Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/Fxh6inITr_bM4YlZvcTsoqWdkZc.roa
File: Fxh6inITr_bM4YlZvcTsoqWdkZc.roa (raw, json)
Hash identifier: T72QORR160TgIYNDOetdVvuIBSe5VvaYSsscg8z7P4k=
Subject key identifier: 17:18:7A:8A:72:13:AF:F6:CC:E1:89:59:BD:C4:EC:A2:A5:9D:91:97
Certificate issuer: /CN=878c83598fc7365aa909d6ae117bb1907d5192fd
Certificate serial: 533C8C
Authority key identifier: 87:8C:83:59:8F:C7:36:5A:A9:09:D6:AE:11:7B:B1:90:7D:51:92:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4yDWY_HNlqpCdauEXuxkH1Rkv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/Fxh6inITr_bM4YlZvcTsoqWdkZc.roa
Signing time: Sat 01 Jan 2022 01:51:38 +0000
ROA not before: Sat 01 Jan 2022 01:51:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 37.140.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5454988 (0x533c8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878c83598fc7365aa909d6ae117bb1907d5192fd
Validity
Not Before: Jan 1 01:51:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17187a8a7213aff6cce18959bdc4eca2a59d9197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:71:7a:22:ac:fd:81:2a:19:ca:6d:dc:93:af:
30:8e:cc:17:a2:7b:2e:1c:a4:ec:52:dc:c5:5c:20:
ff:8f:ef:2f:ec:10:14:b6:46:da:94:f8:1a:08:65:
87:a6:84:d3:13:1e:3f:c2:e0:f3:c9:fb:de:58:93:
36:5d:22:f3:57:7f:12:6e:45:9e:a3:00:af:86:fd:
66:84:e2:cc:f2:7e:f9:02:ae:7c:f0:ab:e5:48:e9:
72:be:6e:c1:7c:bb:db:a8:1a:e8:71:63:e3:c6:06:
45:4b:66:5e:65:dc:fc:9b:4c:79:c3:4c:31:ad:77:
88:1a:1a:c1:9b:0d:26:5e:e1:9c:f8:cb:b9:c2:f9:
50:dd:6e:0d:87:64:49:da:e6:f4:5f:bb:17:b2:f3:
24:47:04:65:fe:c5:1d:ed:16:22:f9:cb:34:7e:b2:
ee:a8:83:77:34:9e:f9:85:e7:60:f0:af:1f:99:ad:
fa:55:1f:dd:82:11:52:2c:2b:2f:3f:aa:32:13:1d:
11:1b:0f:81:4c:74:d5:63:85:98:79:be:f2:a3:ce:
71:d8:9b:6c:e2:ca:6a:7b:82:b9:39:a6:74:84:43:
91:0a:b9:fb:68:2c:fc:75:d4:5c:1f:7a:ee:5c:54:
cf:0e:11:3a:c4:2c:10:54:27:97:89:ad:a9:99:5a:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:18:7A:8A:72:13:AF:F6:CC:E1:89:59:BD:C4:EC:A2:A5:9D:91:97
X509v3 Authority Key Identifier:
keyid:87:8C:83:59:8F:C7:36:5A:A9:09:D6:AE:11:7B:B1:90:7D:51:92:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4yDWY_HNlqpCdauEXuxkH1Rkv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/Fxh6inITr_bM4YlZvcTsoqWdkZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/h4yDWY_HNlqpCdauEXuxkH1Rkv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.242.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:24:20:e3:ec:3b:9e:f9:66:ce:b1:e7:68:c9:bd:41:7e:7a:
2a:1e:58:f4:8b:eb:bd:77:eb:7a:e8:2a:b2:13:fe:5b:a4:b6:
20:83:40:23:b6:32:f5:50:46:cf:64:46:f8:47:57:f5:5c:e4:
6b:44:90:ab:24:25:52:ba:ef:70:a7:49:0b:b0:7a:be:ca:4b:
94:c4:b8:50:4c:e7:5e:c0:90:b9:d5:3f:79:40:12:75:53:a6:
a6:27:6a:f9:02:c6:e8:50:f0:d2:89:a2:52:f1:d9:19:c5:85:
1f:d2:25:e9:51:16:ba:da:5a:cf:d2:bc:b7:1f:b7:2f:75:bc:
15:bd:8a:8e:65:96:7e:39:3c:ea:f7:71:7a:b7:fd:61:84:bd:
8b:51:76:ba:d3:53:94:5c:b1:b2:4c:f8:e8:b1:8a:84:25:97:
67:53:ff:48:e5:55:4f:48:64:0f:27:08:2c:49:32:c1:1b:29:
8b:ea:fe:f4:d7:ce:0b:fa:5a:35:ff:15:70:8a:ce:dd:51:9e:
50:e5:e7:7c:8e:96:ff:41:c5:4a:2f:71:cd:e3:b0:8d:a3:63:
4a:44:67:c3:62:93:c2:22:e3:6f:c8:94:75:3c:49:0e:23:42:
77:fb:ed:b4:5f:b9:45:44:88:ed:49:88:1a:f1:d8:90:60:7b:
76:24:4b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:39 2023 by rpki-client on console-ams.rpki-client.org