Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/7nGrGlNYtjGJ6-fEX5Dtp-IFbeM.roa
File: 7nGrGlNYtjGJ6-fEX5Dtp-IFbeM.roa (raw, json)
Hash identifier: GrXwpuf1Iq26M8ejz+tBJQCJTruHimGKzLAx7mdPmYo=
Subject key identifier: EE:71:AB:1A:53:58:B6:31:89:EB:E7:C4:5F:90:ED:A7:E2:05:6D:E3
Certificate issuer: /CN=746fbabf2a255a9d78caa27efe8a5576995e5fc5
Certificate serial: 01879E94C6C5360668CD0150BF1010B865E9
Authority key identifier: 74:6F:BA:BF:2A:25:5A:9D:78:CA:A2:7E:FE:8A:55:76:99:5E:5F:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dG-6vyolWp14yqJ-_opVdpleX8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/7nGrGlNYtjGJ6-fEX5Dtp-IFbeM.roa
Signing time: Thu 20 Apr 2023 12:12:42 +0000
ROA not before: Thu 20 Apr 2023 12:12:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199242
IP address blocks: 37.140.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:94:c6:c5:36:06:68:cd:01:50:bf:10:10:b8:65:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746fbabf2a255a9d78caa27efe8a5576995e5fc5
Validity
Not Before: Apr 20 12:12:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee71ab1a5358b63189ebe7c45f90eda7e2056de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:2e:96:25:1b:e3:33:56:cd:0a:6e:b6:18:
4b:42:51:d2:80:1a:30:ba:99:80:51:74:95:17:d3:
b9:a4:d0:e6:34:70:be:42:f0:1a:bf:fb:08:c5:1f:
9f:2d:96:67:28:1e:2f:f2:4a:59:38:a9:5a:18:e6:
b9:63:1f:22:82:bd:1e:f4:1c:81:7f:f1:f5:ab:de:
4d:e4:55:60:76:3e:3e:1b:61:e8:ba:5d:6b:79:71:
7b:4b:3d:5d:5c:0f:29:f6:3c:9a:af:b8:65:20:67:
82:3c:f1:55:9f:e6:25:f6:60:1f:2e:87:1f:0e:ed:
94:1f:b8:65:34:5b:06:c7:61:22:d0:1e:87:5b:7e:
56:28:72:5e:89:fc:43:61:6a:bd:a5:47:0e:a6:5c:
81:cb:18:3b:e3:4f:f7:42:f8:5f:2a:f8:a8:cb:fc:
c2:a0:6d:62:cb:40:94:0f:18:8f:41:69:94:99:cc:
05:ba:c7:48:e3:46:bf:45:77:76:5d:b2:a6:8e:20:
e4:83:20:98:4e:c3:52:89:e4:07:bf:9a:aa:21:4c:
b2:3f:6a:42:39:fa:aa:f0:87:d5:6f:aa:cb:15:e1:
50:cb:7b:e4:4f:63:b0:ec:a8:06:57:3d:d1:a3:db:
c6:63:22:4a:9d:de:ae:25:ad:f4:42:6a:3c:d8:28:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:71:AB:1A:53:58:B6:31:89:EB:E7:C4:5F:90:ED:A7:E2:05:6D:E3
X509v3 Authority Key Identifier:
keyid:74:6F:BA:BF:2A:25:5A:9D:78:CA:A2:7E:FE:8A:55:76:99:5E:5F:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dG-6vyolWp14yqJ-_opVdpleX8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/7nGrGlNYtjGJ6-fEX5Dtp-IFbeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/dG-6vyolWp14yqJ-_opVdpleX8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.253.0/24
Signature Algorithm: sha256WithRSAEncryption
33:22:07:6d:4c:3c:d8:07:cc:ef:d6:e6:73:3f:2e:57:95:3f:
44:52:0c:f7:05:93:e8:8b:12:dc:a1:9c:d8:97:bc:af:9b:21:
e2:04:36:10:47:43:9b:f1:25:f2:45:67:f6:27:84:53:05:31:
61:e4:74:6d:0d:f9:17:51:71:44:75:bf:d6:72:d3:06:5f:87:
47:b8:d2:82:23:c2:67:ca:cb:76:9f:0b:c5:39:18:bb:e0:8a:
21:ce:e3:cf:9d:26:0d:f8:eb:ae:ec:4c:86:06:63:be:0a:e7:
34:ca:9a:42:29:e5:53:86:13:42:29:af:9a:97:d4:3a:d4:85:
e6:23:ed:79:c1:cc:9c:3c:a8:d6:6a:d3:58:0b:30:bc:ea:4a:
d7:0d:ff:11:50:e7:eb:a3:d3:9a:71:f8:0b:25:b9:24:bb:15:
23:25:29:f0:75:24:0e:8d:ca:ca:30:0c:8c:b0:d3:63:7b:8e:
60:2a:ad:88:5e:e7:09:8c:4a:93:2d:76:8f:40:38:17:3a:8a:
8a:3f:15:58:5f:23:c7:4e:51:01:60:7f:50:bb:ad:db:92:4b:
cc:d6:d4:a4:19:5d:ae:b7:0b:61:0c:18:c2:42:9b:b7:87:97:
c4:e2:01:38:ad:fd:4c:de:f7:00:5e:2e:06:aa:43:4e:1b:f0:
c3:bf:63:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:39 2024 by rpki-client on console-fra.rpki-client.org