Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/buih1zZWBw24ZSRK1jMwyBks2XM.roa
File: buih1zZWBw24ZSRK1jMwyBks2XM.roa (raw, json)
Hash identifier: vJzZxIwgv82ppIo40QbV7Ug4zEtukEr2Vul/nkqRjZA=
Subject key identifier: 6E:E8:A1:D7:36:56:07:0D:B8:65:24:4A:D6:33:30:C8:19:2C:D9:73
Certificate issuer: /CN=3862e6de0e31e8d28a937c012b602885ac935d15
Certificate serial: 018CC3491D503596E2189167324BBB78EF1F
Authority key identifier: 38:62:E6:DE:0E:31:E8:D2:8A:93:7C:01:2B:60:28:85:AC:93:5D:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGLm3g4x6NKKk3wBK2AohayTXRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/buih1zZWBw24ZSRK1jMwyBks2XM.roa
Signing time: Mon 01 Jan 2024 04:29:57 +0000
ROA not before: Mon 01 Jan 2024 04:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201080
IP address blocks: 37.60.156.0/23 maxlen: 23
37.60.155.0/24 maxlen: 24
37.60.158.0/24 maxlen: 24
37.60.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:1d:50:35:96:e2:18:91:67:32:4b:bb:78:ef:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3862e6de0e31e8d28a937c012b602885ac935d15
Validity
Not Before: Jan 1 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ee8a1d73656070db865244ad63330c8192cd973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:b6:a6:4e:45:ac:a7:d9:06:45:d5:76:15:
2f:ce:39:f3:2a:be:91:ae:68:3b:45:30:3b:2f:9e:
38:d8:8b:62:86:b7:a1:97:69:70:ca:15:25:59:ce:
23:3f:b5:a2:66:fb:a5:14:17:db:e6:83:a1:6f:cf:
7d:20:1f:52:49:6b:4f:02:80:17:d6:09:89:c8:7b:
b6:9e:5b:31:12:c2:20:d5:32:22:8b:36:4f:c5:8b:
ed:64:fb:23:f7:00:36:2f:32:9b:e3:d4:74:dd:25:
52:8e:1f:91:27:e6:86:33:2d:04:70:21:a3:0f:87:
dc:a1:17:94:29:39:e1:a1:c6:f6:53:e1:a0:ff:b4:
43:af:fc:50:c5:53:02:2a:b2:a1:a4:24:cc:3e:b0:
51:ef:17:4a:ef:fa:23:a2:66:ed:84:65:52:c0:13:
16:2b:ba:61:3d:de:e0:5e:cb:20:7b:69:f2:b2:3a:
7f:ac:58:88:08:82:e6:e2:05:6a:8c:9d:88:06:25:
54:a1:41:b0:72:a3:9e:75:80:39:ec:36:ed:15:f9:
31:5b:a7:21:64:76:47:27:98:b8:3e:a7:6c:a9:78:
7a:9b:c0:9b:ec:d2:3a:74:13:3d:a1:2a:fe:c6:ec:
23:93:35:cc:09:14:da:14:54:a9:e6:7c:99:88:27:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:A1:D7:36:56:07:0D:B8:65:24:4A:D6:33:30:C8:19:2C:D9:73
X509v3 Authority Key Identifier:
keyid:38:62:E6:DE:0E:31:E8:D2:8A:93:7C:01:2B:60:28:85:AC:93:5D:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGLm3g4x6NKKk3wBK2AohayTXRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/buih1zZWBw24ZSRK1jMwyBks2XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/OGLm3g4x6NKKk3wBK2AohayTXRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.155.0-37.60.158.255
Signature Algorithm: sha256WithRSAEncryption
45:87:f0:0d:5d:f1:18:9c:d4:94:cf:fe:66:d3:c8:fc:e0:92:
84:53:1a:f6:7c:a2:90:40:59:e5:25:ce:da:98:d2:bf:60:08:
e7:76:18:66:b9:d5:a6:7b:00:01:08:7d:e0:fa:80:9b:a1:4f:
00:4a:a7:1a:fa:6a:eb:51:69:bd:d2:0e:39:07:09:09:52:fd:
2e:a6:8c:0a:76:d1:af:a4:86:0a:25:dd:46:40:d5:99:98:b4:
18:89:f1:ec:1d:34:b4:26:c8:2f:4f:77:20:14:60:1f:a9:4e:
44:4d:a2:50:dd:f4:de:07:7e:0c:3e:d5:24:9f:66:b3:a8:3d:
d2:f9:e5:f1:e3:e0:06:51:e0:64:1c:ba:11:e4:36:6a:13:73:
72:30:86:54:89:b1:56:b1:99:93:e0:31:a8:6f:1e:69:d9:6a:
2f:23:d8:64:0c:07:82:e1:c2:fc:20:48:c7:c3:61:5d:a2:e5:
86:1c:59:cd:87:0e:7a:cc:2f:5c:73:1e:bf:4f:bb:d1:7a:14:
36:08:dc:92:49:fb:8a:00:0d:d4:0b:24:87:cd:16:5f:81:d1:
39:6c:7b:13:89:7f:a9:b4:e9:58:14:d0:08:bc:01:dc:6c:f8:
d6:63:4a:02:cd:54:96:98:82:00:43:ca:26:61:5e:bd:4d:d6:
3b:f3:07:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 13:28:29 2024 by rpki-client on console-ams.rpki-client.org