Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/ekX2qd7EDdahCY_y1n4gjgTswkU.roa
File: ekX2qd7EDdahCY_y1n4gjgTswkU.roa (raw, json)
Hash identifier: l+b+5xfJEzyKk6KrNmqirkOI4/nEbh7PpTpvQIUNfII=
Subject key identifier: 7A:45:F6:A9:DE:C4:0D:D6:A1:09:8F:F2:D6:7E:20:8E:04:EC:C2:45
Certificate issuer: /CN=746fbabf2a255a9d78caa27efe8a5576995e5fc5
Certificate serial: 0187E7BBB9362A9DE790CCF6B0AF0713554D
Authority key identifier: 74:6F:BA:BF:2A:25:5A:9D:78:CA:A2:7E:FE:8A:55:76:99:5E:5F:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dG-6vyolWp14yqJ-_opVdpleX8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/ekX2qd7EDdahCY_y1n4gjgTswkU.roa
Signing time: Thu 04 May 2023 17:07:32 +0000
ROA not before: Thu 04 May 2023 17:07:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 37.140.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:bb:b9:36:2a:9d:e7:90:cc:f6:b0:af:07:13:55:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746fbabf2a255a9d78caa27efe8a5576995e5fc5
Validity
Not Before: May 4 17:07:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a45f6a9dec40dd6a1098ff2d67e208e04ecc245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:78:52:1c:65:9b:c6:08:c1:9c:00:ee:a3:
e8:18:fc:8a:cb:fc:ba:c1:3b:09:ed:d0:44:9e:45:
37:70:9f:9c:55:8d:fb:ea:5d:0a:fb:fd:ea:83:e5:
26:6f:15:f4:e3:b3:e9:4d:6d:6c:00:09:f3:80:95:
cc:4d:35:e3:0c:a1:88:c8:7d:9d:af:f9:44:12:ff:
ab:3c:cb:96:cd:3a:7e:38:3f:a2:c3:b0:2c:88:1e:
63:2c:9d:e8:37:8e:88:d4:ae:06:bc:f0:bd:4d:84:
4a:41:c4:9d:ef:28:79:fc:ff:91:93:f4:f3:3e:b4:
74:bd:69:fa:96:5f:62:91:b6:01:74:61:05:d4:db:
55:b1:1b:0a:f2:db:79:60:3c:15:73:4c:06:70:5b:
6f:90:38:fc:1b:9f:b9:39:91:94:07:cc:91:e4:7e:
dd:74:0d:df:74:80:3f:c7:f3:ee:73:6e:f2:85:0b:
05:d1:89:2c:ef:0e:9d:db:ef:d0:61:55:73:fa:e1:
5e:79:1e:10:c2:fb:4d:b0:18:38:2e:98:10:19:3a:
a2:3d:3c:4c:a9:f4:7a:e4:48:9b:c6:73:1b:ad:04:
a1:85:6d:02:dd:4b:d1:30:e2:aa:df:93:52:69:a4:
cc:33:a6:3b:b4:20:df:4c:0a:95:c1:ed:fc:5a:6f:
af:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:45:F6:A9:DE:C4:0D:D6:A1:09:8F:F2:D6:7E:20:8E:04:EC:C2:45
X509v3 Authority Key Identifier:
keyid:74:6F:BA:BF:2A:25:5A:9D:78:CA:A2:7E:FE:8A:55:76:99:5E:5F:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dG-6vyolWp14yqJ-_opVdpleX8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/ekX2qd7EDdahCY_y1n4gjgTswkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/dG-6vyolWp14yqJ-_opVdpleX8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:92:4a:4a:dc:71:0a:2c:55:10:81:e0:74:33:9f:c3:cb:05:
b9:1b:20:76:bd:21:d8:49:b7:45:fc:8d:22:29:05:49:67:88:
33:97:98:c5:53:d2:c9:24:c3:e4:f8:01:1b:9d:5f:7d:ea:f9:
da:5d:ae:d2:44:c3:85:6c:ac:2a:63:9e:76:56:11:91:a6:86:
27:0c:f6:cf:d8:db:ea:2e:9c:59:05:a0:f0:b7:51:f5:81:79:
d2:51:1e:a7:23:e9:4c:9d:e0:ef:11:40:b6:81:3e:a4:46:29:
8e:41:fd:37:f8:31:62:32:d7:96:89:08:66:d8:1c:1b:a8:d4:
5f:8f:b7:2e:65:4d:53:c3:c9:a5:fb:ea:62:1e:cf:58:4d:8e:
a5:26:82:9d:89:52:26:c5:40:76:3d:d1:1c:6a:0f:11:b2:44:
82:5a:55:37:b2:d9:b9:b3:2c:cf:34:5d:53:01:eb:4b:4d:ad:
41:4f:68:a7:ae:35:22:4c:23:d3:8e:ff:02:cd:ff:f3:f4:b4:
67:32:34:5f:81:95:5e:4c:b9:e4:0c:bf:37:d0:9f:41:e9:92:
3b:fb:14:d8:1f:59:7b:14:7f:0a:79:5a:74:34:64:9e:2c:a9:
2b:a3:9b:47:4f:56:64:b9:d7:52:c9:f9:2b:95:24:eb:b8:39:
16:d1:60:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:17 2024 by rpki-client on console-ams.rpki-client.org