Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6c819f-6838-4918-8635-892b3c3722b9/1/40927a3gNzHBcogCd1Ce_2qOpQ4.roa
File: 40927a3gNzHBcogCd1Ce_2qOpQ4.roa (raw, json)
Hash identifier: mrOf4FAyRLLT6nV3A8HEKcZAnIKQHwhVh/6s8lk+GKg=
Subject key identifier: E3:4F:76:ED:AD:E0:37:31:C1:72:88:02:77:50:9E:FF:6A:8E:A5:0E
Certificate issuer: /CN=4d4b1a8eb7cd0fa7e27d7aed628d4626954d4ddb
Certificate serial: 01856E141932B117C1B0F3F5606124E4EE40
Authority key identifier: 4D:4B:1A:8E:B7:CD:0F:A7:E2:7D:7A:ED:62:8D:46:26:95:4D:4D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUsajrfND6fifXrtYo1GJpVNTds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6c819f-6838-4918-8635-892b3c3722b9/1/40927a3gNzHBcogCd1Ce_2qOpQ4.roa
Signing time: Sun 01 Jan 2023 16:04:48 +0000
ROA not before: Sun 01 Jan 2023 16:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27176
IP address blocks: 37.16.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:19:32:b1:17:c1:b0:f3:f5:60:61:24:e4:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4b1a8eb7cd0fa7e27d7aed628d4626954d4ddb
Validity
Not Before: Jan 1 16:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e34f76edade03731c172880277509eff6a8ea50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:80:75:c5:23:73:a5:74:2c:3a:5d:07:ae:2b:
ac:a1:e6:50:0f:58:f1:68:ab:b9:1c:b4:36:f8:37:
0c:6f:a6:f9:58:05:f8:d8:ed:50:51:e9:ce:1a:24:
99:ea:65:ce:f8:12:5d:af:f1:00:b4:da:d9:3d:f0:
0d:ef:a0:56:22:1c:6c:82:32:59:36:80:9d:46:88:
03:b0:91:bf:0f:cc:af:62:b1:e3:47:83:2a:8e:bc:
4b:21:8d:70:34:10:79:03:19:24:e4:b7:28:17:b3:
31:b1:4a:ab:9e:b6:db:98:e9:9a:e8:55:dd:60:70:
14:34:1a:f9:06:c7:11:56:cd:41:8b:61:eb:58:f9:
a2:ce:5f:b6:9d:ed:c7:00:f3:d6:db:be:93:d2:27:
a2:e7:4b:e4:96:7a:26:05:ea:e4:5c:f9:35:7d:8b:
06:ee:ee:bc:73:de:92:04:06:cb:6c:00:9c:0f:f4:
5e:58:37:24:30:61:16:1b:56:91:a8:f1:a0:2a:30:
25:36:7c:61:2c:ac:24:62:a3:17:47:88:97:8c:da:
f5:81:d8:67:ed:c6:44:cd:5a:22:3c:71:e3:4e:ac:
a9:3b:02:f4:47:1b:c0:53:54:18:ed:f2:80:bc:65:
28:78:68:be:c0:37:c0:09:c2:1b:99:75:94:4d:11:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:76:ED:AD:E0:37:31:C1:72:88:02:77:50:9E:FF:6A:8E:A5:0E
X509v3 Authority Key Identifier:
keyid:4D:4B:1A:8E:B7:CD:0F:A7:E2:7D:7A:ED:62:8D:46:26:95:4D:4D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUsajrfND6fifXrtYo1GJpVNTds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6c819f-6838-4918-8635-892b3c3722b9/1/40927a3gNzHBcogCd1Ce_2qOpQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6c819f-6838-4918-8635-892b3c3722b9/1/TUsajrfND6fifXrtYo1GJpVNTds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.79.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e8:4c:68:6a:38:97:5b:97:59:b8:cc:06:2d:31:70:42:3d:
ab:98:72:b1:fb:b0:09:68:84:99:d3:51:c5:c8:93:ec:96:f5:
85:97:cb:91:96:b7:94:77:b2:42:d0:33:1f:ec:14:c1:d6:de:
12:c8:41:66:bf:b2:d9:e8:d3:c1:50:39:30:14:13:2f:70:7d:
98:f2:23:93:74:04:74:3d:62:1e:24:75:02:87:66:69:4f:a0:
ae:13:7b:a9:2a:83:c4:bd:38:83:bf:b2:b0:4b:dc:70:50:f6:
54:3e:d3:c0:99:d5:7d:32:15:02:96:ad:c9:e3:98:21:f9:79:
7e:1e:66:04:0e:73:87:73:7d:29:96:4e:84:16:d2:e1:85:3a:
ce:6d:d0:94:48:2e:94:33:61:6e:cb:25:7b:5c:72:75:f6:48:
5b:f2:79:0c:a5:1a:7a:c6:b1:64:5f:1a:19:bf:bd:8d:29:08:
9a:e4:fe:24:2e:32:90:68:77:e3:4e:60:56:32:83:55:83:39:
9c:63:37:c7:7f:9b:91:21:83:6a:04:58:ae:16:8d:be:a4:af:
d4:52:31:04:72:26:8c:c9:6c:cb:b5:8d:05:88:30:f1:f7:68:
e5:46:62:95:c2:b1:dd:a3:33:c4:74:b5:ef:0d:2e:80:3e:03:
66:76:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 08:14:18 2023 by rpki-client on console-ams.rpki-client.org