Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef340b-513e-4582-801d-a7328a476c7e/1/N-wgRp5uqBquXX41l_iElk8tXsQ.roa
File: N-wgRp5uqBquXX41l_iElk8tXsQ.roa (raw, json)
Hash identifier: d+BztL35DIDI4NEneikQchIuuWjBqWdrzLtBXv0uhB8=
Subject key identifier: 37:EC:20:46:9E:6E:A8:1A:AE:5D:7E:35:97:F8:84:96:4F:2D:5E:C4
Certificate issuer: /CN=52cf8fe30ee0388070eebc71c4400a3222400d1b
Certificate serial: 018964C08B25C5C5591573FADCB843C73310
Authority key identifier: 52:CF:8F:E3:0E:E0:38:80:70:EE:BC:71:C4:40:0A:32:22:40:0D:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us-P4w7gOIBw7rxxxEAKMiJADRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef340b-513e-4582-801d-a7328a476c7e/1/N-wgRp5uqBquXX41l_iElk8tXsQ.roa
Signing time: Mon 17 Jul 2023 16:48:07 +0000
ROA not before: Mon 17 Jul 2023 16:48:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 194.104.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:8b:25:c5:c5:59:15:73:fa:dc:b8:43:c7:33:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cf8fe30ee0388070eebc71c4400a3222400d1b
Validity
Not Before: Jul 17 16:48:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37ec20469e6ea81aae5d7e3597f884964f2d5ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:29:bf:05:3e:89:e0:d3:a9:84:2c:6b:d1:
ea:66:fa:ad:cf:38:da:d6:db:bc:3a:b1:05:92:cf:
0d:cd:3b:f6:ed:48:79:fc:de:30:6e:66:4e:a6:c6:
5e:38:8c:52:dd:43:9e:29:a7:7d:03:77:4d:93:7c:
94:1d:5b:9d:62:be:6c:51:90:71:3a:a7:2f:6d:f1:
d8:e9:e8:7b:c3:69:66:32:89:68:8a:1a:82:95:ad:
14:95:11:f9:5b:ef:49:53:9b:0b:b1:a6:6a:39:f5:
be:1c:3f:32:60:0c:71:ed:39:64:c5:73:cd:e6:8d:
24:c8:21:d8:1b:0a:bf:c5:3f:2f:d7:a8:e1:d1:ae:
42:83:69:ba:5f:c4:8f:c7:34:10:59:29:03:3d:bf:
cc:fe:1a:06:33:ce:4d:f2:81:ec:3f:85:cb:50:5d:
41:3a:dc:05:4c:6b:0f:e1:07:1c:1d:10:a3:b3:74:
4d:2d:5b:d1:51:7e:b3:32:12:84:01:64:61:34:79:
eb:c3:ff:59:5f:b2:9a:f4:20:4f:3f:1a:93:57:d2:
5b:bd:b9:6c:34:6b:ca:2e:8e:31:ba:c4:94:d2:00:
27:e1:a7:37:41:4b:29:34:98:02:28:b9:24:cf:7f:
f1:20:e1:cf:07:6e:20:50:c0:df:6a:d5:f4:92:e1:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:20:46:9E:6E:A8:1A:AE:5D:7E:35:97:F8:84:96:4F:2D:5E:C4
X509v3 Authority Key Identifier:
keyid:52:CF:8F:E3:0E:E0:38:80:70:EE:BC:71:C4:40:0A:32:22:40:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us-P4w7gOIBw7rxxxEAKMiJADRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef340b-513e-4582-801d-a7328a476c7e/1/N-wgRp5uqBquXX41l_iElk8tXsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef340b-513e-4582-801d-a7328a476c7e/1/Us-P4w7gOIBw7rxxxEAKMiJADRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:60:15:5b:5a:1a:5a:14:32:c6:8b:ab:13:9b:0a:1c:d8:a4:
1b:01:86:b0:82:b0:ac:86:03:46:e6:2f:89:1a:51:23:83:85:
ad:cd:7d:a6:83:de:7c:5a:8d:cd:ab:3d:3e:9c:9e:45:0d:9c:
71:33:a4:0f:86:8c:43:5a:9a:f0:63:aa:c8:c8:85:9e:9d:e3:
a9:61:83:4f:7d:6f:30:2e:b4:54:25:0c:99:b4:2d:d7:05:75:
0c:37:2f:33:c5:17:38:ba:21:b8:b7:c0:e7:c9:05:15:2a:92:
28:b6:7a:99:f8:c4:5a:f0:ba:20:f9:b5:b4:49:f0:2a:26:e0:
5c:c0:4c:6b:40:a8:c5:bd:7e:de:3c:e0:5d:2e:e5:0f:e6:f3:
02:ab:14:59:44:b8:30:4c:b0:f4:c6:f1:ba:53:f1:10:c9:43:
f2:88:5e:3f:cf:1e:f9:5d:11:1d:f4:9d:0d:40:ac:62:86:df:
b0:4a:44:97:0f:6e:01:1f:d4:69:3e:4a:14:ca:d5:f0:96:a8:
2e:48:49:c6:98:b2:91:86:b0:70:87:d8:98:f3:04:60:91:0f:
48:75:fc:90:c7:7b:8d:a8:53:d9:db:58:9d:dc:c4:bc:d4:4b:
c2:bb:8f:9e:59:84:29:e2:c7:b7:ec:60:9e:24:3e:90:83:24:
5f:42:84:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:27 2024 by rpki-client on console-fra.rpki-client.org