Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/acd6f7-793b-40a5-ba1a-3ae11bb2dd98/1/aI_v7KHpkV2gAvqZtNtcFJUuUzk.roa
File: aI_v7KHpkV2gAvqZtNtcFJUuUzk.roa (raw, json)
Hash identifier: vfU2Xznojod6MYwiEbc9FppVv1WIAMc5p3bU1MuqrLQ=
Subject key identifier: 68:8F:EF:EC:A1:E9:91:5D:A0:02:FA:99:B4:DB:5C:14:95:2E:53:39
Certificate issuer: /CN=5786de22c3066b9f5ad9a88fd024dc1baecc70ab
Certificate serial: 01856FC26E4E4800B0594E4893E5763886E6
Authority key identifier: 57:86:DE:22:C3:06:6B:9F:5A:D9:A8:8F:D0:24:DC:1B:AE:CC:70:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4beIsMGa59a2aiP0CTcG67McKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/acd6f7-793b-40a5-ba1a-3ae11bb2dd98/1/aI_v7KHpkV2gAvqZtNtcFJUuUzk.roa
Signing time: Sun 01 Jan 2023 23:54:51 +0000
ROA not before: Sun 01 Jan 2023 23:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50809
IP address blocks: 37.77.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:6e:4e:48:00:b0:59:4e:48:93:e5:76:38:86:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5786de22c3066b9f5ad9a88fd024dc1baecc70ab
Validity
Not Before: Jan 1 23:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=688fefeca1e9915da002fa99b4db5c14952e5339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4d:af:a4:cc:b0:ac:94:76:20:c9:ec:14:50:
c1:b2:28:5a:c9:31:45:8f:a3:ca:4a:34:58:35:2c:
da:8f:8a:1e:be:98:3e:bd:98:0b:d4:76:54:6f:44:
d6:8d:0f:4b:e3:50:53:73:02:86:2a:4e:e9:12:b4:
f7:10:f1:2a:d9:fe:79:b0:45:50:8c:6f:c7:73:6e:
2a:51:81:11:8f:79:71:ae:48:e0:b3:e5:e2:98:c9:
05:3f:70:2c:85:af:b7:7d:5a:71:6a:1c:4d:82:03:
e0:31:a6:1f:74:6e:99:19:bb:dc:34:16:36:70:dc:
99:c5:4f:4f:73:99:b0:a0:63:ea:88:52:fa:aa:b0:
17:bf:09:f2:89:c8:21:8b:e2:f3:f4:eb:70:ca:c3:
75:72:8c:42:66:85:f0:0e:ed:2d:92:42:7f:8e:8d:
f4:54:b6:56:71:e1:ee:74:45:1d:cc:1b:b8:73:53:
40:5c:ee:d5:78:3a:95:1f:7a:49:83:a9:d8:11:6a:
e2:0d:37:32:9c:eb:80:b0:15:83:ac:0a:f5:6e:93:
e4:a4:d3:46:9e:ac:4b:7e:e6:d4:8a:d9:c9:4a:1c:
ed:bb:ad:44:b1:a6:e3:f3:82:0b:aa:d1:3d:5f:fc:
cc:17:1c:a6:b6:73:0f:8f:b8:a9:96:9d:33:82:6a:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:EF:EC:A1:E9:91:5D:A0:02:FA:99:B4:DB:5C:14:95:2E:53:39
X509v3 Authority Key Identifier:
keyid:57:86:DE:22:C3:06:6B:9F:5A:D9:A8:8F:D0:24:DC:1B:AE:CC:70:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4beIsMGa59a2aiP0CTcG67McKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/acd6f7-793b-40a5-ba1a-3ae11bb2dd98/1/aI_v7KHpkV2gAvqZtNtcFJUuUzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/acd6f7-793b-40a5-ba1a-3ae11bb2dd98/1/V4beIsMGa59a2aiP0CTcG67McKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.148.0/24
Signature Algorithm: sha256WithRSAEncryption
31:47:40:5d:a0:20:5d:3a:6c:ab:fc:84:a1:a6:7f:0e:cf:2a:
2a:d3:43:5f:d4:3a:21:47:d8:0d:c5:d4:a8:74:e5:33:4a:b1:
4f:69:52:c2:6b:54:59:c8:fe:ad:97:df:6c:bc:25:ec:3f:f0:
79:57:34:43:9a:6e:73:4a:1c:aa:96:49:f4:d8:64:1b:33:c1:
19:04:32:ed:e0:42:36:3e:b3:89:db:d4:93:c8:ab:fb:aa:b6:
d7:41:d9:7a:58:ee:b4:84:da:34:76:2c:ca:c0:94:40:2e:21:
f5:1b:65:92:99:0a:21:86:3c:10:3b:10:1d:66:c7:62:35:5a:
a9:c1:17:2b:ca:8a:3e:f3:77:3b:e9:aa:29:6d:4f:a3:2e:20:
7a:ef:dc:82:bb:4a:5c:a5:f6:94:c6:9e:f4:64:df:66:83:9a:
d3:37:db:3a:c6:4d:42:21:cc:73:b5:01:28:a5:c7:ac:87:81:
14:a5:d2:3f:1a:bc:25:7f:17:2f:dc:17:f0:db:02:dd:60:c0:
6b:89:8c:26:01:c5:ba:d1:87:d7:8b:1d:59:d1:29:14:99:0f:
78:3f:6c:8d:0f:ad:27:1c:8b:cb:21:2d:c4:76:95:7b:b8:fd:
2d:1f:af:dd:8c:d4:89:91:5c:34:5c:c0:cd:00:99:9b:c0:d8:
82:38:b4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net