Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/R0Asih9HpnTJZshmj2CvF8VVMlI.roa
File: R0Asih9HpnTJZshmj2CvF8VVMlI.roa (raw, json)
Hash identifier: +RcgzGxpkZfAuRjgrXUlSB1jXwzSQ36aUGfQ9n611pU=
Subject key identifier: 47:40:2C:8A:1F:47:A6:74:C9:66:C8:66:8F:60:AF:17:C5:55:32:52
Certificate issuer: /CN=147ced88a406124c8c4df166c5740509e6415d2a
Certificate serial: 01876EC0822EB613D4CD88B1F5ABFB343C1D
Authority key identifier: 14:7C:ED:88:A4:06:12:4C:8C:4D:F1:66:C5:74:05:09:E6:41:5D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHztiKQGEkyMTfFmxXQFCeZBXSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/R0Asih9HpnTJZshmj2CvF8VVMlI.roa
Signing time: Tue 11 Apr 2023 05:18:42 +0000
ROA not before: Tue 11 Apr 2023 05:18:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.140.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6e:c0:82:2e:b6:13:d4:cd:88:b1:f5:ab:fb:34:3c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147ced88a406124c8c4df166c5740509e6415d2a
Validity
Not Before: Apr 11 05:18:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47402c8a1f47a674c966c8668f60af17c5553252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:aa:44:91:f4:9c:ab:62:db:43:4a:61:c5:df:
f7:0b:31:b5:db:10:1d:cd:7c:88:e6:f8:bd:fb:0d:
f5:08:11:12:ed:b4:dd:ed:21:0d:db:97:06:fb:75:
63:0f:72:2a:af:c1:28:81:59:72:49:4b:70:c2:99:
e0:19:52:8f:e8:6b:3e:5e:89:43:25:76:9a:c9:60:
e5:a4:35:a1:93:93:9d:b8:d9:a1:6d:6d:60:ae:3c:
45:18:54:61:7e:83:b8:0c:2f:17:29:d4:47:b6:94:
59:d1:a3:c7:64:cd:dd:62:aa:9e:fe:ce:7c:56:40:
0d:93:d0:cc:06:53:77:d6:6b:64:99:2e:29:aa:b6:
17:b9:4e:e2:48:22:ce:e7:7f:16:ff:29:c0:7b:43:
b1:e3:bd:b8:3d:69:cd:20:b2:7b:93:70:38:00:11:
55:74:2e:6c:6c:38:43:22:f5:eb:09:b9:99:c8:e6:
bc:0c:0b:0a:43:ff:a0:d2:a2:7b:f2:10:b9:9e:40:
fb:a0:69:85:2b:9f:18:78:f3:b2:25:c7:77:3e:45:
07:15:45:8a:b0:1c:93:95:fb:73:48:43:c3:23:33:
cd:53:30:40:3c:e4:88:49:82:32:2f:71:26:03:10:
c2:7b:3e:b6:54:6e:9d:c2:e6:a2:2d:6d:a7:c7:07:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:40:2C:8A:1F:47:A6:74:C9:66:C8:66:8F:60:AF:17:C5:55:32:52
X509v3 Authority Key Identifier:
keyid:14:7C:ED:88:A4:06:12:4C:8C:4D:F1:66:C5:74:05:09:E6:41:5D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHztiKQGEkyMTfFmxXQFCeZBXSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/R0Asih9HpnTJZshmj2CvF8VVMlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/FHztiKQGEkyMTfFmxXQFCeZBXSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.247.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5c:c9:7c:19:f1:77:cd:3f:10:9f:3e:41:5c:5b:22:56:0f:
