Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/ppXlTXFT2lUj_Aczgxt1qznAEl0.roa
File: ppXlTXFT2lUj_Aczgxt1qznAEl0.roa (raw, json)
Hash identifier: eUb62K8vvN1olO/0jkJo263gHTnG2mMVWWUbjAEeEL0=
Subject key identifier: A6:95:E5:4D:71:53:DA:55:23:FC:07:33:83:1B:75:AB:39:C0:12:5D
Certificate issuer: /CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Certificate serial: 01867331ED04B67E1B5DE6AD03618F91DD02
Authority key identifier: 02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/ppXlTXFT2lUj_Aczgxt1qznAEl0.roa
Signing time: Tue 21 Feb 2023 08:58:17 +0000
ROA not before: Tue 21 Feb 2023 08:58:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 37.203.192.0/21 maxlen: 21
37.19.96.0/21 maxlen: 21
37.19.97.0/24 maxlen: 24
185.4.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:31:ed:04:b6:7e:1b:5d:e6:ad:03:61:8f:91:dd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Validity
Not Before: Feb 21 08:58:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a695e54d7153da5523fc0733831b75ab39c0125d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:77:14:2a:46:42:33:34:49:79:32:0c:bd:e6:
6f:34:a3:b6:ae:c3:f1:5a:24:29:7d:f2:70:d9:07:
d7:d5:78:6a:a8:fb:7a:41:4d:bb:f6:f7:43:2b:8f:
3c:52:1f:9a:be:78:80:10:0c:3f:0c:d8:88:13:5b:
9b:c5:ff:98:6f:89:3d:da:a6:e7:aa:9f:35:39:ae:
67:3e:c8:3f:b7:3d:4f:b3:59:dc:31:83:1c:d8:54:
89:50:f8:ca:00:84:a5:4c:f8:47:65:08:55:f4:67:
6a:ad:d9:7f:3b:e2:94:d2:7d:91:ad:2f:e4:92:7d:
de:7c:0d:d1:8d:51:42:da:a5:9f:2f:ff:91:dc:18:
bf:11:bc:5e:44:1c:01:b5:14:0a:4a:11:e9:92:39:
34:18:c9:aa:d9:7b:59:7b:5d:1c:1d:84:f2:8e:72:
1a:4d:af:6b:0d:95:82:96:ff:7a:4a:9c:8e:eb:35:
5f:26:6f:95:44:41:49:52:38:a4:63:a4:1a:ec:03:
63:51:11:58:ee:93:2c:63:24:58:64:11:bf:49:5a:
38:41:1e:33:66:7e:e8:a4:19:1b:22:73:52:b5:75:
10:f9:2a:c5:b2:b6:92:94:d9:e9:a9:d6:01:ee:39:
41:1f:ae:b9:81:3d:c4:c7:27:cc:8f:88:17:28:b9:
86:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:95:E5:4D:71:53:DA:55:23:FC:07:33:83:1B:75:AB:39:C0:12:5D
X509v3 Authority Key Identifier:
keyid:02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/ppXlTXFT2lUj_Aczgxt1qznAEl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.96.0/21
37.203.192.0/21
185.4.192.0/22
Signature Algorithm: sha256WithRSAEncryption
57:67:d5:b1:3c:aa:a5:a4:b7:3e:17:b6:56:58:fc:77:f3:9e:
6d:44:9f:b5:85:c0:bd:1b:75:9d:80:6c:5b:cc:d3:56:d2:33:
2c:c1:22:10:c5:60:1b:67:48:bc:3f:24:aa:3b:68:1f:59:55:
cc:1b:4d:b9:e5:b1:ad:24:8a:94:0b:db:6d:f8:e0:35:7e:49:
da:10:95:f7:d7:24:f1:0f:f4:b0:77:9d:40:dd:62:60:c1:b6:
85:8f:eb:c5:33:d7:50:67:84:e5:1e:76:b6:35:c4:6a:c8:e6:
af:20:1c:03:c3:2e:d3:51:45:e5:7a:45:e6:e2:0f:59:75:c8:
d5:c8:6e:17:5c:cb:21:d0:16:7b:b8:b1:65:34:48:c3:87:2b:
33:f0:3c:e4:f8:ee:6c:57:7c:51:f6:ac:8c:97:be:12:0b:1d:
3d:15:bb:c7:0a:6d:68:a3:c4:5b:49:ee:54:98:6b:a1:aa:b3:
34:b8:de:a2:29:68:ac:04:94:bf:31:f1:36:4e:2e:53:8c:23:
31:3f:f5:b0:c2:9d:4c:82:04:6b:8b:e4:d8:03:de:d8:a1:50:
04:ae:da:4c:2f:8e:60:67:52:ce:ad:16:53:21:87:39:ba:8c:
88:f0:f9:0d:4d:8a:20:da:10:43:c2:35:ce:f2:92:2b:31:5a:
47:2f:9e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:51 2024 by rpki-client on console-ams.rpki-client.org