Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e8e0cb-2798-4062-88de-7d5de8936211/1/_RJ-sY2apTLVaKZWh8PtvHYzz90.roa
File: _RJ-sY2apTLVaKZWh8PtvHYzz90.roa (raw, json)
Hash identifier: MJ0crOF3n1zHo6dQNnmRxKYDmI2L9wqxuKeXXmk6SS0=
Subject key identifier: FD:12:7E:B1:8D:9A:A5:32:D5:68:A6:56:87:C3:ED:BC:76:33:CF:DD
Certificate issuer: /CN=9e610c21cb44d6385b7f445c65580add7fecf8e0
Certificate serial: 44E7
Authority key identifier: 9E:61:0C:21:CB:44:D6:38:5B:7F:44:5C:65:58:0A:DD:7F:EC:F8:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmEMIctE1jhbf0RcZVgK3X_s-OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e8e0cb-2798-4062-88de-7d5de8936211/1/_RJ-sY2apTLVaKZWh8PtvHYzz90.roa
Signing time: Tue 25 Jan 2022 18:23:20 +0000
ROA not before: Tue 25 Jan 2022 18:23:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 37.16.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17639 (0x44e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e610c21cb44d6385b7f445c65580add7fecf8e0
Validity
Not Before: Jan 25 18:23:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd127eb18d9aa532d568a65687c3edbc7633cfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:b4:ac:b6:6c:ca:4b:d1:78:8d:12:89:31:
7f:6f:89:17:c9:53:5b:7a:6b:70:6b:ff:63:b6:6c:
74:42:4f:56:8a:ac:81:e1:06:87:44:37:75:49:4a:
27:fc:3a:98:67:d1:a9:28:61:40:ac:15:be:35:28:
2d:5c:dc:d3:b3:a8:57:50:a8:93:d6:d3:05:35:0d:
12:11:03:6c:d1:8c:80:7e:a4:dc:7b:b7:c7:db:40:
aa:dd:8c:7e:38:ff:18:ba:b5:24:8a:25:34:fc:29:
5e:4e:34:17:a1:57:fc:c1:9b:b3:d2:dd:92:ea:dc:
ac:06:2c:cd:86:7a:4d:b3:2f:a3:f5:4d:d9:cc:d0:
8b:4f:e4:ca:0e:82:20:4e:02:fb:ed:ba:63:a1:c1:
72:8d:2b:5d:c3:8c:a7:e8:11:db:b6:cf:41:b1:6c:
f9:e1:a4:65:e1:88:89:6f:e1:08:46:41:89:67:d5:
62:96:a4:55:a5:9e:46:fd:3f:87:df:09:f0:10:b5:
81:5f:cb:f1:40:1d:9c:23:ff:00:89:75:a5:ae:cb:
6f:d5:ab:ad:e1:64:c2:70:63:ad:bc:42:04:08:a3:
f3:90:2f:a2:57:7c:d2:2c:fa:c3:76:74:57:a1:38:
49:75:d3:2a:ec:9b:51:e7:5e:9d:d8:7f:cd:f6:c5:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:7E:B1:8D:9A:A5:32:D5:68:A6:56:87:C3:ED:BC:76:33:CF:DD
X509v3 Authority Key Identifier:
keyid:9E:61:0C:21:CB:44:D6:38:5B:7F:44:5C:65:58:0A:DD:7F:EC:F8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmEMIctE1jhbf0RcZVgK3X_s-OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e8e0cb-2798-4062-88de-7d5de8936211/1/_RJ-sY2apTLVaKZWh8PtvHYzz90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e8e0cb-2798-4062-88de-7d5de8936211/1/nmEMIctE1jhbf0RcZVgK3X_s-OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.88.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2b:50:30:4b:e4:03:44:c8:60:8f:4e:09:84:c9:78:87:c2:
1f:89:45:c2:44:0d:81:2f:ec:bd:6e:ac:40:de:ce:1b:87:58:
29:9a:d6:a7:1e:4f:06:f5:84:2d:2e:f7:11:06:0a:d0:b1:96:
8b:b7:85:a0:c3:d8:1f:79:a3:ee:cf:a7:88:04:f9:e9:4e:70:
f6:1c:66:07:2b:7f:01:90:44:0a:c7:7c:3b:b6:eb:38:02:f6:
90:5c:5e:35:d3:cb:61:cf:4a:a6:98:e3:d9:9f:20:7f:1b:a2:
ca:77:d4:d2:29:c8:55:8b:4a:cb:10:2a:94:e9:c3:3c:97:ac:
68:bf:65:60:ff:6a:1e:40:27:0f:6b:a6:a4:46:5c:53:a9:17:
f6:0a:f3:ab:22:c6:4c:1a:d0:5d:eb:d3:f5:8a:78:6b:b8:7a:
f7:da:8e:53:1c:af:3e:d7:9b:9c:84:a3:7f:c6:55:4e:a7:72:
a2:14:b5:ac:84:ac:f5:af:90:17:2e:cf:d0:22:e7:88:3a:6d:
47:c6:fe:98:d7:c7:9b:64:13:fd:0d:c5:80:38:dd:af:33:87:
39:6d:f2:29:17:86:fa:32:77:6a:4e:96:fa:a9:fb:13:9d:39:
93:54:de:f1:65:1f:21:57:7e:23:fa:fc:cf:ae:c2:91:c4:a0:
3e:c4:99:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org