Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/nBgrwwj0DseuBVeADcPT34k_U5E.roa
File: nBgrwwj0DseuBVeADcPT34k_U5E.roa (raw, json)
Hash identifier: 2PGECwxxVDW/SQVTSeF4+qsX+hSo4d83C2OX28vkZj4=
Subject key identifier: 9C:18:2B:C3:08:F4:0E:C7:AE:05:57:80:0D:C3:D3:DF:89:3F:53:91
Certificate issuer: /CN=3fbf0d4f25ec119728f14a9c51aee8034fff3ff6
Certificate serial: 02AD08C1
Authority key identifier: 3F:BF:0D:4F:25:EC:11:97:28:F1:4A:9C:51:AE:E8:03:4F:FF:3F:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P78NTyXsEZco8UqcUa7oA0__P_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/nBgrwwj0DseuBVeADcPT34k_U5E.roa
Signing time: Mon 27 Jun 2022 11:15:40 +0000
ROA not before: Mon 27 Jun 2022 11:15:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204729
IP address blocks: 176.118.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44894401 (0x2ad08c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fbf0d4f25ec119728f14a9c51aee8034fff3ff6
Validity
Not Before: Jun 27 11:15:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c182bc308f40ec7ae0557800dc3d3df893f5391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:b9:0e:21:93:36:79:db:37:f9:27:cf:df:
84:c0:a8:1b:3e:75:e3:eb:e3:e1:f3:db:15:83:db:
b4:3b:3b:7e:6f:94:52:44:de:b0:15:a0:12:0e:14:
1e:cd:05:37:b8:45:e5:27:ef:0c:e7:cb:e6:57:b5:
a2:99:a3:e4:04:38:98:03:e5:ad:6c:d8:68:52:77:
f3:23:3c:f0:68:f4:82:c9:fa:f3:00:a5:68:58:1c:
c9:b9:b7:df:c8:28:55:34:c6:7e:1a:ba:22:bc:20:
1c:c1:65:ad:73:fe:ec:96:ff:6f:34:77:96:36:a9:
42:db:74:1c:24:12:f0:e7:a0:d5:46:c8:a9:5a:c0:
d9:a9:7d:1e:08:e6:12:84:39:af:ad:30:0e:d5:5f:
76:d2:43:9a:7b:6f:69:e3:3c:8b:ce:83:ef:6e:a3:
e7:5b:47:92:2a:f1:dc:87:b8:cd:49:a0:d9:91:cc:
83:37:1a:d1:76:f3:30:73:fc:e8:3e:47:95:2b:36:
b6:4f:45:d0:c8:e4:75:64:98:70:34:e9:c2:ab:96:
e2:3e:e8:bf:e4:1f:81:49:8b:23:d8:ec:28:f0:18:
3b:3d:96:27:69:bf:5e:dc:b0:ae:bb:a2:20:15:95:
80:d4:fd:23:24:1f:b7:71:07:ce:e8:bd:fa:ca:53:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:18:2B:C3:08:F4:0E:C7:AE:05:57:80:0D:C3:D3:DF:89:3F:53:91
X509v3 Authority Key Identifier:
keyid:3F:BF:0D:4F:25:EC:11:97:28:F1:4A:9C:51:AE:E8:03:4F:FF:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P78NTyXsEZco8UqcUa7oA0__P_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/nBgrwwj0DseuBVeADcPT34k_U5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/P78NTyXsEZco8UqcUa7oA0__P_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:b1:6f:d7:38:d9:2b:e6:8c:50:67:bd:5e:dd:8a:62:c7:c8:
