Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/PguJQiN1U8aX5tWNHAYFvNOVMEE.roa
File: PguJQiN1U8aX5tWNHAYFvNOVMEE.roa (raw, json)
Hash identifier: HNMK+xOJ/nzxPpSuuvbfb2Gt2DVHs0bVGQnrxRT7q04=
Subject key identifier: 3E:0B:89:42:23:75:53:C6:97:E6:D5:8D:1C:06:05:BC:D3:95:30:41
Certificate issuer: /CN=6327607563493337687ad69ce1064e636265be3f
Certificate serial: 018CC348DE7B3627B0BEE5CBE99A9811B95B
Authority key identifier: 63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/PguJQiN1U8aX5tWNHAYFvNOVMEE.roa
Signing time: Mon 01 Jan 2024 04:29:41 +0000
ROA not before: Mon 01 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205056
IP address blocks: 37.72.184.0/23 maxlen: 23
5.157.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:de:7b:36:27:b0:be:e5:cb:e9:9a:98:11:b9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6327607563493337687ad69ce1064e636265be3f
Validity
Not Before: Jan 1 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e0b8942237553c697e6d58d1c0605bcd3953041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a9:fe:85:a4:aa:2f:10:35:12:97:5c:24:3c:
46:ad:26:05:33:ed:af:6a:84:f6:07:30:cd:11:b1:
31:99:96:62:b3:99:0f:2e:c2:ea:2d:68:5a:7e:71:
7c:13:28:74:0a:35:96:1f:27:00:a4:21:f2:97:f6:
7b:a6:1b:07:7a:67:5d:08:72:e3:ea:b2:fe:da:5f:
ea:b0:0c:48:09:27:b5:ec:fd:78:1c:62:5e:8b:9d:
6e:b3:cc:72:11:40:71:6f:75:e2:e5:88:65:38:24:
ff:17:e9:7b:bd:96:06:d8:e0:c4:bb:41:27:47:c4:
de:3c:2a:59:70:99:e7:63:64:c7:bb:69:11:94:3d:
84:61:15:e3:7b:af:0e:c7:77:55:d8:30:12:21:f3:
2e:05:32:32:12:ab:73:ce:9c:a2:75:8c:9f:ac:78:
31:d7:96:ae:d0:b2:44:1e:48:3b:d7:d8:33:8f:96:
f3:d8:7e:9f:1c:ed:4b:2e:bb:30:17:f6:e4:0f:1e:
c6:a1:2f:e2:9a:28:d4:50:20:fd:7d:d2:ac:84:71:
90:00:7e:d6:23:84:71:a6:5b:8a:9e:99:7c:95:eb:
97:0f:c8:19:f3:b2:61:18:4f:ca:5e:9d:c6:22:c3:
63:80:a8:2f:63:77:b6:e7:ea:8d:b3:a4:8f:c3:de:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0B:89:42:23:75:53:C6:97:E6:D5:8D:1C:06:05:BC:D3:95:30:41
X509v3 Authority Key Identifier:
keyid:63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/PguJQiN1U8aX5tWNHAYFvNOVMEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.2.0/23
37.72.184.0/23
Signature Algorithm: sha256WithRSAEncryption
75:0d:ed:a6:56:9c:18:8f:78:aa:54:a7:84:be:44:ea:b5:d1:
70:e6:16:7d:ad:4e:f6:19:f0:f6:a2:c0:8c:84:3d:b9:83:0b:
cf:9a:bc:eb:0c:00:45:17:6c:b6:09:3c:23:c2:c1:11:3c:54:
c7:f7:e8:82:cc:0e:b4:12:6d:b7:e7:a1:30:8b:71:b8:c4:bd:
d6:dd:b0:a0:b4:4d:66:50:ed:e7:9b:c8:ea:1f:f1:f7:18:51:
9d:bc:ff:6f:54:6d:e0:ba:71:01:49:45:4d:ac:ec:38:22:6f:
9c:e3:33:34:ac:09:04:71:1e:82:ee:cd:09:06:d2:a2:4e:a3:
94:a0:f0:70:b0:46:87:16:a3:13:d1:6e:69:b2:50:5e:eb:6d:
7d:97:99:36:74:86:48:7d:d6:b3:82:51:06:5e:86:01:ce:54:
f6:dd:af:41:21:59:3c:5b:07:00:3e:8c:63:df:e0:93:3e:28:
48:11:09:4f:29:a8:70:ba:f2:8a:27:3d:fa:1d:9c:d4:a6:47:
50:38:66:98:27:71:dd:9c:ae:47:ad:2e:89:51:bf:7c:79:73:
69:b9:2a:37:c9:ef:1b:e8:88:9a:6a:53:a0:d7:27:cd:b5:85:
15:3b:f4:a3:fd:7b:88:21:fd:f9:c6:8b:9c:23:dd:17:c9:4f:
f8:5c:31:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:24 2024 by rpki-client on console-fra.rpki-client.org