Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/uGWfKdm-eNnkVVp1YUQkBalLoTE.roa
File: uGWfKdm-eNnkVVp1YUQkBalLoTE.roa (raw, json)
Hash identifier: 6BWYXI6V90TwdWcDFYIabginA1OxNMCXg+zBGDR9tpQ=
Subject key identifier: B8:65:9F:29:D9:BE:78:D9:E4:55:5A:75:61:44:24:05:A9:4B:A1:31
Certificate issuer: /CN=40f257a57bc23e9db0997db7272fa94091e17d09
Certificate serial: 027220F4
Authority key identifier: 40:F2:57:A5:7B:C2:3E:9D:B0:99:7D:B7:27:2F:A9:40:91:E1:7D:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPJXpXvCPp2wmX23Jy-pQJHhfQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/uGWfKdm-eNnkVVp1YUQkBalLoTE.roa
Signing time: Sat 04 Jun 2022 13:08:49 +0000
ROA not before: Sat 04 Jun 2022 13:08:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 176.100.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41033972 (0x27220f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f257a57bc23e9db0997db7272fa94091e17d09
Validity
Not Before: Jun 4 13:08:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8659f29d9be78d9e4555a7561442405a94ba131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:9c:fa:38:60:bc:79:4c:f6:f2:15:9e:19:
cc:2b:c5:4f:82:01:a5:50:6e:5c:8f:b6:80:da:f5:
3c:d4:e5:68:20:3d:10:62:16:e7:ea:eb:92:13:99:
ef:33:97:0d:40:46:57:6f:d3:d7:7a:59:74:56:bf:
21:75:ed:a1:d9:27:b8:4f:a1:91:5c:d8:3a:df:bb:
d2:78:8a:2a:82:3b:08:9b:c1:f4:f6:e2:01:f8:5c:
74:ff:2d:5c:11:c1:65:d5:65:6a:b9:97:56:4e:e7:
a4:d7:e9:34:e1:3d:fb:63:fe:9f:51:82:e8:e3:21:
4e:52:5c:7a:d1:22:e6:9d:9b:0e:66:4c:ea:9e:c1:
a5:1c:69:da:b6:8f:cc:5f:fc:47:93:b8:63:f6:8a:
f6:78:0b:ff:be:05:b8:56:4c:be:24:94:ec:58:4e:
a0:f2:89:07:26:6a:b3:4b:0b:b8:8b:0e:1a:fe:0c:
33:de:77:0b:3a:be:f7:34:a8:a8:a5:5b:99:37:81:
15:c8:23:4d:ad:b1:4e:6a:55:b1:47:60:bb:9b:54:
e6:de:6a:69:fd:ce:72:10:e9:2b:75:10:b5:5b:1e:
f3:bf:3c:ea:87:dd:3a:15:c1:6b:6e:f9:f6:cc:ee:
06:42:18:7e:4a:41:41:71:1d:1b:8f:7b:4e:2d:fd:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:65:9F:29:D9:BE:78:D9:E4:55:5A:75:61:44:24:05:A9:4B:A1:31
X509v3 Authority Key Identifier:
keyid:40:F2:57:A5:7B:C2:3E:9D:B0:99:7D:B7:27:2F:A9:40:91:E1:7D:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPJXpXvCPp2wmX23Jy-pQJHhfQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/uGWfKdm-eNnkVVp1YUQkBalLoTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/QPJXpXvCPp2wmX23Jy-pQJHhfQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.47.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4e:f8:2d:a1:c4:de:f7:d4:ec:9e:31:74:37:51:52:8c:60:
be:3d:54:92:84:8b:42:d6:e8:ea:67:a1:55:fd:f6:52:62:73:
8f:54:95:57:f5:8f:66:50:7a:bf:20:98:6a:5b:3a:dc:66:7d:
97:2f:ec:76:12:1d:ee:18:08:11:ab:4d:89:54:cb:5e:06:30:
97:5f:e8:01:2c:f3:11:2a:91:a7:b8:17:d0:be:bc:a1:57:92:
5e:91:49:7b:f1:3c:ee:2a:45:95:c6:0e:27:eb:ea:f5:5c:63:
fc:e4:50:33:0f:10:ba:0f:22:57:eb:3c:ba:a6:64:29:c7:88:
39:bb:b9:bb:de:27:dd:10:d9:fc:47:e6:80:2b:a6:b8:73:09:
db:82:64:2c:37:74:b5:b5:5f:d9:fb:72:8f:9c:58:b9:9e:fb:
25:18:cf:1f:01:af:80:a4:e1:8a:dd:b1:be:37:94:44:ef:33:
32:2e:05:57:68:8c:dd:08:e5:35:73:fc:29:7c:fa:5a:c9:77:
bb:ac:56:6e:ea:b8:44:37:ba:35:74:be:be:b5:46:bd:93:63:
cc:a7:da:64:74:2b:26:6e:97:c0:fa:11:f1:e6:b0:26:96:e1:
7e:f2:d3:90:49:be:60:48:a2:ee:e3:5a:b0:c1:37:94:6e:8f:
b7:05:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:22 2024 by rpki-client on console-fra.rpki-client.org