Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/tK1H6qvZUBQrKZb_ijOJWO9wqyU.roa
File: tK1H6qvZUBQrKZb_ijOJWO9wqyU.roa (raw, json)
Hash identifier: vkhU5yKRHNwo4K4XGfCHr+n6R28a7Cn8MvRVLPE5Bfw=
Subject key identifier: B4:AD:47:EA:AB:D9:50:14:2B:29:96:FF:8A:33:89:58:EF:70:AB:25
Certificate issuer: /CN=746fbabf2a255a9d78caa27efe8a5576995e5fc5
Certificate serial: 0182207743C38273500F3B3048DED705B947
Authority key identifier: 74:6F:BA:BF:2A:25:5A:9D:78:CA:A2:7E:FE:8A:55:76:99:5E:5F:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dG-6vyolWp14yqJ-_opVdpleX8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/tK1H6qvZUBQrKZb_ijOJWO9wqyU.roa
Signing time: Thu 21 Jul 2022 11:14:23 +0000
ROA not before: Thu 21 Jul 2022 11:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 37.140.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:77:43:c3:82:73:50:0f:3b:30:48:de:d7:05:b9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746fbabf2a255a9d78caa27efe8a5576995e5fc5
Validity
Not Before: Jul 21 11:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4ad47eaabd950142b2996ff8a338958ef70ab25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:30:dc:b4:f5:81:c2:4c:71:4f:e4:79:c9:ef:
34:c1:0f:ee:40:95:4d:d0:af:9a:46:84:4c:18:bb:
ba:c3:84:90:46:b5:7f:ff:3b:d4:a4:26:5b:39:6a:
26:dd:ea:50:fd:e3:69:f5:73:29:15:31:f4:d3:2a:
9a:77:f3:28:16:8a:bb:b2:0b:5e:23:af:5c:87:c8:
cf:d2:5f:4d:e6:4b:c9:67:73:dd:89:09:62:87:d7:
8b:bc:26:52:37:43:a7:1b:be:d7:1e:e1:25:88:5a:
11:48:c0:3a:20:f0:f1:ef:ad:d1:2d:25:0d:f0:46:
6c:1e:78:51:a6:7c:ab:81:ee:87:b4:d9:92:31:42:
14:90:85:13:d9:ec:a6:cb:c8:54:f0:6c:ea:88:5e:
d9:08:bc:d7:c2:50:52:87:8b:b7:bc:3f:39:9c:f4:
56:be:57:97:db:53:bc:73:56:de:ce:91:42:57:43:
cc:b0:80:ce:46:b3:e4:71:2a:48:10:8c:99:9c:ad:
5e:d1:cb:18:26:b4:39:93:f1:8d:61:e0:50:44:38:
7b:6e:1d:3a:01:87:5e:fa:0c:5d:ab:b0:1d:82:75:
08:31:cf:a0:78:19:32:10:fb:49:74:f5:64:ca:74:
6e:45:0e:37:22:9d:4b:06:5d:0d:de:46:7d:d6:37:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AD:47:EA:AB:D9:50:14:2B:29:96:FF:8A:33:89:58:EF:70:AB:25
X509v3 Authority Key Identifier:
keyid:74:6F:BA:BF:2A:25:5A:9D:78:CA:A2:7E:FE:8A:55:76:99:5E:5F:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dG-6vyolWp14yqJ-_opVdpleX8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/tK1H6qvZUBQrKZb_ijOJWO9wqyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/dG-6vyolWp14yqJ-_opVdpleX8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b6:f3:62:eb:34:a2:1a:0c:3c:64:99:a5:bb:83:d0:da:cb:
c0:cf:16:7d:83:96:74:c0:67:c5:75:f0:3f:51:7b:aa:58:0b:
7e:32:d1:0b:fe:30:e8:8d:43:e1:b0:03:6a:f4:c3:3b:35:0c:
24:3b:be:db:2a:09:2f:62:3a:70:10:c4:97:b7:0e:b9:c3:df:
68:56:15:cb:6e:e9:9e:8c:8e:d2:e7:50:7f:a4:8c:ed:7e:5d:
a6:cf:58:86:d6:28:54:8b:6a:c5:d3:61:04:4d:43:d5:89:6a:
b6:27:46:ee:1a:00:b7:42:a7:4b:b3:5f:5c:c7:6e:15:fb:9c:
80:9f:84:a2:d6:a5:7c:72:69:4e:1c:a6:02:61:15:4d:72:b8:
b2:0a:fe:88:1b:5f:ac:cf:8d:13:ab:df:1a:d5:6b:66:fb:3c:
fa:5c:74:6a:9b:27:f9:1f:ab:6a:0b:c4:c9:a6:e6:cc:47:83:
b4:bb:94:57:59:fe:c1:4e:0e:5b:02:8a:11:a6:27:87:af:64:
db:8a:72:d9:b5:1c:24:db:05:df:c0:b4:8a:64:b2:1b:b0:1b:
cc:0e:20:24:2a:31:32:38:ad:1f:56:40:c8:c3:f8:11:76:02:
0d:a5:66:aa:b5:ec:6e:85:48:fe:f3:b9:23:05:1b:12:80:08:
c4:29:64:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:39 2024 by rpki-client on console-fra.rpki-client.org