Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/A_UMnX1kNAi3qMGsFOLLlA55v1w.roa
File: A_UMnX1kNAi3qMGsFOLLlA55v1w.roa (raw, json)
Hash identifier: 64rI1WCtmtJvM7PcW1hAkOMT+/bMqOpbGEjuRDWSVrA=
Subject key identifier: 03:F5:0C:9D:7D:64:34:08:B7:A8:C1:AC:14:E2:CB:94:0E:79:BF:5C
Certificate issuer: /CN=9bae744a04c9a34ddc7040292ce559344506876c
Certificate serial: 018754F4FEFE436198EC05EEC4F436EF0EFE
Authority key identifier: 9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/A_UMnX1kNAi3qMGsFOLLlA55v1w.roa
Signing time: Thu 06 Apr 2023 05:05:54 +0000
ROA not before: Thu 06 Apr 2023 05:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 37.140.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:54:f4:fe:fe:43:61:98:ec:05:ee:c4:f4:36:ef:0e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bae744a04c9a34ddc7040292ce559344506876c
Validity
Not Before: Apr 6 05:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03f50c9d7d643408b7a8c1ac14e2cb940e79bf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:94:b2:8c:88:39:47:38:6a:76:4f:96:69:
1a:e5:ca:55:be:6b:6b:4e:df:2b:43:df:c1:a5:08:
6b:be:44:d7:53:83:10:1e:90:2e:a7:ed:64:05:e4:
a4:1c:30:f5:c1:0c:73:4d:a9:83:92:f3:4b:d1:e8:
73:86:7a:9a:db:14:8b:7e:ef:12:7c:a6:ba:aa:5f:
49:bf:62:1c:5f:82:45:06:8a:c7:80:5b:9f:6a:3e:
65:09:f9:42:66:50:2c:41:c3:c9:73:05:b7:4b:29:
fa:39:39:54:fb:0c:7a:9b:c9:2e:b7:77:3f:71:d1:
76:b8:18:ac:76:cb:2c:60:8d:de:6d:cd:62:24:78:
bb:98:e3:97:6d:6b:c3:8b:ad:65:39:15:37:62:99:
ee:01:fa:95:16:59:57:c3:d9:46:d6:d6:42:3d:01:
20:04:99:f9:bb:38:8f:6c:29:a6:58:d6:f5:56:17:
48:df:34:78:1b:df:a5:67:00:9c:f8:2e:c7:9e:dd:
91:ed:b9:ac:03:d1:c1:e2:66:e3:3a:1e:9e:59:e6:
2a:cc:f2:bf:f2:88:d2:0e:4d:05:34:ec:33:35:c1:
b7:85:14:0f:56:10:70:2a:78:bd:a1:22:3a:bd:2c:
63:e5:70:18:f8:05:ba:7a:68:3c:84:8f:f0:73:80:
03:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F5:0C:9D:7D:64:34:08:B7:A8:C1:AC:14:E2:CB:94:0E:79:BF:5C
X509v3 Authority Key Identifier:
keyid:9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/A_UMnX1kNAi3qMGsFOLLlA55v1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/m650SgTJo03ccEApLOVZNEUGh2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.244.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:de:c4:0a:b6:6e:32:0c:47:b3:fe:03:c2:16:5d:96:e3:36:
51:ec:34:6f:0d:04:16:e2:be:f4:40:ff:c5:11:af:a8:d9:5f:
bd:f8:6e:46:18:3a:a6:b3:38:01:3f:a7:2f:45:2b:21:58:73:
ff:38:d2:2d:16:d0:66:7b:96:34:0a:a7:3c:30:29:f6:2b:56:
ca:f0:94:e1:83:ec:4e:6c:08:e8:b7:a8:8a:bd:a2:7a:ac:2e:
0a:56:0d:53:44:5f:86:ea:10:a3:45:85:6a:c8:4c:c7:09:d7:
41:86:e6:b3:56:46:11:3d:58:7d:34:3c:22:c8:52:18:a3:06:
6b:1a:17:0c:0c:10:f1:8e:1b:08:76:26:09:fb:3e:5b:37:52:
ae:b0:2a:4d:f3:ec:71:be:b8:83:1d:39:6c:2b:4d:f7:ed:3b:
5f:a1:c5:3f:41:ad:51:5a:db:57:ce:9c:cb:8e:78:f5:85:13:
26:94:8e:ee:bc:8e:07:3b:6e:2a:1d:fa:1c:68:49:ca:9c:18:
18:e5:41:4e:c5:a4:ab:48:7d:a6:d5:81:04:b0:20:5e:de:f7:
4c:5c:e4:37:c4:4c:99:3f:e3:76:68:6f:a3:a4:69:71:04:b0:
ea:08:1c:4e:8a:46:61:ec:09:6f:d0:f0:95:60:4d:fd:6f:f2:
a8:d7:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:47 2024 by rpki-client on console-ams.rpki-client.org