Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c3663b-e6de-4dcf-84bd-c0acd75ed790/1/3WbqrULe8_mbVcsyYTzKng3ytUE.roa
File: 3WbqrULe8_mbVcsyYTzKng3ytUE.roa (raw, json)
Hash identifier: UFwzIvto9Yn4Tw0T/qUQMFSCGWOcvikLs0eJ2PBEQL0=
Subject key identifier: DD:66:EA:AD:42:DE:F3:F9:9B:55:CB:32:61:3C:CA:9E:0D:F2:B5:41
Certificate issuer: /CN=5cc4816fb01ffd35dbc8e8b0ac259f1eb9c306c1
Certificate serial: 0185E4AA1A2AA1C646C044E09C20A174EFCA
Authority key identifier: 5C:C4:81:6F:B0:1F:FD:35:DB:C8:E8:B0:AC:25:9F:1E:B9:C3:06:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XMSBb7Af_TXbyOiwrCWfHrnDBsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c3663b-e6de-4dcf-84bd-c0acd75ed790/1/3WbqrULe8_mbVcsyYTzKng3ytUE.roa
Signing time: Tue 24 Jan 2023 16:43:51 +0000
ROA not before: Tue 24 Jan 2023 16:43:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 37.44.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:aa:1a:2a:a1:c6:46:c0:44:e0:9c:20:a1:74:ef:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cc4816fb01ffd35dbc8e8b0ac259f1eb9c306c1
Validity
Not Before: Jan 24 16:43:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd66eaad42def3f99b55cb32613cca9e0df2b541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:3a:44:ed:7c:90:35:d1:e5:38:ee:cd:5c:
09:0e:38:e7:ca:5f:bf:7f:8d:c0:bf:68:c3:cb:b0:
7e:41:30:fb:9c:99:65:43:84:4c:7a:dd:cf:24:75:
93:76:91:be:fb:ff:95:f3:80:d6:45:87:8b:52:6b:
22:b8:95:a8:e1:fa:d3:05:86:bf:15:98:3d:21:90:
89:63:70:be:84:71:73:1f:8a:b0:4d:f6:76:37:81:
f2:49:13:df:1d:0a:2e:f5:0d:0f:93:cc:01:d8:38:
8f:43:08:09:d2:b0:98:31:1d:61:ee:40:fd:07:d4:
ce:ae:da:72:c1:99:41:48:a8:ee:3e:87:23:b4:1d:
b1:6c:17:1f:67:50:3c:8e:ba:cf:aa:6b:0c:d7:9f:
4a:69:cd:b6:dc:69:02:1f:b7:8b:4f:fb:d2:42:50:
07:fc:45:1d:36:3f:22:2a:d2:bf:31:ce:87:52:4d:
4a:75:6f:b9:c7:88:c8:09:c3:80:5f:14:74:a2:d6:
9d:63:9f:6b:a3:b3:00:d2:fb:6f:2a:42:db:9c:87:
29:a3:1c:6d:86:ad:4a:1d:f6:c1:c1:11:59:94:12:
96:83:c8:64:8c:b7:1a:eb:48:dc:00:e7:0d:90:8a:
5c:9a:b8:f4:bf:da:c5:7e:d2:a3:d4:ea:49:c6:7d:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:66:EA:AD:42:DE:F3:F9:9B:55:CB:32:61:3C:CA:9E:0D:F2:B5:41
X509v3 Authority Key Identifier:
keyid:5C:C4:81:6F:B0:1F:FD:35:DB:C8:E8:B0:AC:25:9F:1E:B9:C3:06:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XMSBb7Af_TXbyOiwrCWfHrnDBsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c3663b-e6de-4dcf-84bd-c0acd75ed790/1/3WbqrULe8_mbVcsyYTzKng3ytUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c3663b-e6de-4dcf-84bd-c0acd75ed790/1/XMSBb7Af_TXbyOiwrCWfHrnDBsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.214.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5b:54:b0:a7:48:7e:8c:56:90:dc:4f:b1:a1:b2:f9:a5:aa:
6e:7b:ce:ed:08:e6:2b:88:2f:b9:9f:8a:72:33:04:7a:6a:35:
01:cb:15:d9:d7:73:da:b6:97:50:ff:5f:27:67:95:d6:6c:fa:
ca:d1:3e:09:f4:83:dd:9e:cc:b0:a8:db:56:83:34:54:a6:f1:
3d:a3:91:14:c1:71:ba:f2:5a:bb:38:93:95:b9:34:a4:2f:22:
90:22:73:97:5b:0f:12:3f:36:74:38:8e:54:60:4a:51:ac:2f:
2b:40:2e:b6:d3:d0:8c:e2:d0:22:2a:51:56:89:c7:20:ae:e0:
03:22:a2:51:4f:7d:24:af:80:a6:32:7c:51:48:f4:c4:23:68:
1c:71:f8:40:55:54:45:ef:82:dc:8a:39:3f:ea:81:c1:52:b5:
39:94:55:5b:cd:24:43:4b:2c:c3:33:27:4a:e5:0f:1e:75:35:
56:ec:2b:a5:98:2b:e3:44:47:ad:99:4d:9f:b4:53:fa:cb:3d:
4d:5d:8d:c8:1e:1e:da:48:1d:86:e4:d8:88:bc:b2:69:69:04:
f7:76:ed:c5:42:4c:b6:f7:f2:36:71:b9:cc:26:b0:4f:d5:09:
4b:d1:81:2c:ef:92:42:db:bc:04:77:a2:2c:f2:fd:68:a6:a0:
5f:1e:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:20 2024 by rpki-client on console-ams.rpki-client.org