Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/857QXsx4BaJwSRHW4uuNeFBZMP8.roa
File: 857QXsx4BaJwSRHW4uuNeFBZMP8.roa (raw, json)
Hash identifier: SP1IT0l0S1T4hokncKA1WAP4/BDAnXdhXdSSvRJfZvU=
Subject key identifier: F3:9E:D0:5E:CC:78:05:A2:70:49:11:D6:E2:EB:8D:78:50:59:30:FF
Certificate issuer: /CN=3171bfa6b3d32dfe3a0ee2df77cfbe585c27f5db
Certificate serial: 01856D2F4C6A1C86DD02C6C4CEE5C8D77D49
Authority key identifier: 31:71:BF:A6:B3:D3:2D:FE:3A:0E:E2:DF:77:CF:BE:58:5C:27:F5:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXG_prPTLf46DuLfd8--WFwn9ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/857QXsx4BaJwSRHW4uuNeFBZMP8.roa
Signing time: Sun 01 Jan 2023 11:54:54 +0000
ROA not before: Sun 01 Jan 2023 11:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34704
IP address blocks: 37.208.53.0/24 maxlen: 24
37.208.52.0/24 maxlen: 24
37.208.55.0/24 maxlen: 24
37.208.54.0/24 maxlen: 24
37.208.51.0/24 maxlen: 24
37.208.50.0/24 maxlen: 24
37.208.49.0/24 maxlen: 24
37.208.48.0/24 maxlen: 24
93.174.37.0/24 maxlen: 24
93.174.36.0/24 maxlen: 24
93.174.35.0/24 maxlen: 24
93.174.34.0/24 maxlen: 24
93.174.33.0/24 maxlen: 24
93.174.32.0/24 maxlen: 24
93.174.39.0/24 maxlen: 24
213.232.82.0/24 maxlen: 24
213.232.81.0/24 maxlen: 24
213.232.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:4c:6a:1c:86:dd:02:c6:c4:ce:e5:c8:d7:7d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3171bfa6b3d32dfe3a0ee2df77cfbe585c27f5db
Validity
Not Before: Jan 1 11:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f39ed05ecc7805a2704911d6e2eb8d78505930ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:b2:55:e0:f4:f3:aa:0b:95:0b:b5:c2:bf:
da:41:4e:b8:37:f7:7c:78:52:12:f3:18:92:e8:8d:
ca:58:5a:57:15:81:24:22:7a:c3:57:05:25:00:7e:
05:f7:02:f8:db:e0:69:3a:11:c9:8f:1a:a5:45:6f:
6f:d5:22:38:84:18:75:3f:11:fb:6b:ad:85:d5:20:
f0:9b:f7:76:7c:ba:aa:da:ee:99:af:a9:65:8e:71:
69:a8:ba:9e:d8:28:07:14:44:bf:dd:40:5b:6f:cc:
e5:31:aa:84:fa:cc:c2:56:c8:06:7a:bf:80:e7:4c:
51:de:c0:02:4c:61:45:df:1d:8d:59:f1:7c:59:50:
99:f5:51:c9:d0:88:ab:27:e9:98:8c:4d:ec:ee:b0:
d7:0f:dd:30:70:a8:a1:9a:4e:d0:5c:1a:04:54:52:
7f:af:99:7f:17:85:1d:40:80:f6:16:eb:73:72:34:
71:61:8f:64:0f:de:2f:4a:f1:5b:61:be:f8:84:4f:
52:1d:2b:01:8b:10:7a:fd:37:cb:cf:cc:f3:62:04:
81:30:b7:d8:dc:58:6e:96:cb:77:6a:c6:60:0b:3e:
45:19:c2:6f:b3:bf:a0:02:d0:b7:c1:3f:6e:4d:db:
54:e5:ca:3a:35:83:63:28:c1:7f:e8:16:ee:40:02:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9E:D0:5E:CC:78:05:A2:70:49:11:D6:E2:EB:8D:78:50:59:30:FF
X509v3 Authority Key Identifier:
keyid:31:71:BF:A6:B3:D3:2D:FE:3A:0E:E2:DF:77:CF:BE:58:5C:27:F5:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXG_prPTLf46DuLfd8--WFwn9ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/857QXsx4BaJwSRHW4uuNeFBZMP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/MXG_prPTLf46DuLfd8--WFwn9ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.48.0/21
93.174.32.0-93.174.37.255
93.174.39.0/24
213.232.80.0-213.232.82.255
Signature Algorithm: sha256WithRSAEncryption
ac:7c:38:f8:7a:ba:d9:d3:75:0c:8e:c4:7a:cc:4d:ed:9f:aa:
c2:94:ae:fe:eb:7b:9d:c5:7c:e6:49:0f:98:7f:b3:f7:b3:9f:
97:7c:31:69:56:00:83:73:ed:ce:2a:fb:fc:79:db:6c:e2:aa:
8d:0b:a8:43:0d:4e:99:6a:f4:c8:ce:51:5c:12:5c:9e:f7:67:
37:c3:c2:a7:ff:03:a5:30:d3:43:cf:a6:76:b8:fa:28:05:7e:
6f:47:44:ab:b1:7a:05:26:2b:19:94:31:7e:db:a2:bd:8f:6e:
ba:d4:5b:ea:81:fc:4b:c8:6e:6b:bb:cb:d4:a5:5e:c6:b1:d4:
ff:e8:6b:2e:10:5d:32:9d:d4:de:76:2a:32:5a:6a:fa:37:8b:
62:51:27:3f:aa:c5:11:4f:8b:4d:18:03:30:0f:3d:70:5e:5e:
12:30:93:99:2d:6d:36:03:41:42:e1:d8:2d:b7:c7:42:b1:64:
61:be:e6:f9:58:fb:07:96:22:24:1c:14:51:7c:8c:1b:f7:cb:
08:6c:98:3a:ce:05:72:c1:87:9b:76:2b:a5:f9:4a:aa:0e:f9:
d2:e4:08:c3:2a:f3:00:d7:82:3b:0f:56:ed:9d:01:e7:0a:df:
7c:7b:7e:52:85:37:1e:9d:98:eb:18:c2:68:8d:87:52:4f:cc:
7c:51:39:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 08:26:51 2023 by rpki-client on console-ams.rpki-client.org