Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/YWRzulJ7UREVN-JcKlsaMJF_B9A.roa
File: YWRzulJ7UREVN-JcKlsaMJF_B9A.roa (raw, json)
Hash identifier: kzjoewy9OY4By8lCOT3JfpUWHYSCRB3907ne86P9I8c=
Subject key identifier: 61:64:73:BA:52:7B:51:11:15:37:E2:5C:2A:5B:1A:30:91:7F:07:D0
Certificate issuer: /CN=878c83598fc7365aa909d6ae117bb1907d5192fd
Certificate serial: 01826419B7E024E0903E692A45D6A23721A1
Authority key identifier: 87:8C:83:59:8F:C7:36:5A:A9:09:D6:AE:11:7B:B1:90:7D:51:92:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4yDWY_HNlqpCdauEXuxkH1Rkv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/YWRzulJ7UREVN-JcKlsaMJF_B9A.roa
Signing time: Wed 03 Aug 2022 14:26:23 +0000
ROA not before: Wed 03 Aug 2022 14:26:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45547
IP address blocks: 37.140.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:19:b7:e0:24:e0:90:3e:69:2a:45:d6:a2:37:21:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878c83598fc7365aa909d6ae117bb1907d5192fd
Validity
Not Before: Aug 3 14:26:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=616473ba527b51111537e25c2a5b1a30917f07d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:79:5a:9a:da:db:f8:fd:a4:94:1a:af:b9:ad:
1e:cf:c8:2a:a7:90:9a:1a:4d:88:cf:bc:0b:3b:8e:
98:da:ea:b9:4f:31:c6:89:34:5c:b7:2a:e3:d8:f8:
76:d6:96:1c:23:3d:b4:17:12:82:c1:30:5e:d7:aa:
db:bb:d0:c9:0d:09:11:8f:f0:5e:df:46:0d:ca:93:
a3:50:79:7a:40:9d:d9:ed:ba:99:ef:81:ab:e2:86:
82:4d:fb:be:29:40:a0:7c:f4:46:c3:03:b9:af:bc:
b7:2d:14:f9:4a:c5:83:73:6a:9f:76:44:bc:8b:09:
46:35:ec:6e:fd:74:0e:42:86:01:8b:94:fe:f5:c4:
30:5c:e5:b7:59:02:b7:1a:b6:d1:b9:2a:f7:c7:73:
9e:e8:cf:73:b8:72:41:ad:68:84:c3:c1:29:58:db:
70:77:ed:ae:ca:e5:4a:b7:6a:12:ec:3f:33:68:d5:
c8:ed:27:36:a3:b6:28:32:23:1c:3d:07:e5:7b:e8:
3c:09:21:62:df:44:0b:04:16:3c:7d:4c:0f:d6:c2:
4d:4f:12:10:c2:f5:36:f3:16:cf:8b:56:d2:f9:3a:
e1:fe:37:2e:7e:1a:53:96:45:5f:6b:56:b9:0f:fc:
ff:26:f6:ac:ea:68:41:de:9d:e0:c5:d1:7b:f2:e0:
11:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:64:73:BA:52:7B:51:11:15:37:E2:5C:2A:5B:1A:30:91:7F:07:D0
X509v3 Authority Key Identifier:
keyid:87:8C:83:59:8F:C7:36:5A:A9:09:D6:AE:11:7B:B1:90:7D:51:92:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4yDWY_HNlqpCdauEXuxkH1Rkv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/YWRzulJ7UREVN-JcKlsaMJF_B9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/h4yDWY_HNlqpCdauEXuxkH1Rkv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.242.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:1c:19:c6:e0:c7:93:8e:36:85:a9:14:85:fd:65:03:7d:4e:
ab:7e:11:82:2d:05:49:0f:19:bd:d3:a7:35:aa:9b:c5:7b:30:
cb:0f:c4:42:5f:e7:7e:01:c8:6e:31:74:e8:2c:3a:6f:ca:4b:
d3:f6:90:8d:8c:16:18:70:1f:70:fb:ba:cc:e4:5f:53:61:53:
7d:ca:e9:d0:bd:9e:03:33:1b:c7:7f:c0:86:87:da:73:63:b4:
71:06:3a:03:c3:91:79:9c:b2:6c:ac:3e:1f:f8:ea:22:b7:cf:
2b:c4:df:6f:82:18:f8:9f:7f:03:80:c5:d3:8e:6a:4a:bf:89:
85:7f:dc:c4:40:52:9f:01:e4:1b:ed:33:ed:b9:ef:d4:57:ef:
29:7e:4f:93:36:06:36:2b:02:9e:06:71:d7:a0:b9:09:16:58:
de:a3:a0:9b:4a:e1:7c:0f:66:57:1d:42:27:4d:3a:3c:8a:27:
8a:9b:f3:82:2a:ba:eb:bb:59:79:84:8c:98:2a:c5:e3:d9:08:
85:20:18:90:39:c6:37:3a:e3:8b:ce:aa:20:89:f0:48:60:f0:
9c:2a:3d:10:e0:51:81:33:ce:8f:03:e9:f0:52:37:28:5d:5d:
18:2d:9d:b8:86:cd:4c:c6:d1:8e:11:1c:4a:8f:60:6b:f5:b7:
c2:b8:cb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:47 2024 by rpki-client on console-fra.rpki-client.org