Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/S-w_DNvI77asG8PN2xVRMYNatCk.roa
File: S-w_DNvI77asG8PN2xVRMYNatCk.roa (raw, json)
Hash identifier: ZhbcRwaxEYgpey+EA0coV++Pv2GMDyhe9K0XHqfOvpc=
Subject key identifier: 4B:EC:3F:0C:DB:C8:EF:B6:AC:1B:C3:CD:DB:15:51:31:83:5A:B4:29
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 018C1735F6647CEC94455792F128413D70A5
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/S-w_DNvI77asG8PN2xVRMYNatCk.roa
Signing time: Tue 28 Nov 2023 18:34:21 +0000
ROA not before: Tue 28 Nov 2023 18:34:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52320
IP address blocks: 146.19.189.0/24 maxlen: 24
195.225.98.0/24 maxlen: 24
37.72.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:17:35:f6:64:7c:ec:94:45:57:92:f1:28:41:3d:70:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Nov 28 18:34:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bec3f0cdbc8efb6ac1bc3cddb155131835ab429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:31:5b:ee:f7:c1:c1:16:bf:29:6e:41:0b:58:
70:4f:02:cd:e6:e7:a1:d7:08:e5:ea:96:31:4a:c6:
b0:af:13:55:58:d6:72:d7:fa:81:34:f2:f9:fa:cc:
5b:af:59:35:ed:9f:18:5a:65:80:6b:ed:74:ce:00:
d6:b2:32:68:92:90:a1:b4:04:a9:54:3a:12:81:67:
ad:67:a4:ff:c6:16:b0:86:3c:d5:86:26:a8:ef:9f:
4f:4b:4e:99:8e:08:3b:94:d9:73:6c:51:47:c2:e9:
12:d1:d5:9c:fa:c6:26:3f:7d:57:8e:a8:24:c9:6c:
05:6b:e1:14:aa:4f:72:1a:87:be:fb:a2:df:c8:70:
d8:2d:3a:b4:da:33:38:49:92:10:87:df:40:c3:db:
92:8d:2a:01:79:d1:6c:b6:a8:52:13:39:74:df:ff:
c1:a2:17:20:db:b6:c6:d6:15:31:ba:0f:33:09:8a:
bb:af:4d:c3:42:9d:62:f1:b8:40:53:b5:5c:56:1d:
eb:0a:19:b2:01:a0:9b:e3:5b:ae:77:69:67:cc:e9:
3f:ac:41:d3:4e:22:d0:77:07:87:9f:a7:a5:ee:93:
0b:4e:85:36:25:2b:b5:6a:6f:ff:70:f5:3d:2c:3f:
97:4a:68:4d:bb:38:ff:6c:1d:b1:b9:c2:d4:b3:79:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EC:3F:0C:DB:C8:EF:B6:AC:1B:C3:CD:DB:15:51:31:83:5A:B4:29
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/S-w_DNvI77asG8PN2xVRMYNatCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.135.0/24
146.19.189.0/24
195.225.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a1:65:fd:db:3d:b1:37:a9:06:0d:e7:65:f6:a4:ab:73:1c:
9d:50:d0:33:a6:c1:ca:77:6d:5b:c3:92:6c:8b:cf:82:1e:8b:
27:20:71:6c:5b:d1:f4:b4:d2:4d:f2:1b:a8:fc:31:58:b7:87:
21:6d:f2:e9:56:7f:6a:62:f1:78:03:7a:21:e0:12:fc:48:f2:
f3:86:32:3c:7b:41:bf:27:43:50:44:67:c0:36:46:6a:ea:d4:
57:07:84:82:d2:ed:13:6f:83:74:75:49:e7:6e:23:a8:a2:90:
21:38:fb:ac:c7:2b:db:23:d1:d6:4b:53:47:3c:19:13:a7:3e:
39:eb:17:f1:1d:92:de:c7:eb:c9:1b:ab:da:3e:ba:6a:49:e5:
3f:9d:5a:63:84:86:85:ab:11:a2:02:54:04:f2:d4:53:50:c3:
5a:52:2f:05:ac:cd:0a:d2:4f:51:97:f2:36:b1:1b:7c:6e:eb:
a5:74:51:a5:d6:0d:d9:db:f6:87:ab:a7:43:a5:7c:bb:0d:6e:
d9:e3:12:fa:fc:60:ad:f7:d2:b2:cc:99:2c:9d:a5:1a:ad:59:
70:31:1e:7d:58:29:c0:dd:2a:3a:5d:ed:60:ed:af:c5:b0:fa:
59:6a:c4:4e:b9:48:d0:ef:2d:6c:08:f0:4a:7d:67:46:a3:a0:
30:cd:15:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:10 2025 by rpki-client