Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/M1r8gH6UJV5D35gAerALiRWkleg.roa
File: M1r8gH6UJV5D35gAerALiRWkleg.roa (raw, json)
Hash identifier: B2Xeke0brj6870J3QK4WtvgBi1nONmfSbQEogji96Lg=
Subject key identifier: 33:5A:FC:80:7E:94:25:5E:43:DF:98:00:7A:B0:0B:89:15:A4:95:E8
Certificate issuer: /CN=3fbf0d4f25ec119728f14a9c51aee8034fff3ff6
Certificate serial: 018571153078CDAC320A24FF5BB03E59D637
Authority key identifier: 3F:BF:0D:4F:25:EC:11:97:28:F1:4A:9C:51:AE:E8:03:4F:FF:3F:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P78NTyXsEZco8UqcUa7oA0__P_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/M1r8gH6UJV5D35gAerALiRWkleg.roa
Signing time: Mon 02 Jan 2023 06:04:52 +0000
ROA not before: Mon 02 Jan 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 176.118.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:30:78:cd:ac:32:0a:24:ff:5b:b0:3e:59:d6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fbf0d4f25ec119728f14a9c51aee8034fff3ff6
Validity
Not Before: Jan 2 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=335afc807e94255e43df98007ab00b8915a495e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:9b:1a:37:92:db:91:a1:07:75:ac:94:9f:
a8:b0:0c:c9:b5:46:44:13:f5:16:8e:cd:3e:90:76:
b0:84:34:df:d9:57:ea:d4:50:a6:60:55:ff:20:f6:
fc:c0:6b:00:83:58:e6:29:0b:a3:f6:9f:3e:5e:7e:
02:8f:af:e5:00:f6:a6:5f:dc:dc:53:3b:54:c9:19:
fc:b5:aa:5d:3a:99:fd:5f:7e:85:24:cb:55:b4:b6:
81:0b:2e:41:ee:33:d5:cb:87:d2:07:bc:5d:cb:dd:
1b:00:73:ec:76:36:fb:d9:1c:d4:bd:35:b5:40:9d:
b2:49:87:06:3a:75:9e:a5:b3:2e:fe:49:37:15:cf:
7d:77:48:11:36:96:b0:db:f4:00:f3:d1:ba:5b:69:
93:c8:43:82:a4:ad:6d:3e:28:86:b5:dc:9e:50:86:
fd:f2:b2:43:ca:39:b4:83:64:9d:b4:96:13:8a:90:
70:7b:6a:bf:87:2c:00:23:37:79:3e:6a:d5:a1:a8:
06:a0:8f:00:67:71:ec:a0:d2:3b:3b:46:08:0c:36:
e6:b4:28:57:25:a2:a4:6c:42:66:40:b3:1a:16:2e:
69:7b:66:d8:f9:28:f6:02:25:1f:92:92:fe:44:26:
f4:08:c4:e7:c1:50:47:d7:06:4c:f2:f3:5a:c0:8c:
43:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:FC:80:7E:94:25:5E:43:DF:98:00:7A:B0:0B:89:15:A4:95:E8
X509v3 Authority Key Identifier:
keyid:3F:BF:0D:4F:25:EC:11:97:28:F1:4A:9C:51:AE:E8:03:4F:FF:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P78NTyXsEZco8UqcUa7oA0__P_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/M1r8gH6UJV5D35gAerALiRWkleg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/P78NTyXsEZco8UqcUa7oA0__P_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.33.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:28:e2:0a:ab:09:3d:ed:76:b2:a5:57:db:64:34:29:20:7e:
0c:ea:33:43:dc:b2:19:22:bd:30:6f:f6:01:69:ef:86:0b:a0:
c5:83:89:0f:ca:1b:cd:b9:d8:2a:9d:34:94:41:7e:1a:70:5a:
29:5d:a9:57:72:8a:3b:6f:c1:35:d4:dc:0a:cc:cd:f7:e6:ee:
23:4e:0a:b4:9e:fa:66:e6:67:59:00:ef:c5:07:ff:ef:12:d2:
04:d9:36:c6:f3:78:0a:72:ee:a9:ee:ff:fd:c0:69:38:c1:ca:
b5:3e:b2:72:0e:8c:a0:3f:ec:b4:52:4d:cf:8b:e6:7c:f3:b5:
1c:8b:8b:49:4a:49:30:ea:12:26:66:b6:fc:90:33:32:1e:9d:
52:5b:dd:60:3d:18:54:8a:b9:81:91:8a:86:ec:7e:ce:41:58:
ad:d0:43:fd:21:5b:a8:1e:ce:7c:e7:5c:07:80:b2:c5:41:98:
16:7b:95:3b:d1:e3:12:ee:1d:b0:bd:51:0a:2e:f6:e7:f2:4b:
71:49:6a:25:e6:c1:c4:66:3a:b5:2f:d9:7c:ad:d8:40:82:d6:
18:db:29:2e:17:42:88:44:dc:45:94:40:4a:e4:b1:f6:80:aa:
c7:43:3c:dd:da:93:2b:8f:08:2f:82:d3:75:d8:e9:23:84:08:
ca:60:fd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:32 2024 by rpki-client on console-ams.rpki-client.org