Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/4IFB1GDR6Jq5tchZkNUvBd6IdIY.roa
File: 4IFB1GDR6Jq5tchZkNUvBd6IdIY.roa (raw, json)
Hash identifier: 5WKgYVQCtIy+OQZMwdelqPn0b4Vk+buGbKuTTvThPMQ=
Subject key identifier: E0:81:41:D4:60:D1:E8:9A:B9:B5:C8:59:90:D5:2F:05:DE:88:74:86
Certificate issuer: /CN=7669943165d59f25265fb97cb77a6c7cbf8b5077
Certificate serial: 018AC612859682A3F07E539E2257F82FA0E8
Authority key identifier: 76:69:94:31:65:D5:9F:25:26:5F:B9:7C:B7:7A:6C:7C:BF:8B:50:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmmUMWXVnyUmX7l8t3psfL-LUHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/4IFB1GDR6Jq5tchZkNUvBd6IdIY.roa
Signing time: Sun 24 Sep 2023 07:23:37 +0000
ROA not before: Sun 24 Sep 2023 07:23:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.72.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c6:12:85:96:82:a3:f0:7e:53:9e:22:57:f8:2f:a0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7669943165d59f25265fb97cb77a6c7cbf8b5077
Validity
Not Before: Sep 24 07:23:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e08141d460d1e89ab9b5c85990d52f05de887486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:d7:f8:28:b8:6b:94:e0:be:7d:b4:31:11:
38:de:a0:d8:5a:64:a5:5b:d3:9e:15:8b:c2:78:f2:
9b:97:4b:9d:e0:59:0b:8d:d3:91:0c:72:17:11:27:
3c:b5:31:e6:86:6b:a2:f5:3a:bd:21:51:44:eb:b8:
68:61:5f:b1:15:75:e5:7c:9a:2f:b7:77:02:9d:23:
32:be:60:d8:e0:4f:02:31:04:27:2e:cc:08:85:44:
3a:2f:f0:b2:6b:85:bf:fc:10:b4:b8:62:de:73:91:
d5:1c:e4:f8:ec:fb:61:e6:f6:22:9e:0e:39:09:a1:
62:70:68:17:cc:3a:ff:bc:12:42:2b:5a:ea:72:52:
66:7d:c1:d1:ef:72:00:c6:a2:12:9f:bc:89:18:10:
f2:83:1f:10:4e:43:5a:fc:77:73:92:06:0f:62:05:
8c:d4:d6:84:60:ea:a2:68:60:8b:9b:67:5a:5f:12:
a6:7f:77:41:2c:da:24:1e:7a:c2:79:d0:f4:03:91:
7a:f0:d8:e7:09:a9:e9:e9:7e:e4:67:76:b8:ee:74:
cc:82:39:0c:26:18:7b:a9:61:e2:0b:48:19:f3:dc:
d6:e2:1b:51:99:35:06:9d:bf:55:d4:e5:30:56:59:
22:00:7c:da:d5:85:34:8f:3e:36:30:81:0f:08:96:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:41:D4:60:D1:E8:9A:B9:B5:C8:59:90:D5:2F:05:DE:88:74:86
X509v3 Authority Key Identifier:
keyid:76:69:94:31:65:D5:9F:25:26:5F:B9:7C:B7:7A:6C:7C:BF:8B:50:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmmUMWXVnyUmX7l8t3psfL-LUHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/4IFB1GDR6Jq5tchZkNUvBd6IdIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/dmmUMWXVnyUmX7l8t3psfL-LUHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.135.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e4:ba:ff:30:f2:ab:68:a7:c7:91:64:91:05:9e:a5:70:42:
8c:bc:3e:a1:50:39:d0:25:7a:24:16:e1:56:c9:a6:73:03:b1:
77:50:43:9e:0d:e0:ca:ea:1b:79:60:9e:d7:a3:3b:e7:ab:ee:
2d:47:07:44:49:11:fb:c3:d7:f1:79:1e:31:b3:5a:aa:73:3b:
ae:50:3e:b9:2c:41:c4:22:08:ce:6a:0b:bc:92:bf:ca:33:79:
d6:21:cf:c5:d2:00:d3:dd:bb:b0:b2:ff:1b:79:9a:e4:95:77:
98:6e:cf:fa:02:6a:17:e0:96:ac:e1:70:a1:9b:a0:8f:0a:32:
2a:31:e6:82:90:1b:a1:49:be:ac:fc:aa:b1:46:aa:44:4a:ae:
95:d9:59:ac:74:87:1b:1d:7d:d0:e8:23:2c:35:13:f3:fc:62:
8a:06:80:1b:06:9b:f2:90:de:9d:27:e4:c7:67:92:dc:b6:1b:
df:d2:02:64:9e:5c:f3:ea:85:8e:31:c2:18:3f:58:fb:a6:6e:
8c:05:25:0b:c8:1c:c9:10:f8:18:3a:e8:d7:50:84:88:81:10:
69:2e:5d:c9:c3:d8:95:01:bf:09:ae:16:d9:0b:95:74:b8:99:
aa:34:11:4c:4e:59:50:3c:18:55:ff:61:34:aa:19:15:9a:b2:
65:83:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 06:34:59 2023 by rpki-client on console-fra.rpki-client.org