Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a07926-169c-4f3a-93d5-8fbc840e28ed/1/0ca3QLrqgrf6dvYCj1TvkzmGoC4.roa
File: 0ca3QLrqgrf6dvYCj1TvkzmGoC4.roa (raw, json)
Hash identifier: BKouk6l//vDEjkfQ//hdsWyZ1WgdIGaaUsQl1Rbw6kc=
Subject key identifier: D1:C6:B7:40:BA:EA:82:B7:FA:76:F6:02:8F:54:EF:93:39:86:A0:2E
Certificate issuer: /CN=8c81e8e5c56704561a74779d71c02bca51ab729b
Certificate serial: 0182F965505C0EE0FF2C5C0F53810B0A15C5
Authority key identifier: 8C:81:E8:E5:C5:67:04:56:1A:74:77:9D:71:C0:2B:CA:51:AB:72:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIHo5cVnBFYadHedccArylGrcps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a07926-169c-4f3a-93d5-8fbc840e28ed/1/0ca3QLrqgrf6dvYCj1TvkzmGoC4.roa
Signing time: Thu 01 Sep 2022 14:12:22 +0000
ROA not before: Thu 01 Sep 2022 14:12:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 176.121.64.0/24 maxlen: 24
176.121.64.0/22 maxlen: 22
176.121.64.0/21 maxlen: 21
176.121.71.0/24 maxlen: 24
176.121.68.0/24 maxlen: 24
176.121.67.0/24 maxlen: 24
176.121.66.0/24 maxlen: 24
176.121.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:65:50:5c:0e:e0:ff:2c:5c:0f:53:81:0b:0a:15:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81e8e5c56704561a74779d71c02bca51ab729b
Validity
Not Before: Sep 1 14:12:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1c6b740baea82b7fa76f6028f54ef933986a02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:4a:fb:7b:b6:fa:cf:5a:c3:a5:e9:5d:2f:
7d:50:7e:c2:c5:20:38:45:64:f6:bf:13:1b:e5:af:
14:26:45:fd:4f:84:c3:bd:ce:21:18:fa:b3:c3:96:
42:f7:aa:0a:b8:78:c6:6e:d6:b9:15:ae:52:64:9a:
e3:44:44:f3:fb:17:0c:e5:01:4f:f1:77:0d:39:20:
17:a5:c3:e1:7e:49:5a:9c:a5:6f:d0:21:3a:c0:f1:
6e:89:c9:9b:60:b1:15:fb:20:20:a9:3b:a0:d1:bf:
fd:82:ab:00:dc:70:12:e4:da:7a:a8:b2:1f:b1:75:
d2:8a:fd:25:a1:76:13:0d:f5:59:81:03:c2:42:8c:
f8:7b:86:63:d0:e8:f6:e0:89:23:6b:15:62:3c:49:
15:dd:66:38:d1:b4:7b:7a:8b:26:56:5e:43:9a:65:
c8:e0:cc:8b:10:bf:d0:81:58:dc:2e:0f:a8:02:e0:
1f:c3:e5:b7:ae:f0:85:cf:5c:46:36:0a:4e:08:d7:
c9:22:aa:16:ba:2f:43:89:29:5e:f2:3b:fa:25:c5:
f4:42:f1:89:95:27:cd:64:4f:43:eb:54:6a:77:ec:
71:0f:9b:59:e0:bb:bd:3c:01:50:df:0b:7f:18:29:
42:a8:8e:3d:d6:dd:2f:77:b4:3b:c3:09:22:f4:a3:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C6:B7:40:BA:EA:82:B7:FA:76:F6:02:8F:54:EF:93:39:86:A0:2E
X509v3 Authority Key Identifier:
keyid:8C:81:E8:E5:C5:67:04:56:1A:74:77:9D:71:C0:2B:CA:51:AB:72:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIHo5cVnBFYadHedccArylGrcps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a07926-169c-4f3a-93d5-8fbc840e28ed/1/0ca3QLrqgrf6dvYCj1TvkzmGoC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a07926-169c-4f3a-93d5-8fbc840e28ed/1/jIHo5cVnBFYadHedccArylGrcps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.64.0/21
Signature Algorithm: sha256WithRSAEncryption
c8:99:82:52:e2:d3:c4:f8:eb:80:d6:56:fc:ee:29:3f:a1:80:
0d:a7:a0:fb:a5:6b:df:e1:f9:01:d9:51:99:10:ed:6d:bc:3f:
d1:d5:7d:0a:73:9c:96:a1:a4:a3:3f:d7:9d:99:22:ff:13:75:
6f:94:c2:93:21:c9:20:ed:ab:0b:9e:71:b1:e4:45:bb:1b:ee:
fa:dd:1d:35:61:9a:00:41:b6:0a:c4:8f:51:99:3e:b2:a5:c1:
b1:57:b7:bb:eb:05:ea:91:1e:d4:bd:bd:05:33:be:66:ab:fe:
1e:bd:bc:e7:32:4e:94:7e:f7:1a:97:0e:59:5f:bf:62:11:66:
99:42:60:91:a0:f3:00:50:31:e1:4e:1f:36:6d:e5:0b:2b:ec:
97:b3:60:0a:9e:ca:2a:f1:90:91:74:9b:74:ec:68:4a:53:51:
2a:0e:38:67:f6:ac:4e:c2:e7:69:02:b5:9e:ae:19:b4:1b:37:
ca:a1:37:b8:42:b1:2a:92:06:d3:b8:19:5d:79:25:49:37:64:
6e:7b:1e:54:c8:53:f3:f0:56:39:37:f9:b5:c4:5a:29:a1:74:
fc:11:be:9a:8a:c4:59:8c:33:c9:ac:ee:8c:fc:db:9d:a8:31:
99:b7:49:42:a4:a3:a1:cb:86:2e:e6:f3:02:40:c7:86:53:32:
67:2a:ed:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:48 2024 by rpki-client on console-ams.rpki-client.org