Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/RNXJDLlw-3XovhScUDXasKJ9mDc.roa
File: RNXJDLlw-3XovhScUDXasKJ9mDc.roa (raw, json)
Hash identifier: i6ZDeNZPMn8fCUyGoCL/u3n39NS5It8t804h1Uk73dQ=
Subject key identifier: 44:D5:C9:0C:B9:70:FB:75:E8:BE:14:9C:50:35:DA:B0:A2:7D:98:37
Certificate issuer: /CN=3fbf0d4f25ec119728f14a9c51aee8034fff3ff6
Certificate serial: 01229DED
Authority key identifier: 3F:BF:0D:4F:25:EC:11:97:28:F1:4A:9C:51:AE:E8:03:4F:FF:3F:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P78NTyXsEZco8UqcUa7oA0__P_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/RNXJDLlw-3XovhScUDXasKJ9mDc.roa
Signing time: Sat 01 Jan 2022 12:56:47 +0000
ROA not before: Sat 01 Jan 2022 12:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 176.118.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19045869 (0x1229ded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fbf0d4f25ec119728f14a9c51aee8034fff3ff6
Validity
Not Before: Jan 1 12:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44d5c90cb970fb75e8be149c5035dab0a27d9837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:65:a6:f8:ca:bc:7d:f6:43:8d:c0:5a:08:
91:79:fb:ce:35:4f:2c:bc:5b:f4:1f:fb:a3:b2:29:
65:a7:7f:d6:a7:0e:1c:66:f7:b9:7a:5d:11:60:96:
c1:9d:2b:fd:96:6a:ed:75:08:5d:e4:a3:01:74:92:
a1:26:0a:b6:7e:79:2c:b5:51:77:0e:ba:0f:c6:6b:
17:87:13:df:f7:94:d3:37:5f:74:99:6d:1f:e6:66:
d4:f7:95:47:fe:34:9b:db:ad:11:b5:f0:f6:24:9b:
21:8c:4c:d7:3e:a3:60:12:41:51:43:7c:7c:15:74:
4e:3c:d5:cb:88:77:46:3e:24:3c:58:98:c9:d8:f1:
ca:cf:4d:29:e9:7a:6c:70:25:95:4b:6e:0b:9c:47:
cc:9f:c2:19:ff:f7:03:d0:fa:43:b0:1b:44:38:70:
3d:61:46:e2:83:0b:f9:7f:1d:f4:96:db:8e:a5:95:
60:b4:c9:57:a7:2c:f5:29:8c:7e:16:e0:e0:0e:6b:
a4:8f:26:3a:63:07:cd:9d:83:5c:9c:79:5e:80:51:
14:d5:0c:db:b0:75:7e:2e:8f:18:57:ee:3e:c2:71:
f7:e9:e7:81:6e:50:90:4e:f6:4e:b6:a6:9d:58:b9:
bf:fe:d6:09:d0:10:73:73:45:3b:56:5c:09:f5:df:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D5:C9:0C:B9:70:FB:75:E8:BE:14:9C:50:35:DA:B0:A2:7D:98:37
X509v3 Authority Key Identifier:
keyid:3F:BF:0D:4F:25:EC:11:97:28:F1:4A:9C:51:AE:E8:03:4F:FF:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P78NTyXsEZco8UqcUa7oA0__P_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/RNXJDLlw-3XovhScUDXasKJ9mDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/P78NTyXsEZco8UqcUa7oA0__P_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.33.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:e0:e2:09:91:a9:e4:fa:df:83:c9:44:4f:d6:22:5a:ae:5e:
a6:16:c0:86:66:ac:54:67:f6:c9:fd:35:f2:e7:42:ef:21:cb:
de:3b:5d:2c:ba:a9:17:f5:9c:35:fc:c8:78:cd:75:2d:15:86:
fc:88:4b:bd:c2:12:e3:72:61:b5:e1:0a:f9:87:c2:17:ca:ec:
3a:13:14:94:e2:7b:36:cf:e3:a5:76:22:de:dc:4e:f4:e4:3d:
46:d6:90:1b:dd:43:b3:0a:cf:3e:59:f8:3c:e1:97:6c:37:8c:
3c:b2:a7:10:57:9e:ed:01:20:a9:ca:e9:0c:66:5b:7e:49:49:
b0:98:e2:53:0d:eb:75:56:c5:30:e0:fb:d2:b6:64:2a:5b:16:
97:26:80:ec:42:40:bb:00:a3:0d:a2:9b:5a:fc:29:6a:fc:46:
9d:64:31:7b:7d:3f:4b:a9:b5:7d:b8:96:df:fa:cf:ff:0e:0e:
02:a8:54:03:73:93:98:62:63:79:4d:36:cb:29:78:f7:d2:ca:
3d:35:2c:28:52:1a:de:d9:d6:38:97:84:ea:03:9a:66:7d:83:
b0:16:d4:32:54:25:10:8f:82:c2:52:e9:88:34:03:96:23:6a:
63:21:f9:ec:fb:06:6d:87:67:60:e1:49:4f:53:40:82:b8:90:
60:8a:66:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:32 2024 by rpki-client on console-ams.rpki-client.org