Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/aa576f-9aab-4cc8-a738-56f52b0ae04a/1/1-lQewdCEFin-6ne8Spm7935Ws3U.roa
File: 1-lQewdCEFin-6ne8Spm7935Ws3U.roa (raw, json)
Hash identifier: iaPg8DrXROTQ0/xz7cuXZypg5rPcNFiIPIj5r1DMOYc=
Subject key identifier: FA:54:1E:C1:D0:84:16:29:FE:EA:77:BC:4A:99:BB:F7:7E:56:B3:75
Certificate issuer: /CN=1ae5c2fd9716718f426202834791d941a9c846a7
Certificate serial: 01882086B425B2CAB106EDAA57A38B34C8CD
Authority key identifier: 1A:E5:C2:FD:97:16:71:8F:42:62:02:83:47:91:D9:41:A9:C8:46:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuXC_ZcWcY9CYgKDR5HZQanIRqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/aa576f-9aab-4cc8-a738-56f52b0ae04a/1/1-lQewdCEFin-6ne8Spm7935Ws3U.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 176.116.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b4:25:b2:ca:b1:06:ed:aa:57:a3:8b:34:c8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae5c2fd9716718f426202834791d941a9c846a7
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa541ec1d0841629feea77bc4a99bbf77e56b375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:aa:6d:69:46:4a:fd:79:4e:b4:5c:1e:b5:
ef:a5:7f:ed:51:80:b7:b9:4a:c4:35:82:69:f9:d7:
34:6f:e8:0b:c7:60:3a:29:06:32:d3:5b:21:e7:4d:
88:f1:88:64:9b:c5:a0:72:1f:8d:73:cd:09:a4:ab:
68:47:22:95:72:3d:df:da:92:34:dd:ea:99:b2:15:
f2:93:de:f5:b8:bd:86:3e:4b:46:19:da:ce:cd:62:
eb:5f:c6:57:ad:7d:96:6c:04:a2:a5:7f:5e:da:48:
48:da:4f:bb:71:66:e8:e6:db:4d:91:55:55:03:a3:
87:a8:ed:e6:2e:3c:b9:d7:75:21:ec:c0:cc:9a:99:
e0:d9:8b:92:e5:1f:50:51:58:d4:2e:68:15:26:1e:
ec:c2:c9:41:0e:e3:46:11:c7:b2:34:34:99:12:ea:
47:a8:3e:61:bc:0f:81:bd:ec:7f:ab:14:56:f9:e2:
2e:40:a5:4b:52:e5:32:52:2f:ed:39:83:16:97:22:
5b:e3:d9:f7:9a:fa:6c:78:d3:0b:46:32:45:77:ee:
1b:82:91:c2:4d:c9:37:19:40:f2:c5:4d:ae:1b:44:
a3:5e:e6:83:23:f1:84:52:98:84:95:20:9b:46:47:
93:82:85:32:04:3a:29:8b:64:04:71:a6:a6:c4:5b:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:54:1E:C1:D0:84:16:29:FE:EA:77:BC:4A:99:BB:F7:7E:56:B3:75
X509v3 Authority Key Identifier:
keyid:1A:E5:C2:FD:97:16:71:8F:42:62:02:83:47:91:D9:41:A9:C8:46:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuXC_ZcWcY9CYgKDR5HZQanIRqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aa576f-9aab-4cc8-a738-56f52b0ae04a/1/1-lQewdCEFin-6ne8Spm7935Ws3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aa576f-9aab-4cc8-a738-56f52b0ae04a/1/GuXC_ZcWcY9CYgKDR5HZQanIRqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:91:6c:e1:3e:72:e2:20:97:f6:c0:d5:28:0a:3e:6e:83:88:
1b:da:53:62:e0:ae:1e:d9:d0:bf:6e:30:64:5a:54:20:e3:ed:
0e:9d:70:01:37:72:e5:e2:4c:09:e8:97:d7:a8:d2:ae:26:ee:
7d:f3:ec:eb:45:df:96:94:f3:77:c5:ee:b4:47:45:38:01:30:
67:e4:eb:2c:56:58:6a:e9:c3:79:20:84:c0:cf:9e:4c:8c:fb:
a5:93:9d:59:b7:92:0c:16:ff:a0:fa:53:2e:10:4b:6d:06:d1:
80:66:0f:47:dc:de:ea:1e:4e:61:39:bb:08:ec:f1:ad:59:74:
4c:88:91:0f:a4:9a:93:2c:0c:38:c8:ce:ee:08:04:7d:a3:57:
2e:b9:1a:1a:85:9b:f7:03:53:f0:46:a9:e8:7c:74:27:5f:a3:
0a:d0:9b:4c:48:7e:69:3b:54:88:03:ed:b1:3f:12:c2:2e:cb:
7b:2a:3b:0e:8d:c0:cd:36:29:62:1d:dc:4f:65:e0:66:3b:4f:
95:04:fa:23:b1:3b:2f:b3:a0:51:95:19:4f:de:ba:b1:36:1d:
e1:d9:ec:45:34:d9:30:fe:be:21:82:5c:c4:3e:79:f3:fb:67:
3c:0c:d8:bd:17:59:a8:99:ca:81:2c:a6:5a:9a:08:ff:56:1e:
76:1b:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 15:25:09 2023 by rpki-client on console-fra.rpki-client.org