Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/ACNBz64SKvLPXLZ_W9BxGTlngz4.roa
File: ACNBz64SKvLPXLZ_W9BxGTlngz4.roa (raw, json)
Hash identifier: yZvnRIepldT5s0okQhkinBuMMWd3mt0YHV0a3qb0tFE=
Subject key identifier: 00:23:41:CF:AE:12:2A:F2:CF:5C:B6:7F:5B:D0:71:19:39:67:83:3E
Certificate issuer: /CN=6327607563493337687ad69ce1064e636265be3f
Certificate serial: 018C4AF5EFF08ADBBB4E8C6539926A83EE5A
Authority key identifier: 63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/ACNBz64SKvLPXLZ_W9BxGTlngz4.roa
Signing time: Fri 08 Dec 2023 19:44:40 +0000
ROA not before: Fri 08 Dec 2023 19:44:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205056
IP address blocks: 37.72.184.0/23 maxlen: 23
5.157.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:f5:ef:f0:8a:db:bb:4e:8c:65:39:92:6a:83:ee:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6327607563493337687ad69ce1064e636265be3f
Validity
Not Before: Dec 8 19:44:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=002341cfae122af2cf5cb67f5bd071193967833e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dc:72:f0:5f:b9:cf:34:5d:7e:26:c3:e0:20:
20:15:31:40:6e:64:95:cf:c4:f8:52:f6:fa:f8:c4:
2e:c0:7d:3b:16:bc:3d:e7:fc:05:74:0d:71:97:21:
b4:3b:dd:6d:e0:0e:d4:e0:80:1f:7e:7b:8c:6e:37:
30:58:cf:8e:b5:ec:35:58:79:6d:ce:7e:87:e0:b6:
10:10:de:8b:91:45:82:ad:92:b9:bf:a2:50:b0:13:
b2:3c:60:cc:29:33:68:3c:29:84:e4:3b:fc:cf:f6:
b3:d0:f9:25:89:59:a2:61:5d:b6:77:e5:db:0f:49:
a2:b8:83:e6:b7:90:61:61:47:e6:05:38:0d:a8:2a:
c3:8f:ff:a4:50:64:2f:d5:21:01:d2:c4:f3:ec:d3:
ae:82:64:18:c8:c0:4d:a1:88:0c:5f:de:80:68:0c:
bb:93:71:1b:74:64:e4:a1:a7:bf:b3:6f:bd:ef:5a:
0b:46:4a:93:e6:4f:f0:0e:54:be:e4:f0:ed:fc:de:
84:7b:f1:c8:24:33:4b:9b:98:27:ee:45:74:3b:e8:
b4:0a:ef:33:2c:bf:89:02:78:ef:8e:6d:21:67:04:
a2:07:53:4d:9b:d1:a2:5a:a2:71:85:47:fd:48:82:
51:94:0a:8c:29:ef:7e:e8:73:55:f2:5e:21:a4:43:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:23:41:CF:AE:12:2A:F2:CF:5C:B6:7F:5B:D0:71:19:39:67:83:3E
X509v3 Authority Key Identifier:
keyid:63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/ACNBz64SKvLPXLZ_W9BxGTlngz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.2.0/23
37.72.184.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:d0:ce:52:e8:a2:10:0b:48:8e:7d:5c:ec:25:a1:e9:f5:d5:
7c:15:0b:9e:48:d9:43:63:c8:56:41:8e:2f:69:27:cf:de:35:
24:f7:59:ba:6c:52:2b:b0:2e:1e:c9:65:07:b3:40:7d:b6:0c:
62:c7:3e:9c:a4:4d:7f:0c:1f:4d:fb:3c:79:52:5f:23:96:50:
de:7f:d4:91:db:5e:f2:69:4b:35:52:33:bc:26:ce:60:d4:7b:
7f:6b:a4:a6:6e:14:e8:14:2d:cd:b7:57:94:03:9b:57:ca:97:
67:df:5c:ee:14:51:5c:ec:de:38:02:86:ca:c2:c1:85:2e:9e:
c4:f3:0c:09:6d:07:4c:74:ac:04:48:98:0e:be:fc:97:64:06:
d4:19:aa:21:38:d5:48:fe:ad:ba:30:fd:e1:b4:1e:3b:19:91:
3e:35:fd:c1:05:cc:ba:de:f4:80:9e:3d:24:54:4f:c2:fe:77:
2a:32:1a:ef:3f:8d:a1:c7:fc:f0:e8:db:86:27:1c:b8:b8:55:
cb:04:1f:c2:de:cc:c3:98:8d:5a:0c:c3:8e:fc:54:1a:46:0c:
ae:9f:6e:84:1c:d1:b6:3b:9b:7f:e4:80:82:1a:83:18:c3:3a:
a4:e0:98:2b:e3:32:21:6f:cb:7b:b2:37:80:4b:0d:81:d2:47:
7e:f2:3a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:24 2024 by rpki-client on console-fra.rpki-client.org