6f:41:1e:ec:e2:be:80:81:4e:76:14:72:6a:91:6b:3c:86:c3:
0c:b2:34:d9:1d:5c:fb:de:34:f5:4d:d6:52:9b:f5:9b:e9:4b:
91:3f:ab:84:89:39:a5:dc:7a:58:33:2b:39:cf:60:b0:f3:97:
fb:c9:d3:5c:16:80:ca:10:9c:74:ab:dc:c1:2c:35:5b:77:8b:
24:f2:8e:98:41:d5:8b:ed:8d:73:92:07:9c:23:ac:cb:9c:78:
cd:00:c1:a1:54:15:82:66:8a:5a:3d:0d:19:ef:2f:a4:91:f4:
ec:5e:34:31:4c:ec:0f:93:88:1d:3a:a1:c0:2d:66:c0:9a:17:
1e:25:28:ee:25:49:42:87:58:3c:63:80:09:58:28:0d:10:15:
4c:80:d6:3a:ae:ac:05:56:85:38:25:df:1c:15:2c:3c:c5:39:
03:87:8c:21:9e:8f:eb:f8:f3:3f:cb:10:72:7f:16:df:58:a5:
a8:91:b9:95:85:fc:1a:ce:fb:fa:45:85:41:ac:04:2b:1c:6b:
1f:4d:ea:5d:d0:3f:20:7c:1a:23:62:11:2e:77:d0:b2:31:95:
ac:90:1f:aa:fd:0c:4e:12:e4:45:a7:a1:91:41:e8:1d:d9:8f:
f0:3c:82:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYduwIIuthPUzYix9av7NDwdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0N2NlZDg4YTQwNjEyNGM4YzRkZjE2NmM1NzQwNTA5ZTY0
MTVkMmEwHhcNMjMwNDExMDUxODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzQwMmM4YTFmNDdhNjc0Yzk2NmM4NjY4ZjYwYWYxN2M1NTUzMjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKpEkfScq2LbQ0phxd/3CzG12xAd
zXyI5vi9+w31CBES7bTd7SEN25cG+3VjD3Iqr8EogVlySUtwwpngGVKP6Gs+XolD
JXaayWDlpDWhk5OduNmhbW1grjxFGFRhfoO4DC8XKdRHtpRZ0aPHZM3dYqqe/s58
VkANk9DMBlN31mtkmS4pqrYXuU7iSCLO538W/ynAe0Ox4724PWnNILJ7k3A4ABFV
dC5sbDhDIvXrCbmZyOa8DAsKQ/+g0qJ78hC5nkD7oGmFK58YePOyJcd3PkUHFUWK
sByTlftzSEPDIzPNUzBAPOSISYIyL3EmAxDCez62VG6dwuaiLW2nxwfEJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEdALIofR6Z0yWbIZo9grxfFVTJSMB8GA1UdIwQY
MBaAFBR87YikBhJMjE3xZsV0BQnmQV0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkh6dGlLUUdFa3lNVGZGbXhYUUZDZVpCWFNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hNGQzZjYtMWU0Ni00N2QzLWE1ZDAt
ZmY4OTkxN2Q0MGQwLzEvUjBBc2loOUhwblRKWnNobWoyQ3ZGOFZWTWxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hNGQzZjYtMWU0Ni00N2QzLWE1ZDAtZmY4OTkxN2Q0MGQw
LzEvRkh6dGlLUUdFa3lNVGZGbXhYUUZDZVpCWFNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYz3MA0G
CSqGSIb3DQEBCwUAA4IBAQBwXMl8GfF3zT8Qnz5BXFsiVg9vQR7s4r6AgU52FHJq
kWs8hsMMsjTZHVz73jT1TdZSm/Wb6UuRP6uEiTml3HpYMys5z2Cw85f7ydNcFoDK
EJx0q9zBLDVbd4sk8o6YQdWL7Y1zkgecI6zLnHjNAMGhVBWCZopaPQ0Z7y+kkfTs
XjQxTOwPk4gdOqHALWbAmhceJSjuJUlCh1g8Y4AJWCgNEBVMgNY6rqwFVoU4Jd8c
FSw8xTkDh4whno/r+PM/yxByfxbfWKWokbmVhfwazvv6RYVBrAQrHGsfTepd0D8g
fBojYhEud9CyMZWskB+q/QxOEuRFp6GRQegd2Y/wPIK3
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:55 2023 by rpki-client on console.sobornost.net