Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/Lor1avaSRrCfGke946PYkSg-3as.roa
File: Lor1avaSRrCfGke946PYkSg-3as.roa (raw, json)
Hash identifier: Z90HYLycIBu9vr+lu/eBNDi6zHM0nSqrTyi89xWKXJ4=
Subject key identifier: 2E:8A:F5:6A:F6:92:46:B0:9F:1A:47:BD:E3:A3:D8:91:28:3E:DD:AB
Certificate issuer: /CN=739a7358f73039a1da8865ef2f2ff6f9fc99ff38
Certificate serial: E02F2A
Authority key identifier: 73:9A:73:58:F7:30:39:A1:DA:88:65:EF:2F:2F:F6:F9:FC:99:FF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/Lor1avaSRrCfGke946PYkSg-3as.roa
Signing time: Sat 01 Jan 2022 07:59:04 +0000
ROA not before: Sat 01 Jan 2022 07:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 37.72.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14692138 (0xe02f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=739a7358f73039a1da8865ef2f2ff6f9fc99ff38
Validity
Not Before: Jan 1 07:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e8af56af69246b09f1a47bde3a3d891283eddab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:c4:66:71:5d:89:da:9d:24:6b:9b:8c:7a:
56:16:11:8a:33:2c:40:57:79:cd:ab:e5:0d:00:ae:
7d:d3:38:e5:be:30:2d:4f:51:f6:af:07:57:5e:13:
eb:a1:f2:7e:ff:17:58:66:77:17:84:56:b7:23:b7:
a9:ec:fe:e7:84:d3:8f:4b:0f:dc:75:17:d9:39:b1:
ec:b5:9c:65:77:24:c3:0a:6e:a9:3e:b8:5c:da:48:
55:3a:bc:7f:2b:68:94:a4:46:db:59:52:ad:c7:3b:
59:be:08:22:76:64:fd:cf:ed:03:75:7a:63:09:ab:
42:97:c4:76:ec:7e:84:01:54:a4:94:5f:b7:bb:9c:
cd:18:52:c8:db:bc:71:54:a1:25:47:24:41:5c:b6:
d8:01:43:fb:8f:84:46:6c:ce:b8:d9:16:ea:a8:49:
45:5d:78:b1:03:df:22:3e:80:03:9b:e0:c5:84:e4:
de:f4:e6:01:86:ba:d8:ed:78:bb:2a:62:d5:50:f6:
8f:37:c1:ff:39:4c:a5:b6:a3:48:c8:1c:4e:9f:44:
38:a6:c5:16:18:26:0a:ce:5a:ab:b2:fa:6a:9d:f4:
06:d5:94:ad:97:97:4d:8d:f5:00:48:17:0a:27:7c:
c7:ad:02:96:57:ba:af:ce:6c:c3:87:ea:8c:06:39:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8A:F5:6A:F6:92:46:B0:9F:1A:47:BD:E3:A3:D8:91:28:3E:DD:AB
X509v3 Authority Key Identifier:
keyid:73:9A:73:58:F7:30:39:A1:DA:88:65:EF:2F:2F:F6:F9:FC:99:FF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/Lor1avaSRrCfGke946PYkSg-3as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:18:4a:c6:9c:40:b1:23:41:7c:50:a7:52:38:d4:c0:2e:13:
d7:55:06:e9:ab:12:fe:17:d2:8f:c1:60:3a:af:42:7a:28:f5:
a8:56:ce:ff:21:62:56:7b:c7:3a:50:b5:ff:35:d5:2d:95:39:
00:85:76:88:41:82:fd:c2:35:14:9d:27:27:18:09:51:79:03:
8c:22:9f:44:47:ed:d5:28:ac:b2:5a:bb:9d:8d:59:65:c9:07:
77:d7:9d:ff:1b:25:d2:2f:3b:af:ee:c7:d4:77:26:8f:2a:30:
63:42:d5:c9:0f:56:64:a6:84:ed:6f:7d:a0:0d:38:bd:a4:a3:
13:fb:a2:40:8b:9c:e7:f5:10:2a:2f:06:9c:01:fd:27:31:25:
c8:0b:bd:c8:c8:b4:b0:cb:d9:d2:9e:f1:0f:6b:73:d2:b2:58:
ea:ae:9a:8f:c6:85:0b:44:cb:43:49:bd:85:20:b1:6f:5f:74:
26:be:70:df:00:c0:60:dd:56:8b:cf:2a:b2:78:bf:7a:aa:11:
15:be:e8:bd:fa:7e:86:f1:f7:13:0e:6a:a6:34:7b:87:15:62:
a1:fa:71:e0:6a:78:84:55:9b:70:94:d5:94:b2:97:d1:f3:e1:
d0:45:66:c1:25:27:71:ca:d8:b8:35:99:8f:17:7c:9d:ea:3b:
35:02:af:8c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOAvKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MzlhNzM1OGY3MzAzOWExZGE4ODY1ZWYyZjJmZjZmOWZjOTlmZjM4MB4XDTIyMDEw
MTA3NTkwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmU4YWY1NmFmNjky
NDZiMDlmMWE0N2JkZTNhM2Q4OTEyODNlZGRhYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK/pxGZxXYnanSRrm4x6VhYRijMsQFd5zavlDQCufdM45b4w
LU9R9q8HV14T66Hyfv8XWGZ3F4RWtyO3qez+54TTj0sP3HUX2Tmx7LWcZXckwwpu
qT64XNpIVTq8fytolKRG21lSrcc7Wb4IInZk/c/tA3V6YwmrQpfEdux+hAFUpJRf
t7uczRhSyNu8cVShJUckQVy22AFD+4+ERmzOuNkW6qhJRV14sQPfIj6AA5vgxYTk
3vTmAYa62O14uypi1VD2jzfB/zlMpbajSMgcTp9EOKbFFhgmCs5aq7L6ap30BtWU
rZeXTY31AEgXCid8x60Clle6r85sw4fqjAY5N9cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQuivVq9pJGsJ8aR73jo9iRKD7dqzAfBgNVHSMEGDAWgBRzmnNY9zA5odqI
Ze8vL/b5/Jn/ODAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2M1cHpXUGN3T2FIYWlHWHZMeV8yLWZ5Wl96Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvNDUxNGVlLTNkYWItNDlmZS04NTc3LTNjOGVmY2ZjMTRmNi8x
L0xvcjFhdmFTUnJDZkdrZTk0NlBZa1NnLTNhcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
NDUxNGVlLTNkYWItNDlmZS04NTc3LTNjOGVmY2ZjMTRmNi8xL2M1cHpXUGN3T2FI
YWlHWHZMeV8yLWZ5Wl96Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACVIjjANBgkqhkiG9w0BAQsFAAOC
AQEAfhhKxpxAsSNBfFCnUjjUwC4T11UG6asS/hfSj8FgOq9Ceij1qFbO/yFiVnvH
OlC1/zXVLZU5AIV2iEGC/cI1FJ0nJxgJUXkDjCKfREft1Sisslq7nY1ZZckHd9ed
/xsl0i87r+7H1HcmjyowY0LVyQ9WZKaE7W99oA04vaSjE/uiQIuc5/UQKi8GnAH9
JzElyAu9yMi0sMvZ0p7xD2tz0rJY6q6aj8aFC0TLQ0m9hSCxb190Jr5w3wDAYN1W
i88qsni/eqoRFb7ovfp+hvH3Ew5qpjR7hxViofpx4Gp4hFWbcJTVlLKX0fPh0EVm
wSUnccrYuDWZjxd8neo7NQKvjA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:34 2024 by rpki-client on console-ams.rpki-client.org