Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/s5baSVBQ8SXZijfhoc6flfFL0e4.roa
File: s5baSVBQ8SXZijfhoc6flfFL0e4.roa (raw, json)
Hash identifier: Hz7jmYI1c27hODiIN+w43ZnzmVbhR4ofwK5rsVdXODw=
Subject key identifier: B3:96:DA:49:50:50:F1:25:D9:8A:37:E1:A1:CE:9F:95:F1:4B:D1:EE
Certificate issuer: /CN=878c83598fc7365aa909d6ae117bb1907d5192fd
Certificate serial: 01827380E4BDE0E415C9B4CE806476223BFB
Authority key identifier: 87:8C:83:59:8F:C7:36:5A:A9:09:D6:AE:11:7B:B1:90:7D:51:92:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4yDWY_HNlqpCdauEXuxkH1Rkv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/s5baSVBQ8SXZijfhoc6flfFL0e4.roa
Signing time: Sat 06 Aug 2022 14:13:23 +0000
ROA not before: Sat 06 Aug 2022 14:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206995
IP address blocks: 37.140.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:73:80:e4:bd:e0:e4:15:c9:b4:ce:80:64:76:22:3b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878c83598fc7365aa909d6ae117bb1907d5192fd
Validity
Not Before: Aug 6 14:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b396da495050f125d98a37e1a1ce9f95f14bd1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:c3:84:bc:db:65:f5:29:b0:60:99:6e:c3:
1f:df:d4:b3:2b:22:e7:fa:a6:9c:0e:d9:78:2e:63:
29:a8:6c:1d:e6:51:20:3e:a5:2f:51:b9:48:dd:96:
8e:3e:ef:3d:9e:17:66:94:b7:a2:92:06:20:63:11:
6f:73:6d:14:88:36:08:1e:a3:e7:a5:af:68:ec:4f:
93:ff:30:36:f8:35:c8:3e:0c:d6:b5:b9:22:88:f4:
57:04:93:2a:9b:67:73:5d:b2:e9:8d:d3:d8:da:2a:
1a:1b:8f:86:d4:be:a3:92:d4:09:ea:ba:f3:03:32:
dc:7d:4f:17:c2:4d:65:85:d4:a5:f3:32:dd:6b:03:
a0:02:6e:f9:53:d9:73:95:b5:4d:b3:1b:9d:aa:2b:
67:f6:05:01:e9:cf:9e:1e:88:6b:02:f7:a3:79:73:
1c:31:9b:65:e6:fd:66:d2:67:d3:19:68:90:fe:1f:
b9:b7:57:32:dd:d4:01:89:b4:8e:01:29:b5:2a:d2:
32:ab:0c:2f:f6:fe:8e:2c:74:83:27:ab:c6:10:d3:
d2:0e:04:b4:14:62:df:33:ed:57:d1:e9:2c:8f:f5:
44:f9:6b:4d:80:51:c8:4b:2f:cf:27:e2:50:5b:40:
ce:d7:a9:9b:cd:d7:a9:fc:3a:3d:c2:dd:4f:ad:e6:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:96:DA:49:50:50:F1:25:D9:8A:37:E1:A1:CE:9F:95:F1:4B:D1:EE
X509v3 Authority Key Identifier:
keyid:87:8C:83:59:8F:C7:36:5A:A9:09:D6:AE:11:7B:B1:90:7D:51:92:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4yDWY_HNlqpCdauEXuxkH1Rkv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/s5baSVBQ8SXZijfhoc6flfFL0e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/523290-bd41-42f4-ab50-f9910bb56fcd/1/h4yDWY_HNlqpCdauEXuxkH1Rkv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.242.0/24
Signature Algorithm: sha256WithRSAEncryption
39:69:53:89:8e:45:55:95:80:5b:76:1e:b2:31:51:00:c2:28:
13:57:0c:28:a4:19:57:5e:7a:05:b9:86:60:ca:a0:54:15:f8:
31:6f:5e:36:2c:56:cb:4c:ce:d0:d4:d3:ae:54:ad:22:a1:93:
26:de:0a:68:4c:bd:58:fc:4c:44:d7:c5:c2:23:6b:52:d1:28:
3c:84:f5:7d:20:fd:c6:c6:b1:10:64:92:52:a9:94:d6:32:03:
d1:55:73:eb:8d:98:97:21:62:14:a7:95:66:43:01:98:58:9f:
2d:10:2d:c6:0c:2d:3c:03:ec:ec:7c:4c:7d:02:f4:af:b2:65:
c0:32:31:84:78:e3:c9:00:aa:bb:ca:37:3a:0b:52:bb:b6:cb:
18:55:f5:d1:45:03:44:79:fb:f4:7c:9c:74:77:ae:09:8e:ef:
93:61:22:89:b9:ef:86:f1:e1:9d:88:46:81:f6:b9:4b:80:87:
fd:7b:85:99:42:47:4f:1c:cd:68:a5:30:3b:77:3d:aa:0d:1f:
5a:6b:9b:59:81:ea:9a:5d:ce:2a:a9:03:59:4f:8d:57:ff:2a:
bf:cf:29:f5:fa:67:5e:2a:35:9e:16:0d:93:77:46:29:7c:0d:
28:0d:78:f3:ac:81:a6:fa:97:90:ff:8a:01:f2:18:cb:63:2e:
98:f4:37:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:48 2024 by rpki-client on console-fra.rpki-client.org