Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/AG-70vQMqi3BmbnQFf4W38WSr6Q.roa
File: AG-70vQMqi3BmbnQFf4W38WSr6Q.roa (raw, json)
Hash identifier: vMsxKGgUT92h23DA4r0hQh+SE+GV3G4zfqoJDLLDuXo=
Subject key identifier: 00:6F:BB:D2:F4:0C:AA:2D:C1:99:B9:D0:15:FE:16:DF:C5:92:AF:A4
Certificate issuer: /CN=9bae744a04c9a34ddc7040292ce559344506876c
Certificate serial: 01833AA588C4D161388D4AA7F78B4C5008F8
Authority key identifier: 9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/AG-70vQMqi3BmbnQFf4W38WSr6Q.roa
Signing time: Wed 14 Sep 2022 06:17:50 +0000
ROA not before: Wed 14 Sep 2022 06:17:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 37.140.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3a:a5:88:c4:d1:61:38:8d:4a:a7:f7:8b:4c:50:08:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bae744a04c9a34ddc7040292ce559344506876c
Validity
Not Before: Sep 14 06:17:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=006fbbd2f40caa2dc199b9d015fe16dfc592afa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:b8:31:b1:d7:99:bc:c7:b9:83:d6:7e:af:
99:b5:50:6d:49:01:50:b2:35:ab:0d:d3:59:a6:1f:
24:01:d9:d4:bd:fb:d4:e9:81:35:3b:68:6a:49:5e:
2c:a1:2a:a2:2a:33:07:bf:0b:2c:4f:af:14:58:61:
d9:70:b5:de:d4:3e:fa:5e:fe:64:6c:03:42:73:c5:
3a:b0:1d:1b:36:17:a5:6e:b7:7e:ab:01:e3:64:90:
54:78:92:9a:d8:8b:f7:5a:5e:f0:ac:1b:6c:88:94:
f3:c9:3f:c4:c0:4e:15:1d:bd:4f:3f:d1:3c:e4:16:
d8:da:a3:91:db:08:90:e4:ff:05:7b:d2:77:4e:31:
45:f6:ce:0c:bc:28:e1:70:8c:b5:6d:5c:e7:41:29:
24:1a:10:de:39:4a:73:be:15:75:ce:b3:d1:0e:95:
81:6e:0c:b9:3f:d2:5c:de:57:ad:8b:72:41:b2:41:
eb:eb:80:89:d6:81:a9:74:f8:06:4f:48:e9:ac:d3:
84:22:7b:fc:3e:e5:c6:89:22:f2:66:a1:a6:5e:c6:
6f:c9:aa:89:b4:e6:86:fa:c2:0d:28:b8:20:9a:40:
ca:a8:db:67:f1:0a:73:51:3f:38:1a:47:52:d9:dd:
3a:08:04:7a:b4:76:23:b7:25:48:77:c1:8a:fd:be:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6F:BB:D2:F4:0C:AA:2D:C1:99:B9:D0:15:FE:16:DF:C5:92:AF:A4
X509v3 Authority Key Identifier:
keyid:9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/AG-70vQMqi3BmbnQFf4W38WSr6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/m650SgTJo03ccEApLOVZNEUGh2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.244.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:00:a4:ac:1f:b0:42:dc:93:47:28:fb:4d:5f:db:c0:48:6e:
52:8a:a9:fe:ea:02:9b:ce:77:e3:54:61:c8:7a:17:5a:53:28:
86:54:73:b2:65:71:1f:29:70:6c:0c:2b:42:7e:3b:5e:74:9b:
ce:0b:19:20:09:8e:95:3c:0f:e5:1c:61:14:80:8d:d3:08:57:
79:bc:78:87:9b:c9:bf:86:e2:21:8f:f2:50:44:d6:8a:66:d1:
e4:73:92:43:44:80:fd:27:ef:44:74:61:8f:49:9c:08:33:26:
9e:b6:04:e2:a8:9f:60:77:93:c0:5c:4f:5e:c0:64:bc:85:0b:
75:92:fc:d6:87:68:d2:12:20:91:14:f5:91:0f:3b:4e:9a:3f:
96:e9:b7:a9:66:08:3b:da:7e:d2:97:c4:59:36:be:d6:9a:de:
ac:19:d7:b0:62:fa:4b:2e:4a:2f:04:35:ed:ed:8f:86:ab:dd:
2b:1d:c4:94:d6:98:2c:1b:ec:a0:26:67:78:fb:22:a4:e2:df:
9f:95:57:58:f7:bf:3c:6e:39:5e:65:fc:e0:7c:59:64:89:09:
7a:60:4d:36:4b:f4:c9:6b:af:b4:39:fa:bd:91:eb:15:0b:80:
cc:2c:b3:3f:cc:8b:96:69:e1:ae:04:99:55:30:5e:e1:ff:3e:
a8:97:ef:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:59 2025 by rpki-client