Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/oTzRI33Guxcz0ThUfYh1e9B7Wyg.roa
File: oTzRI33Guxcz0ThUfYh1e9B7Wyg.roa (raw, json)
Hash identifier: rG8G2bO9xawrTYBXbJ//J58GVUCM1aaJ509zkjnofhk=
Subject key identifier: A1:3C:D1:23:7D:C6:BB:17:33:D1:38:54:7D:88:75:7B:D0:7B:5B:28
Certificate issuer: /CN=40f257a57bc23e9db0997db7272fa94091e17d09
Certificate serial: 0271C88D
Authority key identifier: 40:F2:57:A5:7B:C2:3E:9D:B0:99:7D:B7:27:2F:A9:40:91:E1:7D:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPJXpXvCPp2wmX23Jy-pQJHhfQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/oTzRI33Guxcz0ThUfYh1e9B7Wyg.roa
Signing time: Sat 04 Jun 2022 13:08:48 +0000
ROA not before: Sat 04 Jun 2022 13:08:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 176.100.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41011341 (0x271c88d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f257a57bc23e9db0997db7272fa94091e17d09
Validity
Not Before: Jun 4 13:08:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a13cd1237dc6bb1733d138547d88757bd07b5b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:d2:c1:75:e5:f7:a4:55:b6:36:e8:50:21:
6a:a9:d0:71:7e:e3:e9:66:67:b9:1f:bc:b6:d1:1d:
3d:be:b1:eb:c1:07:f4:49:0b:70:06:a3:75:62:c5:
bf:6b:36:20:af:ed:c4:f1:cd:d2:38:26:bb:4c:c8:
0f:fc:6f:81:33:b5:00:1f:b0:cc:3b:fc:64:2f:9c:
b1:bd:cb:ff:1e:12:09:60:7a:5d:cd:13:ed:1e:95:
77:13:3a:1d:dc:83:a1:a7:a8:3e:b1:ba:d2:e4:dd:
2d:13:fd:a3:b7:16:bb:d3:41:f7:96:c3:21:43:46:
43:d3:bf:01:1a:9d:ec:e5:bb:70:8a:61:47:a6:45:
b6:11:f0:c6:18:5a:fc:17:03:fe:0e:00:32:db:cc:
36:6b:42:4f:4b:73:67:d7:fa:5c:5b:9b:6d:f1:e7:
be:82:94:7f:98:23:93:ed:23:7d:95:cc:69:97:89:
a8:52:2a:71:e3:db:18:e7:b5:65:78:39:de:8d:1e:
58:6e:7e:56:85:c9:df:9e:de:5a:75:38:fd:ee:28:
5f:b7:08:ae:e3:02:4b:a2:dc:25:d9:94:75:5c:1f:
06:ad:8e:4f:78:5b:77:31:ef:fd:ea:43:62:5f:89:
0f:13:35:27:86:d7:d4:7a:ed:37:9b:80:93:f8:6c:
8c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3C:D1:23:7D:C6:BB:17:33:D1:38:54:7D:88:75:7B:D0:7B:5B:28
X509v3 Authority Key Identifier:
keyid:40:F2:57:A5:7B:C2:3E:9D:B0:99:7D:B7:27:2F:A9:40:91:E1:7D:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPJXpXvCPp2wmX23Jy-pQJHhfQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/oTzRI33Guxcz0ThUfYh1e9B7Wyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/QPJXpXvCPp2wmX23Jy-pQJHhfQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.47.0/24
Signature Algorithm: sha256WithRSAEncryption
53:26:69:98:e6:b0:b8:54:17:a6:fd:48:7c:85:35:b2:91:87:
7a:55:0e:6a:c6:eb:4f:a4:6c:c9:03:41:4e:4e:3a:f3:1e:64:
73:08:11:ed:c8:fa:97:7c:fc:4f:cb:d5:ad:b5:97:0d:4c:e7:
9a:1a:6a:95:1a:bc:f8:fc:b3:cb:e9:e6:a9:4b:f4:ff:da:2a:
70:a5:7b:ca:70:6f:c5:f4:ea:59:35:f6:bd:2a:eb:33:49:f8:
b9:ed:f8:db:9f:5d:a1:ad:09:ac:9a:24:a7:75:15:bc:6a:8b:
d3:4c:64:27:6d:2d:34:91:a6:da:9b:45:12:e9:4a:65:07:54:
37:a8:43:28:b9:f8:ce:c9:6f:a1:5a:49:db:0a:4e:73:43:48:
97:79:a9:2e:7c:69:ba:b7:c0:54:13:24:08:6b:40:44:13:9b:
76:0f:15:a7:1a:19:6c:e7:41:3b:8f:15:e3:53:b8:e3:92:6e:
f8:8e:89:44:1b:7a:ab:c6:2e:95:49:76:32:ab:6b:fe:be:44:
94:d4:79:15:c3:63:03:1b:0e:b8:e5:89:37:f8:02:15:5f:48:
6e:18:fe:ec:86:6e:10:b6:3c:69:c0:cd:41:47:61:ae:2d:0d:
8f:39:d9:a4:a6:7a:fa:d5:ae:94:33:ea:f3:d0:5e:70:b4:af:
1d:47:44:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:46 2024 by rpki-client on console-ams.rpki-client.org