Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/X8-UzdNtajMDdv3gGWS2pbD_rMA.roa
File: X8-UzdNtajMDdv3gGWS2pbD_rMA.roa (raw, json)
Hash identifier: XH5S0On+WBq+pfRiEdoC+kdqZMLXqyoI1nX8QS04/Qo=
Subject key identifier: 5F:CF:94:CD:D3:6D:6A:33:03:76:FD:E0:19:64:B6:A5:B0:FF:AC:C0
Certificate issuer: /CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Certificate serial: 0A3A319E
Authority key identifier: 97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/X8-UzdNtajMDdv3gGWS2pbD_rMA.roa
Signing time: Tue 08 Feb 2022 12:07:44 +0000
ROA not before: Tue 08 Feb 2022 12:07:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34534
IP address blocks: 37.44.238.0/24 maxlen: 24
37.44.239.0/24 maxlen: 24
37.44.236.0/24 maxlen: 24
185.157.246.0/23 maxlen: 24
2a09:ca00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171585950 (0xa3a319e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Validity
Not Before: Feb 8 12:07:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fcf94cdd36d6a330376fde01964b6a5b0ffacc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:fb:c9:67:1f:7c:09:1d:47:ed:5f:af:6f:
11:72:5b:e6:ad:95:97:69:9f:47:1a:50:49:a7:d1:
cd:aa:75:73:70:57:da:46:32:65:c7:df:4c:ce:04:
fd:f3:1d:c4:58:8c:ab:17:77:9c:e2:35:92:bd:ad:
7b:5a:d2:78:00:41:bc:a8:4f:53:66:ba:06:3a:52:
c9:09:d8:ff:70:63:67:25:08:85:1b:ff:78:86:71:
42:fb:4d:66:36:18:32:25:c5:d3:1c:d7:05:08:b3:
80:f2:fe:89:80:cf:48:6a:a3:69:34:c8:25:1b:90:
71:25:33:63:1d:12:a2:14:34:3f:9d:ea:52:af:52:
be:2d:d9:d8:e7:75:e6:91:c4:56:5e:16:f5:bf:93:
c4:31:fd:fc:1d:90:7c:1e:f7:19:36:e1:18:ed:09:
c4:a3:81:25:d3:75:1a:0c:fa:93:a3:0b:5d:88:65:
8d:2c:ce:93:13:ec:48:a6:8b:15:30:ce:23:66:f7:
77:e2:ca:bc:9e:c6:71:c4:06:17:b4:b8:2c:b0:20:
5f:59:5e:bb:59:cc:b3:2c:a3:eb:dd:75:2a:a4:a1:
bc:2b:4a:b8:3a:df:e3:fd:31:91:5b:f6:c3:e7:1b:
c8:5c:9f:68:9b:a3:07:18:a0:1c:63:c1:a1:d7:c6:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CF:94:CD:D3:6D:6A:33:03:76:FD:E0:19:64:B6:A5:B0:FF:AC:C0
X509v3 Authority Key Identifier:
keyid:97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/X8-UzdNtajMDdv3gGWS2pbD_rMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/l6xHtRJE70nFI3iuzSnFjPtyCJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.236.0/24
37.44.238.0/23
185.157.246.0/23
IPv6:
2a09:ca00::/48
Signature Algorithm: sha256WithRSAEncryption
5b:87:eb:94:74:f6:9f:11:ad:33:8a:8b:ff:e4:10:fe:88:b2:
e8:91:fe:08:de:75:a0:54:fe:8a:bb:d2:24:26:15:35:e1:9a:
cd:aa:37:68:55:5f:40:b6:1e:68:c5:a5:24:0e:10:51:5a:23:
25:46:db:2e:4c:7b:0b:8f:ae:44:25:c8:ae:64:8f:9a:9e:92:
f7:b9:34:ff:11:5a:91:5a:4b:8f:4f:6c:27:05:ba:b7:f8:58:
ab:15:f7:7e:1f:2f:b5:d8:dd:b8:e1:3f:8f:d2:a9:f2:bc:5c:
62:cc:27:12:3b:a5:f5:f2:ac:54:c7:b1:34:d3:8e:7f:29:f1:
7a:a5:2c:84:d6:a2:dc:cf:7a:73:ce:fd:61:27:f9:e0:20:ab:
c6:a4:14:b8:a1:85:62:80:7a:d3:df:50:f9:0c:1c:ea:a7:ef:
3f:c2:ff:81:50:39:b5:fa:ea:b1:b1:0c:4f:c5:17:0c:3f:8e:
ae:f2:af:20:7a:7b:72:17:08:52:71:03:42:4d:d2:f5:bf:d1:
7c:56:9a:10:9a:1c:b0:8e:ee:26:31:22:9a:39:ee:f3:12:7a:
3a:a9:93:1e:81:aa:ce:9d:11:1e:eb:d7:cc:36:e6:82:ee:31:
5e:20:0d:d8:11:85:b0:d2:be:2c:ba:d6:b1:b2:43:e2:1e:3c:
55:b3:9f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:03 2024 by rpki-client on console-fra.rpki-client.org