Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/G7FcyiIw4qqXeCXRUVzd4ZeLHHY.roa
File: G7FcyiIw4qqXeCXRUVzd4ZeLHHY.roa (raw, json)
Hash identifier: H9FWaeklxQGvzQcHNYKiDesKWl2GG/ogjbUEzmKLvRA=
Subject key identifier: 1B:B1:5C:CA:22:30:E2:AA:97:78:25:D1:51:5C:DD:E1:97:8B:1C:76
Certificate issuer: /CN=9bae744a04c9a34ddc7040292ce559344506876c
Certificate serial: 01875B556B17F8B7C739CAFA390A3440A72B
Authority key identifier: 9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/G7FcyiIw4qqXeCXRUVzd4ZeLHHY.roa
Signing time: Fri 07 Apr 2023 10:48:57 +0000
ROA not before: Fri 07 Apr 2023 10:48:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 37.140.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5b:55:6b:17:f8:b7:c7:39:ca:fa:39:0a:34:40:a7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bae744a04c9a34ddc7040292ce559344506876c
Validity
Not Before: Apr 7 10:48:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bb15cca2230e2aa977825d1515cdde1978b1c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bc:72:01:4e:96:27:db:64:0e:32:2c:c0:b4:
9b:ae:30:02:0d:1f:cc:a8:35:91:fd:9a:8d:f8:f8:
8d:b4:27:ea:44:a0:5c:a5:bb:48:f9:20:9c:6f:48:
a8:0d:c8:d4:b0:c1:07:10:8a:4d:a8:63:cb:51:6d:
8b:8e:a1:74:7a:32:d4:ce:90:d3:7f:83:f7:3f:3e:
90:e3:54:85:4c:65:aa:8e:04:06:e9:59:2e:19:a4:
26:88:9c:c3:2d:cc:c3:8d:7a:91:35:3a:2e:2d:b9:
ed:52:40:ca:91:e8:b8:23:fe:3d:29:2a:0a:4d:8d:
97:3c:4a:61:dd:c9:af:10:7c:fd:56:70:7d:53:b6:
22:f6:50:8d:29:a9:94:1d:72:d8:ba:5d:66:42:b7:
2e:94:2b:14:ea:b0:fb:43:fd:7c:eb:12:84:20:fb:
30:7d:71:11:9b:b4:4b:0b:1f:54:97:5b:de:60:92:
43:75:51:7d:e7:8c:64:b1:6c:f5:21:6f:57:3d:42:
b6:9e:cd:c6:08:76:1b:89:0a:10:3a:0d:92:3b:cf:
67:47:b4:2f:47:99:f1:b5:56:db:a2:ce:7a:5c:f6:
c8:36:f6:53:be:b5:b3:9d:bf:36:2e:c8:f5:f1:3c:
b2:69:77:ac:cb:91:34:58:12:c7:4b:17:44:46:f8:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B1:5C:CA:22:30:E2:AA:97:78:25:D1:51:5C:DD:E1:97:8B:1C:76
X509v3 Authority Key Identifier:
keyid:9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/G7FcyiIw4qqXeCXRUVzd4ZeLHHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/m650SgTJo03ccEApLOVZNEUGh2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.244.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f3:c0:de:7f:42:a4:4a:1c:ad:38:17:9d:f2:f7:b5:f6:ad:
e5:7c:6c:ec:e1:a2:9e:6b:03:cd:e9:e0:3c:3f:35:87:52:1c:
4f:a1:9a:55:e5:29:21:c4:03:f5:b4:99:39:01:a9:8d:8c:4e:
6a:70:f9:ca:e2:8c:60:df:96:5c:f9:d3:9d:55:ad:9a:84:52:
62:77:53:2d:84:d7:8c:aa:78:f2:57:30:5a:5f:50:e6:7a:79:
8d:68:a0:8b:94:84:cb:a1:8f:d1:e8:e1:7f:0e:3c:92:61:57:
5f:97:67:69:98:59:b3:9c:ff:6e:f2:80:02:b0:70:30:7e:2d:
e3:65:37:61:9b:65:59:f2:a6:01:eb:3a:15:5a:17:1f:30:8f:
5b:90:23:28:5f:89:2e:54:e7:52:a0:66:25:eb:11:9e:ae:da:
38:f2:9b:9e:da:4a:c5:15:71:3e:bb:d0:df:34:3d:80:75:0b:
0e:da:cf:66:7f:4c:90:17:03:54:8f:64:cf:27:4d:58:a7:53:
b1:53:c1:39:ec:72:8d:7a:52:ce:cf:d5:a4:83:38:48:5b:42:
9a:04:38:aa:5f:c5:41:89:af:68:ef:fc:4e:cb:88:d0:f8:38:
cb:2a:86:65:78:aa:86:bc:74:0c:3d:86:2f:c5:27:01:19:9d:
ce:f6:2f:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdbVWsX+LfHOcr6OQo0QKcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYWU3NDRhMDRjOWEzNGRkYzcwNDAyOTJjZTU1OTM0NDUw
Njg3NmMwHhcNMjMwNDA3MTA0ODU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmIxNWNjYTIyMzBlMmFhOTc3ODI1ZDE1MTVjZGRlMTk3OGIxYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbxyAU6WJ9tkDjIswLSbrjACDR/M
qDWR/ZqN+PiNtCfqRKBcpbtI+SCcb0ioDcjUsMEHEIpNqGPLUW2LjqF0ejLUzpDT
f4P3Pz6Q41SFTGWqjgQG6VkuGaQmiJzDLczDjXqRNTouLbntUkDKkei4I/49KSoK
TY2XPEph3cmvEHz9VnB9U7Yi9lCNKamUHXLYul1mQrculCsU6rD7Q/186xKEIPsw
fXERm7RLCx9Ul1veYJJDdVF954xksWz1IW9XPUK2ns3GCHYbiQoQOg2SO89nR7Qv
R5nxtVbbos56XPbINvZTvrWznb82Lsj18TyyaXesy5E0WBLHSxdERvi0owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBuxXMoiMOKql3gl0VFc3eGXixx2MB8GA1UdIwQY
MBaAFJuudEoEyaNN3HBAKSzlWTRFBodsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTY1MFNnVEpvMDNjY0VBcExPVlpORVVHaDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lMzg2N2YtMWQ2MC00ODllLTgzYWQt
NmMzZTc2NmNhYTFmLzEvRzdGY3lpSXc0cXFYZUNYUlVWemQ0WmVMSEhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lMzg2N2YtMWQ2MC00ODllLTgzYWQtNmMzZTc2NmNhYTFm
LzEvbTY1MFNnVEpvMDNjY0VBcExPVlpORVVHaDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYz0MA0G
CSqGSIb3DQEBCwUAA4IBAQAM88Def0KkShytOBed8ve19q3lfGzs4aKeawPN6eA8
PzWHUhxPoZpV5SkhxAP1tJk5AamNjE5qcPnK4oxg35Zc+dOdVa2ahFJid1MthNeM
qnjyVzBaX1DmenmNaKCLlITLoY/R6OF/DjySYVdfl2dpmFmznP9u8oACsHAwfi3j
ZTdhm2VZ8qYB6zoVWhcfMI9bkCMoX4kuVOdSoGYl6xGerto48pue2krFFXE+u9Df
ND2AdQsO2s9mf0yQFwNUj2TPJ01Yp1OxU8E57HKNelLOz9WkgzhIW0KaBDiqX8VB
ia9o7/xOy4jQ+DjLKoZleKqGvHQMPYYvxScBGZ3O9i8/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:56 2024 by rpki-client on console-fra.rpki-client.org