Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c81451-9f4d-4ffe-bb2e-52011d5ddf64/1/zSfvDioWYqJpld5iL76tNM-GO1g.roa
File: zSfvDioWYqJpld5iL76tNM-GO1g.roa (raw, json)
Hash identifier: QK2K0YwBk1298h2nUtFdtL2b3g2U82jT9eKRALa1lT4=
Subject key identifier: CD:27:EF:0E:2A:16:62:A2:69:95:DE:62:2F:BE:AD:34:CF:86:3B:58
Certificate issuer: /CN=b40f9716fa633e3762ad62c5412ce00b6701d8b7
Certificate serial: 01856F6FF6C2DA926D2EEF93AE820A27C5D2
Authority key identifier: B4:0F:97:16:FA:63:3E:37:62:AD:62:C5:41:2C:E0:0B:67:01:D8:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA-XFvpjPjdirWLFQSzgC2cB2Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c81451-9f4d-4ffe-bb2e-52011d5ddf64/1/zSfvDioWYqJpld5iL76tNM-GO1g.roa
Signing time: Sun 01 Jan 2023 22:24:46 +0000
ROA not before: Sun 01 Jan 2023 22:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211183
IP address blocks: 37.140.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:f6:c2:da:92:6d:2e:ef:93:ae:82:0a:27:c5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40f9716fa633e3762ad62c5412ce00b6701d8b7
Validity
Not Before: Jan 1 22:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd27ef0e2a1662a26995de622fbead34cf863b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b0:87:2e:02:a7:b0:90:3e:34:40:12:b6:34:
eb:ac:4a:34:19:59:6e:0d:1d:44:9a:4e:e4:2b:46:
84:58:27:7a:a7:47:42:cb:52:60:bd:1a:03:ba:31:
71:41:08:de:18:9b:f5:85:59:a3:ac:a7:cb:2c:9f:
da:9f:23:2a:5c:b3:24:8d:4e:00:0b:18:53:d8:c6:
a2:cb:d6:31:73:87:a0:f0:58:83:2d:11:34:fe:19:
76:94:ed:28:84:f4:a4:77:5b:c0:5f:a2:1f:42:95:
43:e3:7b:f7:cd:68:79:68:f6:f7:95:10:b4:bc:cd:
df:5c:ae:bf:7e:ed:6f:f0:78:4b:62:2b:63:3a:be:
0a:5c:52:07:62:92:5a:1d:7e:f2:22:96:4c:96:a3:
af:19:1b:4e:f5:f6:9c:7a:0c:40:41:8c:79:7d:68:
1e:ca:41:33:59:c2:3c:bb:8e:3d:84:ee:8f:c5:b6:
81:72:06:5b:d5:df:04:bd:f5:05:c7:7a:96:18:de:
2d:7c:ee:2c:27:9c:51:12:46:4c:88:46:bc:30:cd:
87:b3:af:25:eb:10:38:02:26:4d:8b:9f:f4:63:16:
f7:1e:19:94:69:67:53:ed:4c:07:31:f8:22:4c:b6:
8f:94:b9:4f:ab:83:2c:2a:2b:b6:f5:08:4d:05:67:
88:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:EF:0E:2A:16:62:A2:69:95:DE:62:2F:BE:AD:34:CF:86:3B:58
X509v3 Authority Key Identifier:
keyid:B4:0F:97:16:FA:63:3E:37:62:AD:62:C5:41:2C:E0:0B:67:01:D8:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA-XFvpjPjdirWLFQSzgC2cB2Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c81451-9f4d-4ffe-bb2e-52011d5ddf64/1/zSfvDioWYqJpld5iL76tNM-GO1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c81451-9f4d-4ffe-bb2e-52011d5ddf64/1/tA-XFvpjPjdirWLFQSzgC2cB2Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.241.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f5:2f:49:29:88:32:7a:56:8c:9c:15:66:83:43:c0:26:db:
ac:ce:8d:c8:02:74:4a:18:8a:85:f1:2e:79:03:da:c5:06:c8:
37:73:cd:53:80:12:4b:1c:8f:ce:0b:a9:97:10:c6:e6:de:54:
82:2d:94:35:27:58:43:c5:eb:2f:28:eb:81:c4:41:7e:63:68:
c7:db:70:6c:6f:3f:1c:ed:15:71:71:1a:fb:82:2c:a7:e3:a4:
97:8e:e9:e0:af:52:28:bb:57:f5:86:7a:c6:23:8f:21:23:c8:
9a:fe:ac:aa:70:0c:fd:be:5d:92:a2:56:5b:57:a4:3f:01:13:
dd:7f:53:91:81:e0:12:02:b8:84:58:52:89:7c:0c:74:2c:ce:
9c:13:e1:23:a3:8d:56:45:d6:3d:eb:70:e6:a8:1f:a5:8e:cb:
e7:81:57:52:7e:59:e4:87:f1:92:a2:f4:ca:e7:a3:49:cd:4d:
27:9a:de:ed:55:c0:db:7c:48:3f:e5:83:5c:8f:4f:b2:67:29:
ef:9f:e6:26:fc:08:80:7e:a3:e7:de:9d:64:9a:67:ca:50:3f:
d4:22:56:f2:cb:aa:e1:10:b8:00:97:80:56:bd:5f:4b:aa:6a:
d8:e5:37:2e:c9:d0:fa:69:8a:7d:26:61:06:d2:09:d6:6b:df:
bd:14:24:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:06 2023 by rpki-client on console.sobornost.net