Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/1-R0bh9mJ5GiMB6aOfONMn1Oz07k.roa
File: 1-R0bh9mJ5GiMB6aOfONMn1Oz07k.roa (raw, json)
Hash identifier: aZW+wsV8lr7w5p6jXaA7UIHrxa3CX2SEVUEhjQOwWNE=
Subject key identifier: F9:1D:1B:87:D9:89:E4:68:8C:07:A6:8E:7C:E3:4C:9F:53:B3:D3:B9
Certificate issuer: /CN=9bae744a04c9a34ddc7040292ce559344506876c
Certificate serial: 01869BFAB9DB45D605508B600AF46EE5E90E
Authority key identifier: 9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/1-R0bh9mJ5GiMB6aOfONMn1Oz07k.roa
Signing time: Wed 01 Mar 2023 07:02:25 +0000
ROA not before: Wed 01 Mar 2023 07:02:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32097
IP address blocks: 37.140.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9b:fa:b9:db:45:d6:05:50:8b:60:0a:f4:6e:e5:e9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bae744a04c9a34ddc7040292ce559344506876c
Validity
Not Before: Mar 1 07:02:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f91d1b87d989e4688c07a68e7ce34c9f53b3d3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:0d:80:c5:7a:c7:74:0a:9b:17:f4:5c:ac:
67:d6:a1:be:1a:f0:02:3a:86:c3:13:96:fd:08:c3:
c8:7d:44:eb:34:d3:71:ca:22:56:a7:1a:b4:05:51:
f7:a7:dc:ec:2d:ca:e8:c7:13:9b:14:a9:6f:bc:ef:
3f:0f:e0:70:f0:3f:dd:c5:42:b4:13:05:56:e9:76:
c1:f2:b7:7a:28:1a:f5:87:ca:3f:82:0c:62:0e:47:
78:61:8c:e2:d3:c9:ee:64:0d:7c:bb:81:ce:60:ee:
8d:d1:b9:82:54:7b:07:f2:b8:7e:1c:3c:ae:77:03:
09:fd:61:f2:90:84:5f:88:2e:b1:8c:96:15:41:5b:
92:87:d4:3e:8f:39:26:92:ee:a0:41:59:6b:1f:11:
bb:df:6e:45:4a:4e:57:c4:01:0a:f0:d3:c5:d0:d3:
3a:a3:4b:85:98:35:30:b5:2c:06:71:d2:45:99:5d:
f2:3d:9d:dc:f0:5e:2d:fb:d9:1e:8e:d5:7f:86:f3:
c7:ae:07:3e:47:d2:5e:15:05:12:ca:81:9f:b4:c4:
15:ab:99:1b:18:55:f1:98:06:47:23:9a:af:1a:89:
72:70:b4:6d:02:b7:43:3b:2d:26:d0:cb:35:86:b2:
e7:cc:c3:e1:8a:17:f0:2c:84:ea:8c:76:b1:4c:f8:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1D:1B:87:D9:89:E4:68:8C:07:A6:8E:7C:E3:4C:9F:53:B3:D3:B9
X509v3 Authority Key Identifier:
keyid:9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/1-R0bh9mJ5GiMB6aOfONMn1Oz07k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/m650SgTJo03ccEApLOVZNEUGh2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.244.0/24
Signature Algorithm: sha256WithRSAEncryption
36:84:02:0e:f8:c1:d2:45:08:6d:ac:d0:4e:a7:77:c5:74:ef:
73:68:e1:69:28:fc:3d:ad:97:7e:cc:5a:f9:6d:59:7d:ad:5b:
