1Rkv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/EUc4YFLM0F-cD71edEEhp0VUgG4.roa
Signing time: Sun 01 Jan 2023 09:35:00 +0000
ROA not before: Sun 01 Jan 2023 09:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45547
IP address blocks: 37.140.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:39:d0:16:e5:d4:8b:fc:48:0b:de:41:82:94:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878c83598fc7365aa909d6ae117bb1907d5192fd
Validity
Not Before: Jan 1 09:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1147386052ccd05f9c0fbd5e744121a74554806e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:bb:93:34:91:23:00:6b:be:f1:2a:f5:8a:
36:53:a8:81:09:6b:23:97:fe:11:0d:6f:28:66:7d:
83:67:cd:26:6a:bf:e3:20:2a:57:8d:73:38:18:c0:
c8:e4:5a:78:3b:cc:b9:e5:3d:06:62:cb:0b:90:27:
86:11:ad:02:69:3c:fd:e6:21:b2:57:d9:e9:17:25:
78:2d:a5:9e:9c:23:c0:12:b3:71:a6:d9:40:98:37:
f2:4e:ed:23:d3:27:31:55:38:1b:cc:a6:c0:65:45:
cd:41:f4:9b:e4:fd:4f:75:4f:1f:e8:a0:ce:6a:17:
1d:09:00:5b:78:2e:bd:5e:d4:ea:69:24:a5:76:7f:
f7:9c:d1:a1:0c:4a:41:2a:16:c5:30:ce:b5:ea:b3:
b9:b4:8b:ce:6e:46:d8:99:a4:bf:bf:fe:87:e4:07:
85:8b:db:52:41:a4:29:87:81:8c:16:f0:de:47:f7:
61:70:c3:4d:e3:fa:93:d7:c5:0e:4a:13:bd:3b:fd:
0d:59:b1:68:cc:74:20:20:40:89:22:fc:7f:e5:16:
80:40:a0:c7:a8:29:8d:97:f2:f3:96:2a:f4:99:ae:
62:c3:82:ac:4e:25:1c:cb:66:d3:e0:41:b1:fe:e6:
78:12:8d:92:c9:15:64:db:8d:ee:fe:fd:dd:17:e2:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:47:38:60:52:CC:D0:5F:9C:0F:BD:5E:74:41:21:A7:45:54:80:6E
X509v3 Authority Key Identifier:
keyid:87:8C:83:59:8F:C7:36:5A:A9:09:D6:AE:11:7B:B1:90:7D:51:92:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4yDWY_HNlqpCdauEXuxkH1Rkv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/EUc4YFLM0F-cD71edEEhp0VUgG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/h4yDWY_HNlqpCdauEXuxkH1Rkv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.242.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a9:1a:ed:39:99:df:a9:64:b8:f7:c2:2f:52:e6:7b:46:3a:
40:ed:8a:20:3f:9e:e6:7c:68:2f:4a:64:b3:52:4b:a3:fe:0f:
1c:e4:38:9a:d5:d5:0f:a5:91:56:f0:48:16:30:7a:77:37:ce:
79:aa:e8:6e:c1:d3:a8:f4:e3:c1:2e:00:bd:47:72:1c:7d:67:
81:bd:af:dd:95:c2:73:ac:36:a1:9b:62:17:21:d2:be:24:dc:
62:01:68:b9:93:e9:c7:65:5c:38:38:81:81:a4:44:30:3f:48:
09:51:2b:0a:29:05:68:1f:f6:8e:0a:1f:2b:44:53:48:ee:2a:
30:54:96:82:30:d2:62:de:31:d0:32:6e:02:1b:f0:5e:94:9b:
ca:bb:01:56:20:ce:48:99:08:8b:22:6a:09:1c:f8:08:ca:88:
25:1f:0b:a0:82:13:cd:be:21:1b:1f:95:f3:97:b2:4e:c3:01:
c8:c5:29:03:17:65:c6:08:93:f1:c4:90:dd:20:e0:6b:29:59:
29:f2:b7:b6:84:48:c9:b2:06:7a:c3:fb:73:63:ad:71:f7:9e:
10:14:54:20:05:19:8c:bc:41:d3:cf:01:20:7f:7f:16:20:2b:
26:0a:ce:46:1e:4e:5a:30:6c:82:0f:15:97:c7:63:0c:32:70:
73:4f:a7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:47 2024 by rpki-client on console-fra.rpki-client.org