Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/_8oj7BdpVXMOOo5GpHc9xy-cCQI.roa
File: _8oj7BdpVXMOOo5GpHc9xy-cCQI.roa (raw, json)
Hash identifier: xpKmquB7QFhyrNVlJIfkvrXpsrLSyXJAJ7Y0OblTL7g=
Subject key identifier: FF:CA:23:EC:17:69:55:73:0E:3A:8E:46:A4:77:3D:C7:2F:9C:09:02
Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial: 0193EAF0581583B901AD1F810B80BF75EA0D
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/_8oj7BdpVXMOOo5GpHc9xy-cCQI.roa
Signing time: Sat 21 Dec 2024 20:37:19 +0000
ROA not before: Sat 21 Dec 2024 20:37:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199493
IP address blocks: 37.220.64.0/20 maxlen: 24
193.221.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ea:f0:58:15:83:b9:01:ad:1f:81:0b:80:bf:75:ea:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Validity
Not Before: Dec 21 20:37:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffca23ec176955730e3a8e46a4773dc72f9c0902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:59:ce:63:e1:c8:cf:e2:bb:ca:b2:31:05:
5f:e2:d8:fb:4f:6c:11:97:3e:c3:54:f3:6f:fa:62:
34:e7:d1:5d:d1:dd:79:99:b3:ea:cd:c4:d7:19:4c:
92:88:32:86:7f:71:a3:64:0a:4e:8e:8e:86:9f:4b:
9e:87:36:18:8f:2f:35:b9:1f:b1:15:d7:c0:e1:a2:
9f:d2:19:a0:ad:b4:ba:c1:73:7d:64:00:fa:80:64:
ad:b7:3b:aa:71:50:db:46:fa:57:a4:99:ae:27:ad:
39:38:a9:ca:12:8e:de:09:ec:31:ee:54:2e:f5:1a:
e2:ec:9c:1c:96:df:ad:8e:09:b9:5e:5c:f6:73:7f:
eb:a9:93:4e:37:3e:8d:08:75:43:de:69:62:ca:93:
d8:b9:a0:ee:0d:5a:20:c7:9e:2c:f3:b6:f3:6d:39:
2e:f6:28:51:7e:40:5b:01:78:21:b9:dd:71:89:a6:
64:a3:29:89:50:0a:ea:64:7b:a6:70:ac:c2:f1:cb:
b6:c7:0c:a5:15:1c:fd:74:2e:2a:1b:28:f9:51:3e:
22:6e:bc:5d:cc:78:5d:88:fd:45:33:b6:84:dc:1f:
93:7a:54:02:b1:92:4c:b0:aa:4a:84:62:ba:70:78:
49:eb:49:49:46:db:e3:a8:40:08:3c:f0:ab:2a:01:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CA:23:EC:17:69:55:73:0E:3A:8E:46:A4:77:3D:C7:2F:9C:09:02
X509v3 Authority Key Identifier:
keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/_8oj7BdpVXMOOo5GpHc9xy-cCQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.64.0/20
193.221.196.0/22
Signature Algorithm: sha256WithRSAEncryption
90:53:24:13:88:92:d8:d3:f8:c8:c3:7b:1c:d0:9f:2a:45:13:
75:0a:dc:fe:c8:e0:d2:84:e9:13:06:a6:74:4b:be:28:bf:d2:
81:ec:f1:c5:de:47:fe:d2:5a:77:fd:af:d6:95:60:46:fa:13:
da:03:81:45:de:aa:86:b6:fa:d3:d4:51:d4:69:37:90:96:ed:
cd:46:e1:72:7e:66:5a:0a:c5:de:ec:3b:0e:87:14:b1:4f:81:
d7:d5:ef:0e:1b:c9:fc:05:18:68:62:54:43:b1:1d:79:8d:62:
c1:62:d5:e6:e9:fa:a7:e0:66:f7:85:aa:49:40:f5:a5:db:64:
bd:16:5a:c4:d3:35:cd:25:2e:a3:8b:af:48:d9:cf:7e:f9:3c:
52:bd:c2:4a:0e:d9:66:b9:6c:f1:e0:db:e4:e0:7e:d1:4c:e7:
57:e7:97:a5:b7:4a:66:e3:b7:99:81:1e:f1:f6:1c:cd:5c:34:
80:b4:f7:1b:dd:8f:df:ac:72:30:41:d8:ab:62:ec:02:09:10:
97:ea:9c:17:d1:80:e1:44:ef:6c:c6:f8:46:a2:1e:2e:a4:d1:
97:97:1b:cf:07:da:3e:7c:4f:88:63:6b:03:48:99:6c:ed:8c:
fa:1b:87:0a:e4:fe:bb:41:a2:72:82:3b:52:d4:1b:b5:27:20:
23:65:28:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net