11:5b:77:12:3f:b5:63:52:1e:e7:41:d3:d8:fb:8a:bf:4e:bd:
93:cb:b9:26:4a:c3:8a:eb:00:06:67:f8:ef:52:9f:be:fc:96:
85:c1:f9:b5:1a:89:8f:34:44:95:8c:a7:b7:96:2c:bd:73:1b:
3e:5c:9e:95:ed:fd:bf:bf:49:28:57:1a:4d:0c:60:75:4d:e2:
fe:c0:27:38:3d:95:ac:5b:2e:3d:46:38:9a:66:b1:13:80:c1:
fc:b4:2a:8a:a2:f6:61:87:02:cc:fe:2f:fc:a9:10:0b:3c:24:
e6:c6:23:fa:bb:0f:99:5e:67:12:07:cd:4e:aa:27:41:7b:bf:
95:c9:b5:f2:38:38:f5:fc:d0:fc:f8:f4:d1:e6:7b:55:3f:08:
bd:7e:70:61:47:62:c4:71:30:27:7b:4c:c7:c9:63:68:4f:9e:
28:aa:53:4a:7a:7f:b6:41:34:2b:df:7c:78:62:4c:13:8f:10:
6a:a9:84:f5:ae:ae:56:99:fa:23:25:02:17:7c:67:5a:a0:2d:
c0:3e:69:9b:48:ac:80:d4:4f:af:43:fe:db:16:9a:b7:52:06:
3b:2f:4b:22:f1:08:07:32:38:e4:28:9b:f0:6e:f9:05:65:3a:
1a:7e:1b:ec
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAq0IwTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZmJmMGQ0ZjI1ZWMxMTk3MjhmMTRhOWM1MWFlZTgwMzRmZmYzZmY2MB4XDTIyMDYy
NzExMTU0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWMxODJiYzMwOGY0
MGVjN2FlMDU1NzgwMGRjM2QzZGY4OTNmNTM5MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJxhuQ4hkzZ52zf5J8/fhMCoGz514+vj4fPbFYPbtDs7fm+U
UkTesBWgEg4UHs0FN7hF5SfvDOfL5le1opmj5AQ4mAPlrWzYaFJ38yM88Gj0gsn6
8wClaFgcybm338goVTTGfhq6IrwgHMFlrXP+7Jb/bzR3ljapQtt0HCQS8Oeg1UbI
qVrA2al9HgjmEoQ5r60wDtVfdtJDmntvaeM8i86D726j51tHkirx3Ie4zUmg2ZHM
gzca0XbzMHP86D5HlSs2tk9F0MjkdWSYcDTpwquW4j7ov+QfgUmLI9jsKPAYOz2W
J2m/XtywrruiIBWVgNT9IyQft3EHzui9+spT9EUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBScGCvDCPQOx64FV4ANw9PfiT9TkTAfBgNVHSMEGDAWgBQ/vw1PJewRlyjx
SpxRrugDT/8/9jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1A3OE5UeVhzRVpjbzhVcWNVYTdvQTBfX1BfWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjgvYThlODA4LTk1ZjMtNGFiMy05NzhiLTIzY2Q3Y2NlYWM0NS8x
L25CZ3J3d2owRHNldUJWZUFEY1BUMzRrX1U1RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgv
YThlODA4LTk1ZjMtNGFiMy05NzhiLTIzY2Q3Y2NlYWM0NS8xL1A3OE5UeVhzRVpj
bzhVcWNVYTdvQTBfX1BfWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALB2ITANBgkqhkiG9w0BAQsFAAOC
AQEAobFv1zjZK+aMUGe9Xt2KYsfIEVt3Ej+1Y1Ie50HT2PuKv069k8u5JkrDiusA
Bmf471KfvvyWhcH5tRqJjzRElYynt5YsvXMbPlyele39v79JKFcaTQxgdU3i/sAn
OD2VrFsuPUY4mmaxE4DB/LQqiqL2YYcCzP4v/KkQCzwk5sYj+rsPmV5nEgfNTqon
QXu/lcm18jg49fzQ/Pj00eZ7VT8IvX5wYUdixHEwJ3tMx8ljaE+eKKpTSnp/tkE0
K998eGJME48QaqmE9a6uVpn6IyUCF3xnWqAtwD5pm0isgNRPr0P+2xaat1IGOy9L
IvEIBzI45Cib8G75BWU6Gn4b7A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:12 2024 by rpki-client on console-fra.rpki-client.org