Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/L3nDY020J3qCKOctVpj3Hcc0nlc.roa
File: L3nDY020J3qCKOctVpj3Hcc0nlc.roa (raw, json)
Hash identifier: BTiAoze3M6nR8cORmffEXt+1TLf/F5Sr1eUmRsK2UAE=
Subject key identifier: 2F:79:C3:63:4D:B4:27:7A:82:28:E7:2D:56:98:F7:1D:C7:34:9E:57
Certificate issuer: /CN=76d85543445ec6d670cba7cb1ba981f09f588b83
Certificate serial: 0187347ABF807448AE7A6C4C9CF3BDF2AB5B
Authority key identifier: 76:D8:55:43:44:5E:C6:D6:70:CB:A7:CB:1B:A9:81:F0:9F:58:8B:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dthVQ0RextZwy6fLG6mB8J9Yi4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/L3nDY020J3qCKOctVpj3Hcc0nlc.roa
Signing time: Thu 30 Mar 2023 21:44:32 +0000
ROA not before: Thu 30 Mar 2023 21:44:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207709
IP address blocks: 37.140.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:34:7a:bf:80:74:48:ae:7a:6c:4c:9c:f3:bd:f2:ab:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d85543445ec6d670cba7cb1ba981f09f588b83
Validity
Not Before: Mar 30 21:44:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f79c3634db4277a8228e72d5698f71dc7349e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:fc:2d:d5:ce:73:00:0b:01:e1:82:cc:65:
6a:f5:cb:fa:8a:0b:e3:5d:95:f4:9d:9d:5c:dc:77:
e9:8d:ad:45:6f:26:0a:4d:d6:70:59:1d:37:fa:6e:
9d:7c:12:29:cb:96:63:6b:e8:98:73:88:8c:5e:41:
e9:b8:85:6c:3b:21:fd:c7:03:e5:c3:1c:41:58:47:
d0:9e:b1:77:10:f3:e8:b5:6e:07:33:32:4c:bc:7c:
76:27:56:e6:a5:aa:0d:ed:55:06:26:55:52:35:6e:
d3:9b:59:0b:ec:9c:cf:35:b7:5a:25:37:5f:2b:8c:
4b:de:79:9e:85:d8:0c:95:9d:78:55:7f:25:63:34:
75:57:3d:f1:72:3b:da:fe:19:3d:46:89:e5:50:fe:
e5:97:d1:6a:aa:d4:02:8d:ea:99:05:8d:f4:31:f4:
81:65:d5:8f:26:d0:28:65:24:f3:70:af:0a:a1:8d:
de:7c:89:ec:1f:32:88:51:e7:c4:d3:b3:f6:9c:f2:
b2:d7:8c:fa:77:26:26:f9:2a:a1:22:4f:a4:fa:6d:
c4:c5:3e:17:e4:62:62:1c:f3:a8:40:df:a5:2f:e3:
28:67:ef:0b:03:5f:b7:50:69:b5:a3:c3:da:e9:4e:
ed:3a:7e:50:50:17:40:88:80:f4:ca:7c:99:06:26:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:79:C3:63:4D:B4:27:7A:82:28:E7:2D:56:98:F7:1D:C7:34:9E:57
X509v3 Authority Key Identifier:
keyid:76:D8:55:43:44:5E:C6:D6:70:CB:A7:CB:1B:A9:81:F0:9F:58:8B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dthVQ0RextZwy6fLG6mB8J9Yi4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/L3nDY020J3qCKOctVpj3Hcc0nlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/dthVQ0RextZwy6fLG6mB8J9Yi4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.242.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3d:89:ee:40:b1:3b:3d:af:47:c4:19:5a:a6:47:d3:84:22:
27:bf:e0:b5:c8:36:3b:c3:c2:53:bd:d3:e3:0f:41:3e:ed:18:
8c:de:3f:f4:98:b5:23:22:a2:3d:d7:d7:4c:93:81:3b:1f:51:
1f:22:57:f8:cc:a6:0b:4d:af:d7:56:82:c7:2d:b6:64:91:7a:
2a:b2:b5:9a:9e:1e:6e:21:fb:b6:a4:66:23:41:ec:34:1d:27:
13:3d:af:b6:5d:67:a2:06:59:3b:ec:7c:d8:fe:8d:a8:a9:54:
4e:27:63:a6:fb:00:3c:52:60:8b:87:0c:79:1a:a0:8c:30:ee:
1d:54:6b:0d:f2:9a:09:b5:2a:8d:d3:9f:2b:de:23:76:40:73:
96:4d:fe:2f:10:e8:3d:a8:14:8b:88:76:27:a2:c4:c0:40:36:
b3:9a:de:0b:69:54:24:96:79:6d:d3:18:10:05:30:4e:47:2a:
3a:bc:6b:91:d4:b1:4b:58:11:b0:04:fc:78:a4:b6:1e:08:d7:
4c:8d:d6:fe:9f:30:34:9d:ef:7c:64:48:7f:67:5c:b7:60:cc:
5d:63:bf:0f:84:ee:07:15:01:aa:28:1b:e0:0a:f5:55:33:d5:
17:64:69:28:02:54:19:2c:9a:9b:3b:50:1b:ec:74:c7:aa:88:
59:24:7d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:57 2024 by rpki-client on console-fra.rpki-client.org