Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/oE-UI4nwSPi_hf8kLb7icGzPt7w.roa
File: oE-UI4nwSPi_hf8kLb7icGzPt7w.roa (raw, json)
Hash identifier: B62xeYgyZQvJ0e94x+SClkpVJkL/5Un0gK4wzN3qMTE=
Subject key identifier: A0:4F:94:23:89:F0:48:F8:BF:85:FF:24:2D:BE:E2:70:6C:CF:B7:BC
Certificate issuer: /CN=76d85543445ec6d670cba7cb1ba981f09f588b83
Certificate serial: 018A292400C01FAC73E59899687A26AEAD86
Authority key identifier: 76:D8:55:43:44:5E:C6:D6:70:CB:A7:CB:1B:A9:81:F0:9F:58:8B:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dthVQ0RextZwy6fLG6mB8J9Yi4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/oE-UI4nwSPi_hf8kLb7icGzPt7w.roa
Signing time: Thu 24 Aug 2023 20:02:19 +0000
ROA not before: Thu 24 Aug 2023 20:02:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 37.140.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:29:24:00:c0:1f:ac:73:e5:98:99:68:7a:26:ae:ad:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d85543445ec6d670cba7cb1ba981f09f588b83
Validity
Not Before: Aug 24 20:02:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a04f942389f048f8bf85ff242dbee2706ccfb7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:54:86:80:a8:20:1b:73:80:66:7f:6e:cd:
29:90:15:27:71:32:b9:df:5e:e0:f9:1c:0b:75:1c:
eb:7d:ba:2b:42:95:f3:9a:58:b7:09:22:cf:78:e0:
fb:95:27:95:7c:49:13:b9:73:89:80:30:61:58:49:
4d:e9:fe:0e:a5:97:0c:30:45:f2:cb:98:f5:8e:6a:
db:6d:40:88:f9:e7:19:e1:97:6d:1a:21:eb:3b:ad:
58:3f:0a:a8:2e:29:d2:66:4c:35:7b:e2:70:8e:27:
d1:53:24:ce:25:04:36:d9:2b:93:54:9a:36:fa:2a:
60:0d:59:40:fa:89:27:17:f7:98:79:1f:b8:d3:34:
80:00:66:11:2b:67:1d:12:ff:5e:c9:60:7f:15:c3:
c5:e1:fd:94:19:75:06:cb:ef:0d:20:8a:5b:4f:5e:
a9:f3:42:ee:03:da:32:30:b4:6c:ef:f8:f2:5f:ab:
a1:c3:2b:6e:cf:b5:6e:be:e9:e8:e1:dc:4a:94:13:
f3:4b:24:b8:88:fa:64:74:25:62:47:65:e7:19:41:
74:93:90:68:2b:9b:d5:bc:31:25:f7:08:ab:ef:46:
e0:09:77:72:c9:8a:95:d1:4d:1f:d6:62:30:39:82:
b2:99:de:0a:8b:c4:7c:14:a8:69:60:dc:13:39:8a:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4F:94:23:89:F0:48:F8:BF:85:FF:24:2D:BE:E2:70:6C:CF:B7:BC
X509v3 Authority Key Identifier:
keyid:76:D8:55:43:44:5E:C6:D6:70:CB:A7:CB:1B:A9:81:F0:9F:58:8B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dthVQ0RextZwy6fLG6mB8J9Yi4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/oE-UI4nwSPi_hf8kLb7icGzPt7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/dthVQ0RextZwy6fLG6mB8J9Yi4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.242.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ae:6a:4f:e5:eb:87:e8:71:9e:59:19:7f:58:67:75:9c:62:
e1:b6:de:be:78:05:5e:7d:7e:dc:cd:71:07:ef:49:a3:b1:cc:
9e:85:24:86:b1:b2:5f:55:cc:5c:52:06:c3:37:13:cd:45:15:
bb:b8:18:48:0d:8c:7b:c3:ed:bd:75:98:b3:13:86:9b:97:8e:
7e:94:08:b1:e0:26:bd:3c:23:91:33:0b:25:d3:7c:a1:ad:46:
2c:88:51:7f:79:83:52:ef:43:34:10:73:7f:07:ea:c4:79:06:
0f:3c:83:b9:81:38:7a:99:c5:39:69:04:0e:2b:57:ba:10:34:
a9:86:44:f4:c0:24:a2:c8:65:27:e4:8d:89:15:ff:34:e8:3c:
7f:d3:c0:ef:af:ae:a9:6f:aa:ea:57:78:7d:14:4a:28:02:20:
25:b1:5a:a4:9a:78:77:84:60:4e:55:9c:5f:53:c9:5a:8a:79:
d6:8a:1e:16:e3:74:47:a5:39:9b:4b:14:9f:2a:d5:27:8b:5d:
d1:67:c4:c2:17:75:0c:c8:d3:e5:1b:cc:f8:de:65:8f:a0:4c:
90:b1:c9:a7:fa:53:1c:05:4a:e9:99:55:71:bb:4b:ad:83:da:
15:f2:9a:ba:36:a0:1b:24:79:2a:a4:24:7e:03:98:ac:4a:d7:
a8:bf:41:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:00 2025 by rpki-client