Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/KbofCDX2exTQdZNnSmcal_Cesqs.roa
File: KbofCDX2exTQdZNnSmcal_Cesqs.roa (raw, json)
Hash identifier: IXyBVcyNSG+gL1p4V/+mL+B2STXKN6BYpLDxPam956s=
Subject key identifier: 29:BA:1F:08:35:F6:7B:14:D0:75:93:67:4A:67:1A:97:F0:9E:B2:AB
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01839C64B8E04F1E05F86E9058098D82E157
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/KbofCDX2exTQdZNnSmcal_Cesqs.roa
Signing time: Mon 03 Oct 2022 05:49:50 +0000
ROA not before: Mon 03 Oct 2022 05:49:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 176.105.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9c:64:b8:e0:4f:1e:05:f8:6e:90:58:09:8d:82:e1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 3 05:49:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29ba1f0835f67b14d07593674a671a97f09eb2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:12:a8:97:60:23:76:a6:a6:00:83:37:b8:
4c:36:87:b1:fc:42:db:ad:fe:b8:17:d6:45:d2:ff:
f1:61:54:38:17:61:01:65:8f:dd:5a:92:06:9f:5b:
19:a2:0f:8b:3a:3f:9f:fc:ff:1a:4d:75:be:d6:58:
e8:05:13:fb:07:be:cd:bb:6b:c6:24:22:df:0c:67:
d6:fd:2e:9d:15:5a:13:fe:b3:7a:fa:05:6d:81:1c:
29:bd:8e:f3:26:b0:b6:9b:bc:5b:8d:2c:24:75:68:
88:44:41:7d:9f:48:92:3a:85:0b:51:65:78:59:f5:
92:09:9c:f8:3f:e4:d8:65:4f:44:5b:14:6c:5f:9a:
c0:12:0a:bd:41:d6:e1:69:72:62:f0:5a:92:ae:73:
01:1f:27:ae:56:c3:b1:48:5b:2d:33:51:5c:02:c8:
ae:0d:1b:b2:ba:f1:ac:30:63:d1:ff:d1:84:64:4e:
b8:8c:bb:93:cf:20:fb:e2:46:6c:1c:db:24:98:02:
e9:de:fd:d7:15:70:22:80:c0:eb:a6:4a:e4:d8:fd:
39:6e:16:27:cc:09:e2:46:1e:79:48:8d:fb:d1:75:
7b:f5:da:85:7b:a0:9a:9d:72:0f:73:44:72:71:8e:
5e:74:47:60:ce:3c:25:c7:fa:e4:e4:55:44:f2:5a:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:1F:08:35:F6:7B:14:D0:75:93:67:4A:67:1A:97:F0:9E:B2:AB
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/KbofCDX2exTQdZNnSmcal_Cesqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.226.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:dd:0b:e5:28:8d:0e:ba:b7:8f:5c:97:eb:39:f3:0d:64:1d:
2c:cb:4e:43:df:d2:4e:b0:ae:e5:d9:09:3e:3e:45:f6:05:87:
b6:88:5d:b9:e5:69:bf:c6:a4:f7:a4:11:cf:6d:54:64:78:74:
8b:ff:af:22:07:b3:3b:dc:7d:08:85:75:d3:5c:a4:3d:d1:89:
2c:2e:57:ba:3b:17:eb:54:1e:15:f6:62:6a:eb:06:33:a9:a8:
52:25:5e:14:6e:50:a4:e2:af:b4:74:c4:0f:5c:61:5c:03:39:
fc:55:46:45:86:ab:6e:18:a5:a9:80:ca:ad:bc:e0:31:8c:4e:
e4:0f:ad:34:fe:60:6b:b8:a3:69:98:8a:59:01:e5:0c:45:7c:
a3:15:e3:ac:ad:be:6b:e4:f6:5f:e4:bb:79:70:07:ce:82:22:
04:6c:70:51:65:da:77:c3:df:09:d0:68:53:48:63:ad:96:48:
83:c9:43:78:42:87:d6:e4:ae:01:c6:98:df:4a:07:72:3a:ab:
60:f4:33:57:bc:37:73:ab:83:0c:92:7a:45:85:21:5b:4e:04:
2e:6a:5a:ea:27:55:3e:96:74:4e:90:5e:fa:ae:c9:e9:d0:51:
03:85:8b:ea:b7:07:23:eb:95:82:be:2f:b6:2b:90:2b:96:1e:
ff:ce:23:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org