Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/KV75AqMzmpzWkiEhF15aTT6nwhc.roa
File: KV75AqMzmpzWkiEhF15aTT6nwhc.roa (raw, json)
Hash identifier: N1PdxWB8+m0M7Bg0k2OeU8lxR5/cfbEXSzTV7+Wjml8=
Subject key identifier: 29:5E:F9:02:A3:33:9A:9C:D6:92:21:21:17:5E:5A:4D:3E:A7:C2:17
Certificate issuer: /CN=a65e61591857073d7b8766a734c9b566aaab3e95
Certificate serial: 018514BEE53EA51375CCE5018D75A0EEA01A
Authority key identifier: A6:5E:61:59:18:57:07:3D:7B:87:66:A7:34:C9:B5:66:AA:AB:3E:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl5hWRhXBz17h2anNMm1ZqqrPpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/KV75AqMzmpzWkiEhF15aTT6nwhc.roa
Signing time: Thu 15 Dec 2022 07:45:32 +0000
ROA not before: Thu 15 Dec 2022 07:45:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207713
IP address blocks: 37.220.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:be:e5:3e:a5:13:75:cc:e5:01:8d:75:a0:ee:a0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65e61591857073d7b8766a734c9b566aaab3e95
Validity
Not Before: Dec 15 07:45:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=295ef902a3339a9cd6922121175e5a4d3ea7c217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:c8:15:0f:d5:c8:28:7f:32:6c:a4:ad:e5:
9d:ba:83:96:4e:fa:2d:f5:d0:7a:d5:68:e6:d2:19:
e3:53:96:8b:76:d6:d7:2e:22:0b:51:86:82:7c:07:
0e:66:a3:4b:f8:e7:2d:1e:7f:18:45:42:fd:bb:51:
dd:8b:91:4e:ec:bf:67:3f:38:67:b3:70:64:f5:0f:
37:85:cd:4c:00:32:85:73:27:ab:c4:9b:e1:3d:02:
65:be:03:1e:0c:e1:a8:ba:8b:fa:35:9f:a9:4e:2e:
1c:2a:cf:40:0b:08:f3:cf:f9:b8:0e:4b:f5:bd:cb:
7d:53:86:5d:50:85:77:64:89:2d:b9:20:f5:9b:e1:
e5:55:7f:a6:4f:eb:4d:b4:45:28:12:f8:fb:ba:16:
90:32:60:a5:0a:c7:9f:e5:83:8e:89:4f:f9:b9:d7:
d3:0d:53:84:5b:99:99:9a:3b:63:fd:0a:9c:93:d7:
89:c4:1c:eb:01:68:df:67:a4:80:ca:42:28:9e:53:
84:6e:fa:bc:2a:ba:8f:bc:5e:8c:78:1b:4e:0f:7f:
a0:c0:67:6d:03:0d:a7:92:d1:d5:19:26:e7:db:32:
e8:ba:bd:78:f0:a1:0a:23:f8:36:eb:6f:cb:7f:aa:
e0:a1:53:cb:a6:68:6b:a8:2f:b0:d4:1a:6c:0e:5e:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5E:F9:02:A3:33:9A:9C:D6:92:21:21:17:5E:5A:4D:3E:A7:C2:17
X509v3 Authority Key Identifier:
keyid:A6:5E:61:59:18:57:07:3D:7B:87:66:A7:34:C9:B5:66:AA:AB:3E:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl5hWRhXBz17h2anNMm1ZqqrPpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/KV75AqMzmpzWkiEhF15aTT6nwhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/pl5hWRhXBz17h2anNMm1ZqqrPpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ce:7e:c4:59:b6:91:3b:10:9a:1c:7e:22:b8:77:88:35:90:
c6:9b:6a:c3:47:79:24:d1:e8:8e:e3:d2:5b:2a:ab:f6:ce:76:
24:18:f2:62:cd:3f:80:b5:11:a0:13:dd:0c:f4:0b:e2:d5:a5:
3e:b8:61:9f:12:1e:e2:51:8f:70:23:53:47:8c:ff:7d:63:32:
dc:ee:e6:e6:1c:e4:fb:b5:52:84:92:67:87:7e:95:26:6f:4f:
2b:48:3f:8b:d5:ce:88:f7:fa:90:d0:12:5b:db:55:f1:89:be:
4b:4e:28:b0:6e:0f:ca:c6:14:b0:5e:9d:5c:e2:9b:fc:b7:ff:
ab:29:82:86:93:f3:28:5c:52:f9:18:4d:bd:3e:13:bf:20:af:
1e:0f:83:a8:96:7c:f6:5c:51:1f:70:40:6b:69:97:1c:39:aa:
92:33:76:f7:e5:da:59:dc:c8:82:96:45:2f:59:64:27:30:1b:
c1:bb:f0:27:ed:94:a2:dd:f6:f4:64:f7:6c:7b:ff:8b:6e:fe:
6f:94:2f:c4:62:a8:08:4f:db:25:63:54:0d:72:bf:15:50:43:
67:55:a9:75:5c:7d:0b:87:ff:00:0f:45:a1:3c:a3:97:91:e4:
eb:37:15:9d:77:fe:19:e6:46:df:c8:ea:87:53:4e:c2:7a:9e:
67:9f:d2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:59 2024 by rpki-client on console-ams.rpki-client.org