Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/qJV058WRAkDqPtu_E1lwqLHqenY.roa
File: qJV058WRAkDqPtu_E1lwqLHqenY.roa (raw, json)
Hash identifier: /PcNtxzMfccUMzkJMwJV/NbXCv3NCa89XserEQng4zQ=
Subject key identifier: A8:95:74:E7:C5:91:02:40:EA:3E:DB:BF:13:59:70:A8:B1:EA:7A:76
Certificate issuer: /CN=efc34233ed96424a516e2bf9d39171b62e44b441
Certificate serial: 0191B37CBE85BA83071821925E29F574D3BB
Authority key identifier: EF:C3:42:33:ED:96:42:4A:51:6E:2B:F9:D3:91:71:B6:2E:44:B4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NCM-2WQkpRbiv505Fxti5EtEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/qJV058WRAkDqPtu_E1lwqLHqenY.roa
Signing time: Mon 02 Sep 2024 16:06:22 +0000
ROA not before: Mon 02 Sep 2024 16:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16347
IP address blocks: 37.157.8.0/21 maxlen: 24
37.157.10.0/24 maxlen: 24
37.157.11.0/24 maxlen: 24
37.157.12.0/22 maxlen: 24
193.41.95.0/24 maxlen: 24
2a00:bf40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:7c:be:85:ba:83:07:18:21:92:5e:29:f5:74:d3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc34233ed96424a516e2bf9d39171b62e44b441
Validity
Not Before: Sep 2 16:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a89574e7c5910240ea3edbbf135970a8b1ea7a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:5d:c5:2d:3a:f7:60:12:f1:2c:9a:7b:5c:
d8:33:d0:a8:a2:2f:36:b0:04:60:a3:fe:a9:9e:25:
db:fd:8b:5c:37:70:74:e6:01:cd:f8:3d:21:63:b6:
68:ec:e6:97:25:a0:9e:d9:d7:91:0c:5b:a5:c9:51:
7b:5a:9f:b0:df:28:f3:18:a5:b2:5a:d6:d8:8c:f7:
4f:6e:3f:03:ef:06:8e:ad:98:98:29:7d:04:9e:ec:
32:91:9a:c6:91:50:5b:1c:c4:a5:84:2c:88:15:ef:
5a:9e:86:f6:c3:25:d4:bd:87:64:ea:73:5b:66:3f:
76:29:26:dd:3c:1b:4e:1a:d3:52:ac:cd:a1:d5:62:
6f:5a:c7:a6:72:ec:79:6a:fe:f4:0c:c2:10:0d:81:
9a:87:12:53:0a:14:41:33:d1:d7:d3:a1:a4:fe:ae:
61:5a:81:2a:b7:8f:e0:52:f3:84:a9:1d:9d:b3:60:
3f:58:f7:40:9a:7f:69:11:2a:4f:e8:ee:3f:9e:ec:
e8:88:6e:a3:77:16:b5:3b:f6:b5:5a:72:d3:53:bd:
50:d5:3f:bb:61:d5:62:84:4e:e7:2a:08:5c:f6:07:
56:55:6f:92:21:37:ea:2f:73:c7:b3:60:f3:6c:6e:
c6:73:45:69:04:0b:a6:85:fc:98:d7:c1:62:c2:52:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:95:74:E7:C5:91:02:40:EA:3E:DB:BF:13:59:70:A8:B1:EA:7A:76
X509v3 Authority Key Identifier:
keyid:EF:C3:42:33:ED:96:42:4A:51:6E:2B:F9:D3:91:71:B6:2E:44:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NCM-2WQkpRbiv505Fxti5EtEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/qJV058WRAkDqPtu_E1lwqLHqenY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/78NCM-2WQkpRbiv505Fxti5EtEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.8.0/21
193.41.95.0/24
IPv6:
2a00:bf40::/32
Signature Algorithm: sha256WithRSAEncryption
86:07:b8:b1:c1:90:66:1e:93:16:0a:df:d0:f5:dc:2d:7a:fe:
87:fd:7b:e9:b1:e2:6c:56:a1:93:fa:81:38:0b:91:d5:d8:23:
0c:99:e5:40:88:2f:ab:bd:7e:d7:a5:c5:4b:78:00:26:10:fd:
53:fc:4f:1a:f6:79:ab:83:64:b9:5a:ee:10:fb:01:73:d7:34:
ab:af:ad:05:7d:7d:72:26:16:25:6c:27:36:a1:73:4b:fe:27:
b3:e5:2d:d2:9a:1e:f2:8f:07:af:e3:bb:dd:e2:c1:7a:26:63:
93:47:fc:2f:b7:6b:05:39:14:41:a9:9b:0b:d1:91:93:9e:96:
3e:0e:02:8c:77:53:b3:27:40:0b:86:dc:46:b3:52:14:a2:a0:
5f:99:1c:bd:1a:a5:4f:53:1d:99:3c:ad:4b:ee:a7:44:38:ff:
03:d4:d1:03:5d:af:7c:f6:89:be:c1:37:58:5a:c0:c4:98:93:
da:5e:1a:54:d8:71:e3:23:9c:69:70:23:65:f4:84:78:ff:02:
e9:27:14:89:6c:d3:93:ba:24:83:d4:05:ea:4f:80:2d:75:d5:
5b:11:28:5c:9a:61:46:9c:de:a2:49:53:65:ed:2d:28:a9:c8:
db:e9:ca:8c:6b:a2:f2:fd:63:3d:dc:d7:cb:dc:c1:74:40:90:
55:1d:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 14:03:38 2024 by rpki-client on console-ams.rpki-client.org