Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/1nTwkrdX0K7sltByQWyTD6W2-YM.roa
File: 1nTwkrdX0K7sltByQWyTD6W2-YM.roa (raw, json)
Hash identifier: kyjG3cK/BC7SZaljpIXeyjLFfXtMpvYahLghNMG6yiY=
Subject key identifier: D6:74:F0:92:B7:57:D0:AE:EC:96:D0:72:41:6C:93:0F:A5:B6:F9:83
Certificate issuer: /CN=c4237dbef16a5d945a32c371ccdcb4d31b276b8d
Certificate serial: 0182881F30FA250B3F758ADC2D3C9DBC8EF3
Authority key identifier: C4:23:7D:BE:F1:6A:5D:94:5A:32:C3:71:CC:DC:B4:D3:1B:27:6B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCN9vvFqXZRaMsNxzNy00xsna40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/1nTwkrdX0K7sltByQWyTD6W2-YM.roa
Signing time: Wed 10 Aug 2022 14:18:41 +0000
ROA not before: Wed 10 Aug 2022 14:18:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34471
IP address blocks: 176.56.64.0/19 maxlen: 19
176.56.84.0/24 maxlen: 24
176.56.80.0/24 maxlen: 24
176.56.83.0/24 maxlen: 24
176.56.82.0/24 maxlen: 24
176.56.81.0/24 maxlen: 24
176.56.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:88:1f:30:fa:25:0b:3f:75:8a:dc:2d:3c:9d:bc:8e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4237dbef16a5d945a32c371ccdcb4d31b276b8d
Validity
Not Before: Aug 10 14:18:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d674f092b757d0aeec96d072416c930fa5b6f983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:77:d2:d2:06:b3:81:4f:da:0e:7c:43:ba:38:
52:87:08:7f:5b:34:fc:72:db:95:cc:d0:a5:0b:17:
3b:35:cb:97:01:c3:76:a6:65:ec:27:8b:3c:ab:5d:
6b:9a:fd:3d:3c:91:b2:19:3f:95:bb:21:cd:96:d2:
0c:14:17:81:4b:b8:f3:f3:31:77:f9:5a:d9:85:bc:
73:ae:6c:2d:0f:92:c2:c4:69:a7:95:51:22:09:54:
43:58:77:7b:05:92:39:5c:10:47:4f:ac:36:9e:40:
0f:dc:0a:ac:79:8e:7f:fa:be:61:db:87:08:80:18:
42:c6:d8:fb:62:57:83:e3:2e:65:77:cb:82:f4:71:
c1:2e:ff:dd:f7:c8:24:59:4b:0b:f1:49:93:0d:d5:
a6:43:cb:04:62:ce:ec:e9:7b:36:b5:76:38:aa:70:
07:33:84:09:7e:bd:b9:27:35:03:8a:ef:b8:31:b8:
24:51:a4:8b:47:43:ff:29:19:15:e0:ce:39:bd:b4:
70:fa:dd:92:32:4a:c1:1b:43:da:d0:5e:93:79:8d:
c0:64:71:93:1f:ed:45:8e:41:2c:d1:ae:6a:7b:b9:
bf:ff:66:60:99:10:87:12:26:14:9f:64:08:c8:31:
87:06:8a:0c:90:f0:4c:65:5e:e2:fd:94:cf:6f:a4:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:74:F0:92:B7:57:D0:AE:EC:96:D0:72:41:6C:93:0F:A5:B6:F9:83
X509v3 Authority Key Identifier:
keyid:C4:23:7D:BE:F1:6A:5D:94:5A:32:C3:71:CC:DC:B4:D3:1B:27:6B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCN9vvFqXZRaMsNxzNy00xsna40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/1nTwkrdX0K7sltByQWyTD6W2-YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/xCN9vvFqXZRaMsNxzNy00xsna40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.64.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:5c:78:92:af:30:5f:74:39:43:3d:eb:e2:b7:19:69:80:30:
f2:b1:dc:7b:a1:f8:27:86:5a:14:fd:76:ee:a2:63:18:4d:20:
bf:f1:86:b1:96:ba:68:9e:f0:62:7f:ca:ef:3d:28:68:30:0c:
4c:b5:ac:40:57:4d:ec:b8:cb:0e:60:e1:5b:32:8c:78:7b:1c:
e2:2c:e5:6f:4d:35:c5:c5:5b:0f:5e:1a:3c:70:86:35:fb:a0:
09:8f:5f:38:d2:b6:b2:6c:1c:b4:32:b1:91:d3:f1:36:30:85:
50:c0:50:ea:90:42:9c:5d:d6:1d:6e:5e:84:18:cd:70:60:11:
71:f1:ef:d0:df:2b:f2:c9:ba:8f:79:54:99:97:41:10:4b:75:
dd:74:2e:ed:d8:95:5a:fd:f1:2a:02:d0:4d:86:2c:7c:a9:f8:
90:68:a7:fd:af:35:ad:8d:c8:f6:66:25:bd:13:77:a6:49:dc:
0a:7e:bd:b0:dc:d0:94:22:1f:5c:41:e4:42:19:d2:d0:8b:e3:
22:c7:d5:f2:85:b7:e3:8c:47:a5:c3:51:12:fd:07:90:b2:bb:
99:8e:c1:b9:54:82:05:6e:b4:f8:3d:00:2c:8b:4a:3d:25:36:
63:a1:4f:24:cf:89:63:11:67:9a:78:00:fb:61:33:7e:e1:3c:
a2:74:c2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:51 2024 by rpki-client on console-ams.rpki-client.org