Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/Q0VZFnY3HjZcF-A6lZBWAJPKVgs.roa
File: Q0VZFnY3HjZcF-A6lZBWAJPKVgs.roa (raw, json)
Hash identifier: yyUi1AuUWVXT+0fKoZMThpkrsH8fWr7U7aQrsbEMWV0=
Subject key identifier: 43:45:59:16:76:37:1E:36:5C:17:E0:3A:95:90:56:00:93:CA:56:0B
Certificate issuer: /CN=893cfadc6dbc1dd9ba0e47406cedb306c6a85957
Certificate serial: 01835F5D470126588B231C1129A1CB221919
Authority key identifier: 89:3C:FA:DC:6D:BC:1D:D9:BA:0E:47:40:6C:ED:B3:06:C6:A8:59:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTz63G28Hdm6DkdAbO2zBsaoWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/Q0VZFnY3HjZcF-A6lZBWAJPKVgs.roa
Signing time: Wed 21 Sep 2022 09:24:52 +0000
ROA not before: Wed 21 Sep 2022 09:24:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 37.72.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:5d:47:01:26:58:8b:23:1c:11:29:a1:cb:22:19:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893cfadc6dbc1dd9ba0e47406cedb306c6a85957
Validity
Not Before: Sep 21 09:24:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4345591676371e365c17e03a9590560093ca560b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:da:ec:66:f8:18:e9:ee:87:5b:ce:78:a3:
a7:a2:60:03:32:5b:43:63:a2:29:34:e6:ad:c8:7a:
3c:59:aa:cd:7f:cf:c0:66:f4:6b:59:62:ae:c1:b5:
18:e2:91:59:54:c8:e4:10:3e:63:b0:44:70:07:72:
48:40:50:f6:64:44:3a:94:bd:64:0a:87:c3:ad:1b:
e1:a3:c6:47:ab:b5:a9:06:21:bb:d5:08:c4:33:ca:
04:4b:49:cd:29:38:49:7e:0b:2f:e0:77:5b:67:e3:
08:fc:56:e4:a8:dd:b9:b8:01:a0:f3:37:2b:3f:47:
e4:50:62:72:8f:2a:1f:21:4a:61:d6:b4:7e:b2:49:
82:f1:8e:2b:2d:d7:47:5d:de:e5:0b:c5:d5:1e:43:
43:c1:fe:2a:b3:83:2f:49:e1:0d:19:87:1a:7a:16:
63:52:e5:07:24:f6:7e:78:9f:7f:5d:de:8e:f1:2c:
0d:86:77:a8:c0:22:0e:cc:b8:98:5e:91:96:a6:8b:
f0:35:c8:17:4d:c9:28:7d:d2:d8:08:83:b3:73:90:
87:20:ae:63:69:8e:54:36:52:4d:47:82:0e:d1:95:
b5:d9:54:d4:1f:38:39:19:dd:b1:b2:20:a1:d1:5f:
d8:67:c9:84:39:cd:47:e3:1b:d6:7c:78:c7:ef:28:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:45:59:16:76:37:1E:36:5C:17:E0:3A:95:90:56:00:93:CA:56:0B
X509v3 Authority Key Identifier:
keyid:89:3C:FA:DC:6D:BC:1D:D9:BA:0E:47:40:6C:ED:B3:06:C6:A8:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTz63G28Hdm6DkdAbO2zBsaoWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/Q0VZFnY3HjZcF-A6lZBWAJPKVgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/iTz63G28Hdm6DkdAbO2zBsaoWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.141.0/24
Signature Algorithm: sha256WithRSAEncryption
39:87:4c:ba:71:b3:b6:a4:29:80:b1:6c:de:20:d2:55:30:66:
e6:32:d3:3d:fa:df:ff:d4:48:5f:f9:c5:fe:6b:75:ac:2e:5a:
93:37:4d:d8:70:25:e0:22:73:44:0d:38:c5:20:18:f8:72:87:
a5:2e:03:58:26:33:8b:92:72:82:37:af:cd:25:08:8e:08:99:
7e:92:e7:d3:b3:77:fc:79:b8:c4:ce:15:12:a6:97:cc:fa:18:
33:86:18:32:60:8c:f4:41:54:c4:45:b5:56:17:3e:e8:4b:2a:
de:a0:81:bf:8b:21:69:5d:b4:5a:ae:e9:76:9f:67:40:46:6d:
68:7a:b7:23:76:6a:dc:d4:b4:95:0c:41:96:cd:74:9e:0c:63:
5a:25:20:25:f3:4f:14:0c:7f:04:73:4d:c2:e6:8a:6b:aa:05:
00:2f:5f:3a:fa:4a:f3:17:59:f6:55:2b:9a:0f:e2:2c:10:8b:
f8:b5:da:d1:90:88:98:31:c9:03:db:36:9f:f3:75:e2:1f:e8:
86:86:d6:ed:7a:ba:bc:0c:f0:77:5d:04:45:5d:a0:e3:8b:62:
74:2a:f8:cd:90:f7:3e:c5:73:dd:d3:3d:ca:db:d2:bd:be:af:
b3:17:86:4d:72:69:fd:2d:33:b5:02:2b:3c:0c:f5:14:55:cb:
e0:c6:be:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:57 2023 by rpki-client on console.sobornost.net