Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/M7NdVNhYQP-txT1ECKSrs8lWMOM.roa
File: M7NdVNhYQP-txT1ECKSrs8lWMOM.roa (raw, json)
Hash identifier: h4BkFVJrmdvYVr4OxMRL2VeDrBZYDT08X/NEG61MSq8=
Subject key identifier: 33:B3:5D:54:D8:58:40:FF:AD:C5:3D:44:08:A4:AB:B3:C9:56:30:E3
Certificate issuer: /CN=3fbf0d4f25ec119728f14a9c51aee8034fff3ff6
Certificate serial: 0185711531E690941B6EFF0946CB6A6F9C38
Authority key identifier: 3F:BF:0D:4F:25:EC:11:97:28:F1:4A:9C:51:AE:E8:03:4F:FF:3F:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P78NTyXsEZco8UqcUa7oA0__P_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/M7NdVNhYQP-txT1ECKSrs8lWMOM.roa
Signing time: Mon 02 Jan 2023 06:04:52 +0000
ROA not before: Mon 02 Jan 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210703
IP address blocks: 176.118.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:31:e6:90:94:1b:6e:ff:09:46:cb:6a:6f:9c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fbf0d4f25ec119728f14a9c51aee8034fff3ff6
Validity
Not Before: Jan 2 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33b35d54d85840ffadc53d4408a4abb3c95630e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:ff:e1:f5:b8:ca:bb:19:39:ce:9f:fe:4c:
60:da:1e:7f:23:62:1f:8f:7c:b2:2d:91:26:20:c4:
5c:d8:3b:a3:70:1f:62:a0:e1:a3:5a:36:e0:b9:18:
55:27:a4:de:09:f2:fd:ae:32:f6:b2:51:12:63:4f:
7d:05:8f:94:b5:cf:56:11:22:f8:62:c2:2e:13:c5:
2a:33:42:9b:98:57:a0:7b:c1:ea:fe:5d:84:b7:59:
4b:fc:c1:f9:4a:0b:a3:51:04:0b:21:61:d4:e2:2d:
e7:2c:76:c2:e4:e4:10:4e:53:70:52:15:df:bf:c7:
f2:d4:22:df:62:bc:60:b3:b4:66:47:37:07:1e:3a:
c6:79:30:7a:14:7a:d2:ee:f4:f0:e5:2f:12:43:a6:
4d:e5:18:30:38:35:e5:4a:32:74:7f:61:e0:ad:fa:
e4:bf:0f:e2:29:1c:3d:4e:79:81:47:43:9e:c5:f3:
7a:07:68:1c:05:fd:7d:51:a9:16:56:dc:77:f6:45:
94:4a:3c:bf:ba:04:cd:be:ec:d3:13:f8:9e:88:13:
61:68:e6:05:39:b5:60:5a:cc:57:cb:3d:89:51:c8:
ad:0f:88:38:f6:a3:9d:c1:25:1a:c8:5a:45:a2:47:
ad:4d:30:94:83:7d:b7:3e:a6:a4:b3:b7:3c:17:c2:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B3:5D:54:D8:58:40:FF:AD:C5:3D:44:08:A4:AB:B3:C9:56:30:E3
X509v3 Authority Key Identifier:
keyid:3F:BF:0D:4F:25:EC:11:97:28:F1:4A:9C:51:AE:E8:03:4F:FF:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P78NTyXsEZco8UqcUa7oA0__P_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/M7NdVNhYQP-txT1ECKSrs8lWMOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/P78NTyXsEZco8UqcUa7oA0__P_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:54:47:25:43:66:1b:f8:52:65:6b:7f:cd:1a:af:93:5d:77:
5c:0f:10:8e:1c:42:84:bb:13:10:89:28:e8:0a:5d:a5:80:31:
69:91:7b:f9:a4:9e:d1:38:ff:5f:db:b6:0e:fe:50:69:f6:b3:
a1:f1:58:b9:33:bd:49:16:a8:3c:94:e3:79:b9:38:9f:46:cf:
3e:f2:42:ce:da:77:97:c3:8b:89:f7:42:91:50:20:40:47:d9:
35:68:38:e7:b1:7c:bd:7c:6a:18:ef:4b:ff:a4:76:c2:99:c8:
94:9b:62:81:43:fe:20:67:9b:54:be:6e:e9:4e:83:79:7d:ae:
a6:fa:07:9d:0a:24:3c:55:0f:9a:64:0f:72:09:e9:19:17:03:
db:8b:c0:c0:1c:e5:4f:26:82:f0:cd:3c:f5:a8:89:d2:9b:0a:
e0:62:b4:ad:ba:22:fc:16:34:1b:22:2c:ae:45:0b:ee:c3:5e:
d9:5a:3b:5f:4b:b5:c9:98:5e:1d:e3:61:4a:88:bb:f0:ce:ad:
f9:84:0b:c9:52:40:6d:13:a8:f3:bd:d6:81:3c:f4:c3:ba:02:
20:d9:05:42:7c:8b:63:97:fc:be:47:20:24:29:0a:46:9d:e9:
66:28:d6:19:bd:b6:85:52:f2:87:e6:09:5d:05:8b:94:34:3d:
32:e7:ca:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:32 2024 by rpki-client on console-ams.rpki-client.org