48:d4:2d:9c:49:b4:71:25:00:b3:4f:f2:c9:ec:24:70:57:a4:
01:68:2b:92:82:23:b0:7d:4e:00:f8:4d:af:b5:2a:1c:ee:52:
62:9b:11:be:eb:e3:d3:0c:3e:08:22:98:1c:1b:86:85:2e:cd:
06:d9:da:5b:8d:d8:fc:dd:68:a9:90:6a:ad:da:49:aa:28:fd:
09:1c:a3:00:7b:02:b3:a9:4c:a3:e1:8f:a8:1e:72:09:a5:44:
e1:20:6d:16:f7:2c:46:af:96:54:d9:26:7a:a1:32:70:e7:ed:
12:81:58:11:b7:6b:5e:d6:37:33:9d:0a:40:2c:e3:e8:4a:56:
54:4b:4c:dd:35:bb:78:06:ba:c4:ea:86:4f:20:2c:b3:d8:58:
a6:94:ce:f0:1f:f5:cd:0d:8e:bb:86:b1:e6:28:b9:1a:b2:e9:
9a:23:d6:a3:2b:50:cd:86:da:b2:83:e8:63:6f:67:19:15:0d:
7f:cc:12:ea:44:37:5e:f6:a7:35:9a:0d:c7:97:45:19:a5:ed:
fa:49:e9:39:d9:14:4d:56:47:19:0a:b9:c0:b1:a9:2a:85:be:
6c:3c:ce:fb
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYab+rnbRdYFUItgCvRu5ekOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYWU3NDRhMDRjOWEzNGRkYzcwNDAyOTJjZTU1OTM0NDUw
Njg3NmMwHhcNMjMwMzAxMDcwMjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTFkMWI4N2Q5ODllNDY4OGMwN2E2OGU3Y2UzNGM5ZjUzYjNkM2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliwNgMV6x3QKmxf0XKxn1qG+GvAC
OobDE5b9CMPIfUTrNNNxyiJWpxq0BVH3p9zsLcroxxObFKlvvO8/D+Bw8D/dxUK0
EwVW6XbB8rd6KBr1h8o/ggxiDkd4YYzi08nuZA18u4HOYO6N0bmCVHsH8rh+HDyu
dwMJ/WHykIRfiC6xjJYVQVuSh9Q+jzkmku6gQVlrHxG7325FSk5XxAEK8NPF0NM6
o0uFmDUwtSwGcdJFmV3yPZ3c8F4t+9kejtV/hvPHrgc+R9JeFQUSyoGftMQVq5kb
GFXxmAZHI5qvGolycLRtArdDOy0m0Ms1hrLnzMPhihfwLITqjHaxTPhpYwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPkdG4fZieRojAemjnzjTJ9Ts9O5MB8GA1UdIwQY
MBaAFJuudEoEyaNN3HBAKSzlWTRFBodsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTY1MFNnVEpvMDNjY0VBcExPVlpORVVHaDJ3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lMzg2N2YtMWQ2MC00ODllLTgzYWQt
NmMzZTc2NmNhYTFmLzEvMS1SMGJoOW1KNUdpTUI2YU9mT05NbjFPejA3ay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTYvZTM4NjdmLTFkNjAtNDg5ZS04M2FkLTZjM2U3NjZjYWEx
Zi8xL202NTBTZ1RKbzAzY2NFQXBMT1ZaTkVVR2gydy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACWM9DAN
BgkqhkiG9w0BAQsFAAOCAQEANoQCDvjB0kUIbazQTqd3xXTvc2jhaSj8Pa2Xfsxa
+W1Zfa1bSNQtnEm0cSUAs0/yyewkcFekAWgrkoIjsH1OAPhNr7UqHO5SYpsRvuvj
0ww+CCKYHBuGhS7NBtnaW43Y/N1oqZBqrdpJqij9CRyjAHsCs6lMo+GPqB5yCaVE
4SBtFvcsRq+WVNkmeqEycOftEoFYEbdrXtY3M50KQCzj6EpWVEtM3TW7eAa6xOqG
TyAss9hYppTO8B/1zQ2Ou4ax5ii5GrLpmiPWoytQzYbasoPoY29nGRUNf8wS6kQ3
XvanNZoNx5dFGaXt+knpOdkUTVZHGQq5wLGpKoW+bDzO+w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:47 2024 by rpki-client on console-ams.rpki-client.org