Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/Ag14ARog8kfq9_le7e9v8RUFEGA.roa
File: Ag14ARog8kfq9_le7e9v8RUFEGA.roa (raw, json)
Hash identifier: 0nzqitHQprDkxndZ98RVm0Z/vuyUxbgC9XFHNxPdBQU=
Subject key identifier: 02:0D:78:01:1A:20:F2:47:EA:F7:F9:5E:ED:EF:6F:F1:15:05:10:60
Certificate issuer: /CN=1488c18c62f08a4ed8ef83e0aa8d5690b8505368
Certificate serial: 01856BE5B83435E8442F7C981BAC36C45CC9
Authority key identifier: 14:88:C1:8C:62:F0:8A:4E:D8:EF:83:E0:AA:8D:56:90:B8:50:53:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIjBjGLwik7Y74Pgqo1WkLhQU2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/Ag14ARog8kfq9_le7e9v8RUFEGA.roa
Signing time: Sun 01 Jan 2023 05:54:55 +0000
ROA not before: Sun 01 Jan 2023 05:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201106
IP address blocks: 176.116.1.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b8:34:35:e8:44:2f:7c:98:1b:ac:36:c4:5c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1488c18c62f08a4ed8ef83e0aa8d5690b8505368
Validity
Not Before: Jan 1 05:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=020d78011a20f247eaf7f95eedef6ff115051060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b4:6f:f3:1f:11:84:a4:34:e4:94:2b:42:15:
b4:a7:71:bd:79:8b:a4:ae:1d:59:0e:c5:b1:5a:97:
f0:f0:08:ef:aa:f9:fe:08:2d:c8:75:bc:eb:b8:98:
9e:03:42:db:f0:36:80:bf:34:4e:64:42:67:7c:0b:
77:18:13:f3:1a:a9:a7:74:aa:1b:c0:04:40:16:89:
68:57:00:60:1e:6d:be:cf:c4:6b:06:a8:4d:31:9c:
e5:3f:2d:e6:9a:3b:14:73:06:95:13:10:82:bf:05:
2d:b1:d0:de:98:67:6a:c4:96:ab:50:f8:ad:c3:e9:
dc:5d:23:83:26:76:6b:64:69:fd:a9:63:ef:4b:1f:
5d:db:9c:09:e5:3b:30:4c:28:3b:ea:08:e7:bf:57:
49:3a:6f:d1:9e:24:50:b5:2f:45:3d:76:16:68:1c:
9b:ac:88:a2:6a:08:62:0f:db:43:24:b2:fc:8c:c7:
ce:ee:8e:fd:ae:80:ad:27:fd:7c:64:46:59:02:a2:
bf:72:d8:43:f7:6d:c1:e6:52:38:57:56:c6:76:b1:
ab:4f:26:39:70:0f:88:13:e3:d1:f9:1e:0c:ee:c3:
c6:e9:0a:c4:6b:f3:93:37:41:e1:fa:75:e8:b0:27:
10:e2:ac:43:38:6b:80:c7:c8:68:08:2f:c7:72:fb:
ac:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0D:78:01:1A:20:F2:47:EA:F7:F9:5E:ED:EF:6F:F1:15:05:10:60
X509v3 Authority Key Identifier:
keyid:14:88:C1:8C:62:F0:8A:4E:D8:EF:83:E0:AA:8D:56:90:B8:50:53:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIjBjGLwik7Y74Pgqo1WkLhQU2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/Ag14ARog8kfq9_le7e9v8RUFEGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/FIjBjGLwik7Y74Pgqo1WkLhQU2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.1.0/24
Signature Algorithm: sha256WithRSAEncryption
19:af:ea:42:eb:fd:5d:bf:92:b8:5e:7f:92:1a:44:99:cd:5a:
3c:a8:35:e4:e1:e9:55:44:22:8e:e0:a2:3b:4f:2f:41:27:78:
88:bc:10:95:fc:d2:27:aa:c5:c2:6c:43:d1:57:77:e6:ac:7a:
18:89:f9:ee:40:80:85:4f:32:3b:49:1d:63:13:87:1d:0d:b5:
81:29:16:d7:dd:4b:2f:f5:88:c6:c7:c2:5c:87:22:1d:f9:c7:
d4:6d:25:5f:ab:23:1c:fa:12:1f:0e:08:86:86:b7:37:92:7a:
82:ec:19:22:34:68:2f:e0:7d:1a:37:99:1f:b9:cf:fd:cf:2b:
b0:90:ae:9b:c3:08:07:93:d4:91:89:ca:57:ca:22:6e:d6:08:
5c:3a:48:62:3e:fe:f8:31:80:f6:56:1b:83:08:f6:a2:84:86:
4a:69:24:e8:0e:fb:15:80:f7:31:9f:44:71:36:71:81:b1:f3:
a6:4a:58:3f:c4:25:07:75:5d:72:11:6c:48:88:7f:f2:10:82:
7f:c6:89:97:96:94:3a:3d:64:b1:7d:8d:08:49:13:31:60:fa:
52:ac:8f:e2:81:94:99:e9:53:b6:c5:dc:21:92:3a:d7:62:b4:
d5:30:cd:aa:40:34:8a:3c:9e:97:e1:43:83:00:c0:1a:15:17:
6b:10:dd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 12:07:07 2023 by rpki-client on console-fra.rpki-client.org