Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2587c5-3352-4f58-91d9-0c552f8071dc/1/nW_RphDSRduL7SttbLAvat3fXg0.roa
File: nW_RphDSRduL7SttbLAvat3fXg0.roa (raw, json)
Hash identifier: iL8mYvPPD47z8S0nR9Akv02seCZx07mwyUxPBYux6R8=
Subject key identifier: 9D:6F:D1:A6:10:D2:45:DB:8B:ED:2B:6D:6C:B0:2F:6A:DD:DF:5E:0D
Certificate issuer: /CN=db798fdae2d1894ee033b203e74663138c879b70
Certificate serial: 06C06060
Authority key identifier: DB:79:8F:DA:E2:D1:89:4E:E0:33:B2:03:E7:46:63:13:8C:87:9B:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23mP2uLRiU7gM7ID50ZjE4yHm3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2587c5-3352-4f58-91d9-0c552f8071dc/1/nW_RphDSRduL7SttbLAvat3fXg0.roa
Signing time: Sat 01 Jan 2022 10:54:34 +0000
ROA not before: Sat 01 Jan 2022 10:54:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44092
IP address blocks: 176.56.137.0/24 maxlen: 24
176.56.138.0/24 maxlen: 24
176.56.136.0/24 maxlen: 24
176.56.139.0/24 maxlen: 24
176.56.136.0/21 maxlen: 24
176.56.141.0/24 maxlen: 24
176.56.142.0/24 maxlen: 24
176.56.140.0/24 maxlen: 24
176.56.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113270880 (0x6c06060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db798fdae2d1894ee033b203e74663138c879b70
Validity
Not Before: Jan 1 10:54:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d6fd1a610d245db8bed2b6d6cb02f6adddf5e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d4:f6:11:ae:da:4d:da:50:32:ae:be:ba:74:
36:d5:23:19:05:07:37:35:2d:9b:45:a2:e1:56:9d:
45:bd:81:14:a6:2b:af:d7:fc:be:e8:4f:d8:6c:f5:
e1:54:87:1d:bc:0e:e8:73:71:c9:46:a2:59:31:eb:
70:81:dd:2b:56:55:74:c4:3d:e6:95:93:eb:c3:17:
08:aa:35:ad:e9:c7:39:90:da:61:a2:cc:80:6b:a9:
85:7b:7c:98:b9:a2:79:ff:a9:4b:c5:29:60:84:ac:
53:2d:8f:92:af:1c:c3:06:1c:e2:c1:55:47:f3:b9:
90:1b:98:8a:d6:af:25:0a:c7:06:f8:80:19:e0:18:
92:b9:e3:f5:c9:06:f7:26:99:dc:e3:c3:28:bf:b3:
6a:32:3a:09:21:21:f8:aa:a3:49:79:2d:64:54:75:
16:b8:bc:03:df:ba:ca:3f:70:d8:0c:e4:58:19:9e:
b0:da:67:07:2d:f4:13:d9:ad:d8:62:7e:7d:23:d8:
3e:37:73:01:d1:ca:15:be:43:0c:e4:ba:aa:28:78:
17:b8:9b:60:69:10:d9:26:53:d9:5b:66:3d:19:4c:
7a:59:cc:30:cd:a5:8a:a8:60:0b:4c:a3:0f:99:0d:
ef:c8:58:05:fd:07:a3:b4:48:5d:1e:2a:52:52:bc:
d2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6F:D1:A6:10:D2:45:DB:8B:ED:2B:6D:6C:B0:2F:6A:DD:DF:5E:0D
X509v3 Authority Key Identifier:
keyid:DB:79:8F:DA:E2:D1:89:4E:E0:33:B2:03:E7:46:63:13:8C:87:9B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23mP2uLRiU7gM7ID50ZjE4yHm3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2587c5-3352-4f58-91d9-0c552f8071dc/1/nW_RphDSRduL7SttbLAvat3fXg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2587c5-3352-4f58-91d9-0c552f8071dc/1/23mP2uLRiU7gM7ID50ZjE4yHm3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.136.0/21
Signature Algorithm: sha256WithRSAEncryption
38:9b:fe:8c:58:3e:7e:73:7d:4e:c1:e0:28:41:a3:d6:de:1e:
03:db:19:a8:46:88:d3:84:f6:0e:e1:6c:ae:9d:3d:a7:10:b0:
41:07:5f:7c:06:61:6a:2d:a9:67:e9:b0:22:d0:48:da:0f:12:
6d:36:6f:7f:fb:81:43:e4:64:be:b6:16:4b:64:7b:5c:83:1f:
9a:5c:46:97:89:ff:a1:df:e9:89:91:c0:89:4c:ce:f6:9d:52:
0f:79:33:db:c2:b8:59:3e:ee:7a:aa:e5:10:83:c2:38:24:ca:
2b:2c:55:ad:7c:f1:28:ba:aa:ac:2c:82:0b:bd:a3:22:71:8c:
19:85:7c:05:2a:c1:12:5e:6d:e9:3e:ef:0a:d9:8c:e2:40:fc:
11:21:a0:39:4b:92:0b:4f:7b:76:46:8c:65:c5:49:9b:be:b5:
a9:3f:51:81:c6:7b:5d:4e:8e:5e:b3:ef:56:6d:52:05:fa:7d:
99:51:f4:fd:53:d4:fb:61:47:87:50:0d:a0:0a:12:5b:74:ff:
0c:03:73:12:3c:5c:af:64:60:a2:eb:c9:6e:cc:3b:6e:bd:bf:
a7:a3:15:2c:4f:1d:be:c0:36:41:19:58:d2:ba:cd:4a:2f:f3:
c9:8a:ae:56:88:e5:b3:89:75:b5:47:88:fa:d9:62:d5:a4:4c:
c0:11:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:29 2023 by rpki-client on console-ams.rpki-client.org