Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/C7shWH35RZr6LCltyoUQ-tcyvug.roa
File: C7shWH35RZr6LCltyoUQ-tcyvug.roa (raw, json)
Hash identifier: qVo0kfep6mdPJ9HTVIDiSqT1gEZLYay3kc8e+Kd+jQk=
Subject key identifier: 0B:BB:21:58:7D:F9:45:9A:FA:2C:29:6D:CA:85:10:FA:D7:32:BE:E8
Certificate issuer: /CN=298b166ece49fa939476efa22c8d9248f9edc833
Certificate serial: 23E63D91
Authority key identifier: 29:8B:16:6E:CE:49:FA:93:94:76:EF:A2:2C:8D:92:48:F9:ED:C8:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYsWbs5J-pOUdu-iLI2SSPntyDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/C7shWH35RZr6LCltyoUQ-tcyvug.roa
Signing time: Wed 15 Jun 2022 07:28:44 +0000
ROA not before: Wed 15 Jun 2022 07:28:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 710
IP address blocks: 37.237.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602291601 (0x23e63d91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298b166ece49fa939476efa22c8d9248f9edc833
Validity
Not Before: Jun 15 07:28:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bbb21587df9459afa2c296dca8510fad732bee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:12:74:3b:db:cc:af:e8:74:f1:c5:b0:7c:b7:
9a:62:5a:63:48:80:1f:48:7e:c3:14:bd:53:b2:6c:
7f:b0:38:77:26:c4:c2:f3:87:b9:7a:52:a2:ec:8a:
37:dc:9a:e2:63:3c:08:b3:c4:c4:cd:f2:d2:6e:5e:
9d:0e:ec:4c:fc:68:90:a7:97:a7:a1:93:be:1b:84:
e8:9b:02:9f:8a:05:09:97:62:08:1c:f2:8e:33:34:
fe:85:34:29:dc:7c:48:38:1f:a5:6c:aa:a1:0b:4e:
20:df:1f:a2:d0:a0:1b:dd:05:d3:fa:45:c4:29:9e:
f6:69:f3:d5:7b:e1:c8:44:95:b9:ac:8a:08:4f:32:
14:e1:38:16:c2:32:a4:bc:ba:33:71:12:67:75:dd:
2d:82:f3:35:23:6f:0b:0e:4e:92:da:f4:ac:a3:b2:
6b:75:e7:d7:85:9d:57:bc:1d:9e:c6:af:13:97:f2:
20:9e:f3:4d:76:17:da:30:97:df:3a:36:02:13:2d:
cf:82:76:06:a0:44:b4:b9:ba:8a:e8:a7:26:f4:00:
c3:48:e5:ce:90:87:2f:f3:36:f0:1b:00:61:bf:0b:
d7:7d:12:74:f7:7e:ab:56:7d:d3:d4:ce:3f:a4:e0:
fe:b6:30:27:49:79:60:b3:8c:cb:d9:0f:a9:09:4a:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BB:21:58:7D:F9:45:9A:FA:2C:29:6D:CA:85:10:FA:D7:32:BE:E8
X509v3 Authority Key Identifier:
keyid:29:8B:16:6E:CE:49:FA:93:94:76:EF:A2:2C:8D:92:48:F9:ED:C8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYsWbs5J-pOUdu-iLI2SSPntyDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/C7shWH35RZr6LCltyoUQ-tcyvug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/KYsWbs5J-pOUdu-iLI2SSPntyDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.237.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:91:6a:33:06:8b:41:a7:31:d7:2a:15:ad:d4:23:7c:15:3b:
1c:e6:09:46:b6:04:97:3d:31:f1:bd:9a:17:38:d7:e0:8c:1c:
f9:5d:9e:d2:1b:59:e1:c6:93:e5:93:7c:1e:76:d0:dd:78:ab:
26:a6:2d:3b:a4:13:4a:cc:92:ea:f7:45:f3:03:2b:5b:7b:be:
bf:25:ac:dd:06:ca:8b:90:e8:ec:9f:8e:6b:35:43:3a:83:8f:
a2:f3:20:7d:08:2c:14:60:b5:69:11:9f:f4:b9:68:91:6e:84:
83:f3:65:c4:2d:26:ee:c5:5d:e9:82:1a:4f:b5:1b:cf:c0:c2:
57:b3:ef:2a:c6:8e:fb:4a:10:b6:5e:c8:da:b0:7e:60:16:58:
4b:06:78:87:4f:29:a3:28:f0:16:48:87:66:37:da:11:d1:df:
45:50:41:1d:a5:a1:92:4d:b8:7d:b8:9f:43:30:7a:52:22:47:
c3:53:74:f3:15:0c:b4:d3:c5:b2:64:42:f2:b5:46:5a:0b:41:
78:bd:0b:30:4f:5c:e5:8a:b6:14:47:c2:38:3e:36:2f:3f:30:
5b:ee:ff:27:59:f0:64:8d:07:bf:cb:3a:0c:80:70:1c:d0:e7:
db:b5:11:98:50:d4:d2:3b:51:aa:0c:e4:31:58:c2:1e:d2:09:
29:25:94:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:43 2024 by rpki-client on console-fra.rpki-client.org