Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/erGBr-QAi82Df5uh-YabKH5XnlE.roa
File: erGBr-QAi82Df5uh-YabKH5XnlE.roa (raw, json)
Hash identifier: HrLmScDueEdStYlirS8iUwJF3UJkykVIujSc5H5DrWA=
Subject key identifier: 7A:B1:81:AF:E4:00:8B:CD:83:7F:9B:A1:F9:86:9B:28:7E:57:9E:51
Certificate issuer: /CN=d52865e83b701b8ba934101c34c11ebdf3fa83bb
Certificate serial: 01856FE729AE45592D5F95492D6591E5991D
Authority key identifier: D5:28:65:E8:3B:70:1B:8B:A9:34:10:1C:34:C1:1E:BD:F3:FA:83:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Shl6DtwG4upNBAcNMEevfP6g7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/erGBr-QAi82Df5uh-YabKH5XnlE.roa
Signing time: Mon 02 Jan 2023 00:34:58 +0000
ROA not before: Mon 02 Jan 2023 00:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399641
IP address blocks: 37.140.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:29:ae:45:59:2d:5f:95:49:2d:65:91:e5:99:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52865e83b701b8ba934101c34c11ebdf3fa83bb
Validity
Not Before: Jan 2 00:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ab181afe4008bcd837f9ba1f9869b287e579e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b7:18:07:aa:11:b8:a8:19:e4:c1:6d:20:0c:
cb:42:ce:40:84:ff:fe:f0:a5:40:9c:7a:9a:68:95:
e5:9c:72:6f:d4:43:a4:c0:4b:7b:61:c2:76:77:7f:
2a:76:5b:08:e7:ab:23:69:f9:ce:58:33:51:bf:78:
44:d9:66:01:a1:ab:66:55:53:24:26:e7:87:5b:a7:
02:8f:59:e7:33:4e:03:09:9e:bf:66:9e:86:f9:ee:
e2:fe:e9:3d:44:db:45:34:61:18:84:5a:84:39:f5:
eb:12:4b:da:6a:41:a6:c1:be:60:92:3b:08:6f:56:
84:33:96:8e:9c:6d:d9:6c:dd:8e:51:e5:8c:be:6e:
d8:b4:48:b4:b1:89:f5:4b:fb:08:6d:49:c5:a3:d0:
22:a6:de:0c:5d:12:9b:ef:92:a0:18:1c:18:b3:18:
42:5e:6e:79:83:a5:47:f5:85:dc:47:19:3e:a6:32:
9b:e6:c0:62:ec:77:e3:1c:ac:e1:44:4d:5b:a2:f3:
98:8a:2d:e3:bb:d8:34:c1:05:30:8b:fa:47:69:22:
28:bb:2d:db:be:b0:b0:ab:fa:d4:31:b2:62:3c:84:
14:2f:6b:6a:f5:60:81:b3:08:09:26:df:5b:3a:b8:
7f:c3:97:86:f1:93:33:0b:13:da:44:aa:39:97:af:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B1:81:AF:E4:00:8B:CD:83:7F:9B:A1:F9:86:9B:28:7E:57:9E:51
X509v3 Authority Key Identifier:
keyid:D5:28:65:E8:3B:70:1B:8B:A9:34:10:1C:34:C1:1E:BD:F3:FA:83:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Shl6DtwG4upNBAcNMEevfP6g7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/erGBr-QAi82Df5uh-YabKH5XnlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/1Shl6DtwG4upNBAcNMEevfP6g7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.250.0/24
Signature Algorithm: sha256WithRSAEncryption
32:31:8d:5c:12:41:0a:8a:cc:bb:21:3e:d3:f0:7f:ef:b2:cf:
6e:4c:38:61:63:ec:45:3b:93:66:48:9d:a6:c1:7c:1a:3b:b8:
09:06:e9:8c:a6:78:8f:e0:65:43:62:b2:70:c5:7c:7c:c6:2f:
ed:5f:58:c0:5f:5d:3a:fa:69:a2:b6:56:53:e4:bb:7f:46:13:
0d:1e:f7:77:86:37:46:00:61:0c:45:14:3a:46:22:f5:6a:1d:
67:cc:3d:e2:ba:b6:41:59:d9:cf:f9:50:89:91:35:71:c0:6b:
ae:da:72:b9:e9:ca:89:93:f4:95:23:23:9e:b3:60:66:9e:5f:
46:9e:c7:0f:c6:b0:1e:5f:63:15:54:28:60:bc:d9:49:56:1b:
1d:99:21:f6:03:7a:b1:c7:ec:bd:94:73:df:4f:9b:ab:4b:e4:
ac:43:52:b9:90:cc:3b:74:73:36:69:a8:d0:25:02:8a:ce:72:
c9:5b:78:c1:de:67:3c:05:a7:da:ff:56:6b:c0:6e:3c:62:71:
ee:34:4c:f0:e8:d0:3c:96:e2:f2:9d:b4:8d:f7:6a:14:f7:4b:
f3:35:16:fe:d3:91:13:ad:96:e0:28:5f:38:76:7e:ca:3e:99:
e5:e9:7f:63:86:6f:7f:ad:02:d6:46:47:ba:d2:3a:29:9d:ff:
d5:0c:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 12:52:00 2023 by rpki-client on console-ams.rpki-client.org