Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d679cd-4b00-4fbd-82f4-b28dc2b6a46b/1/1-x52pEqUM8abmCGkfUU4yAMlSxE.roa
File: 1-x52pEqUM8abmCGkfUU4yAMlSxE.roa (raw, json)
Hash identifier: ly2ai4SKOz7fFNfRry6wxNwyBjEyLl03DH7BEI/CbjY=
Subject key identifier: FB:1E:76:A4:4A:94:33:C6:9B:98:21:A4:7D:45:38:C8:03:25:4B:11
Certificate issuer: /CN=8b7757d9165f0821228c742ada7b3fb6a3223f58
Certificate serial: 01857082E04C117236E562B754AB4A35BFAF
Authority key identifier: 8B:77:57:D9:16:5F:08:21:22:8C:74:2A:DA:7B:3F:B6:A3:22:3F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3dX2RZfCCEijHQq2ns_tqMiP1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d679cd-4b00-4fbd-82f4-b28dc2b6a46b/1/1-x52pEqUM8abmCGkfUU4yAMlSxE.roa
Signing time: Mon 02 Jan 2023 03:25:03 +0000
ROA not before: Mon 02 Jan 2023 03:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212667
IP address blocks: 176.56.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:e0:4c:11:72:36:e5:62:b7:54:ab:4a:35:bf:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7757d9165f0821228c742ada7b3fb6a3223f58
Validity
Not Before: Jan 2 03:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb1e76a44a9433c69b9821a47d4538c803254b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:6e:b1:2a:07:06:13:bd:71:37:d1:3c:c6:
a7:2b:09:f8:0c:32:7e:1a:ff:aa:74:b3:54:ce:2d:
cc:05:89:fb:b3:9c:65:bf:61:87:3c:b5:87:17:72:
a4:69:74:4c:c5:a1:32:6e:40:f6:a5:f5:7a:e5:cb:
38:ed:71:ce:ca:ad:65:9c:60:fa:1e:c2:8c:6a:be:
94:9d:b9:99:f3:71:72:24:ab:cf:c9:23:33:87:37:
37:06:d4:a0:c2:8b:ad:19:f7:07:d8:26:31:08:05:
6b:83:57:3b:bf:74:0d:58:13:fc:60:09:df:b2:14:
de:00:c6:28:8e:af:e1:8e:09:cc:99:37:a4:56:8e:
7d:b5:39:19:a2:a2:c5:38:82:20:1a:a2:c9:bf:47:
a9:9e:f1:7e:3b:a0:ad:ac:a0:11:8a:53:6c:bb:f8:
44:d7:f3:dd:42:9b:0d:4b:a5:cd:26:a6:f8:a3:53:
0b:a6:17:38:6e:fc:76:ff:e7:cf:a2:7f:d2:73:0a:
55:98:6c:1d:60:1d:31:14:ca:61:ac:a7:f1:03:15:
73:66:c7:3f:a7:78:f6:81:a4:3a:5c:33:25:54:3e:
f7:b1:58:3a:ae:de:90:d5:43:86:e3:54:61:3c:5b:
c3:1d:2b:62:bc:9d:24:2f:f0:1b:d1:37:4f:f7:9e:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1E:76:A4:4A:94:33:C6:9B:98:21:A4:7D:45:38:C8:03:25:4B:11
X509v3 Authority Key Identifier:
keyid:8B:77:57:D9:16:5F:08:21:22:8C:74:2A:DA:7B:3F:B6:A3:22:3F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3dX2RZfCCEijHQq2ns_tqMiP1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d679cd-4b00-4fbd-82f4-b28dc2b6a46b/1/1-x52pEqUM8abmCGkfUU4yAMlSxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d679cd-4b00-4fbd-82f4-b28dc2b6a46b/1/i3dX2RZfCCEijHQq2ns_tqMiP1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.35.0/24
Signature Algorithm: sha256WithRSAEncryption
02:77:ec:78:9b:64:22:3d:2d:55:62:78:69:e0:6b:da:2b:39:
86:6e:79:e0:62:37:51:87:85:2a:15:a5:7c:f0:e3:75:4e:af:
79:49:a7:b1:86:9f:bb:49:00:6e:53:09:a8:8d:87:8f:9b:76:
9a:cd:56:99:63:b5:f4:1c:f3:95:f1:50:ed:58:6b:9b:40:90:
08:69:47:a5:8c:38:7c:e0:af:f3:cf:1d:1f:f8:49:35:58:e8:
74:13:88:13:cf:ae:f2:89:4b:be:4e:d6:03:8f:6f:ea:63:ec:
ca:5f:81:76:ab:65:5f:ed:de:ae:ce:ba:26:89:26:69:be:3a:
99:fb:c8:8b:63:1e:84:6b:18:56:41:da:21:a7:95:fc:02:12:
25:7a:9a:2c:34:0d:d8:b7:9a:49:e7:8b:29:71:ee:02:f2:05:
ad:eb:ca:19:7b:81:c8:80:65:84:7c:2a:4c:31:f0:e5:f3:1e:
b4:4a:c7:4e:dd:a2:01:96:4a:5a:86:73:2f:d2:26:aa:a5:36:
46:60:37:6c:e1:f4:ab:8f:ff:99:62:79:08:2b:7d:79:8e:b1:
60:69:cc:07:11:38:60:3f:ab:47:4d:b3:52:69:85:c0:18:f9:
f7:82:e3:11:49:08:de:2e:97:f3:fa:45:a9:a3:29:e9:fb:21:
43:35:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:10 2024 by rpki-client on console-ams.rpki-client.org