Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/ae3ookzNdcWHHD1Xyjthf3xix98.roa
File: ae3ookzNdcWHHD1Xyjthf3xix98.roa (raw, json)
Hash identifier: PcOLG79PqXj3dfCjhUiGbFrEDPQpI5dZxyWO0t4Qv4Y=
Subject key identifier: 69:ED:E8:A2:4C:CD:75:C5:87:1C:3D:57:CA:3B:61:7F:7C:62:C7:DF
Certificate issuer: /CN=147ced88a406124c8c4df166c5740509e6415d2a
Certificate serial: 0187760B3F79E6AEC2A8054381F2D8E00265
Authority key identifier: 14:7C:ED:88:A4:06:12:4C:8C:4D:F1:66:C5:74:05:09:E6:41:5D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHztiKQGEkyMTfFmxXQFCeZBXSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/ae3ookzNdcWHHD1Xyjthf3xix98.roa
Signing time: Wed 12 Apr 2023 15:17:41 +0000
ROA not before: Wed 12 Apr 2023 15:17:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199699
IP address blocks: 37.140.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:0b:3f:79:e6:ae:c2:a8:05:43:81:f2:d8:e0:02:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147ced88a406124c8c4df166c5740509e6415d2a
Validity
Not Before: Apr 12 15:17:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69ede8a24ccd75c5871c3d57ca3b617f7c62c7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b6:69:24:3f:94:cc:93:4d:e5:fc:10:2c:ad:
86:25:cc:db:90:5b:ae:66:91:b8:17:7e:ad:63:39:
6e:6a:78:52:f4:87:f5:79:0a:2e:b7:38:14:2b:24:
7f:46:5f:ea:d3:4c:28:a2:49:64:bc:ca:0f:aa:22:
ea:5d:e7:9c:3a:8a:29:30:7b:5c:e5:3b:43:24:a2:
1d:02:0d:aa:a1:fc:cc:16:38:f3:5f:44:52:5e:3f:
06:3e:52:d5:d1:50:25:80:7c:38:84:03:90:d0:a6:
de:6f:4b:fe:51:44:5c:66:17:23:09:64:67:fd:31:
c3:20:f0:01:37:0c:c1:c6:a7:04:08:69:e7:a8:21:
07:71:ab:d6:9e:e7:e4:67:8f:7b:1e:83:5a:35:08:
d4:02:a3:df:ac:d5:27:80:51:6d:14:e1:1e:99:c4:
94:05:c4:4f:65:cf:45:5e:a8:ee:6a:b6:ed:fd:6e:
0f:93:d5:1d:80:db:0c:e1:d3:57:71:93:2a:03:14:
2b:42:52:d3:9a:79:97:9e:35:aa:65:05:9e:a1:40:
83:70:62:a8:45:7c:b2:f0:2b:bc:23:d0:55:70:3e:
b7:31:5d:ca:23:b5:96:56:5f:2e:d0:9c:85:36:0a:
4f:13:4f:0b:ac:fe:17:d4:a7:20:bc:4e:bf:14:f2:
d9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:ED:E8:A2:4C:CD:75:C5:87:1C:3D:57:CA:3B:61:7F:7C:62:C7:DF
X509v3 Authority Key Identifier:
keyid:14:7C:ED:88:A4:06:12:4C:8C:4D:F1:66:C5:74:05:09:E6:41:5D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHztiKQGEkyMTfFmxXQFCeZBXSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/ae3ookzNdcWHHD1Xyjthf3xix98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/FHztiKQGEkyMTfFmxXQFCeZBXSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.247.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:a8:18:c6:b5:3a:da:8a:63:02:df:dc:a0:14:04:8e:3e:cb:
d7:ad:28:71:44:79:e1:64:35:e9:5a:9f:cc:7f:30:c2:9a:43:
10:85:c4:67:b2:bc:df:8d:ef:88:eb:6d:37:b0:15:cf:c0:ad:
2f:8b:43:0b:cf:a7:39:05:a2:32:f7:0a:5e:97:35:63:bd:63:
fd:db:ac:38:d2:d5:a5:72:4e:32:ca:4c:63:f2:bc:02:b3:b6:
2c:2b:23:32:99:e9:6a:5d:92:4e:36:a9:68:23:de:99:be:62:
fe:83:da:92:5e:3c:aa:03:47:8f:4a:17:6d:f8:7a:85:d5:bf:
7b:e8:56:c8:8a:bf:72:c9:3d:d4:54:0b:53:9b:b7:af:46:00:
e8:bd:0f:4c:ea:c5:6e:c3:18:cc:54:06:c3:e8:e3:f2:b4:f2:
03:a5:cb:d6:8b:a7:e1:eb:d0:31:94:eb:de:53:4e:6b:5c:0a:
b9:ba:13:14:d0:d2:85:d4:d5:c3:f0:e7:ef:03:6e:bf:1a:77:
a1:eb:ac:e7:cb:d9:82:25:14:6d:04:4c:78:f7:08:14:93:18:
14:ae:29:c8:ba:d1:b5:87:3a:0a:86:85:dd:70:03:21:02:59:
33:3e:97:12:38:a3:c5:ee:3c:6e:4f:a7:fc:60:7c:da:e0:85:
01:f3:d2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:55 2023 by rpki-client on console.sobornost.net