Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/tI4lcPIwkluTryjA5P5pFM-R-sA.roa
File: tI4lcPIwkluTryjA5P5pFM-R-sA.roa (raw, json)
Hash identifier: ObQbsbQgttENpPVmxgpPSsayUPoCHftNVcaeYm5UgP8=
Subject key identifier: B4:8E:25:70:F2:30:92:5B:93:AF:28:C0:E4:FE:69:14:CF:91:FA:C0
Certificate issuer: /CN=856356462b6fa07f39ce2083ce457d6541890e48
Certificate serial: 018A23914FF325C59E57B81D23028FEB38C3
Authority key identifier: 85:63:56:46:2B:6F:A0:7F:39:CE:20:83:CE:45:7D:65:41:89:0E:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWNWRitvoH85ziCDzkV9ZUGJDkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/tI4lcPIwkluTryjA5P5pFM-R-sA.roa
Signing time: Wed 23 Aug 2023 18:04:00 +0000
ROA not before: Wed 23 Aug 2023 18:04:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 176.126.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:23:91:4f:f3:25:c5:9e:57:b8:1d:23:02:8f:eb:38:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856356462b6fa07f39ce2083ce457d6541890e48
Validity
Not Before: Aug 23 18:04:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b48e2570f230925b93af28c0e4fe6914cf91fac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:cf:9d:88:d8:36:ce:76:44:30:90:a3:3f:
2b:3a:e1:1a:57:d5:e6:9c:7b:f6:7d:17:6e:46:5f:
17:d6:68:14:13:86:66:8c:39:4b:6f:53:0f:93:1a:
08:15:67:ae:52:82:b8:e6:9f:70:a5:e8:96:6b:e5:
ba:00:b4:ef:ef:7a:69:31:0f:ac:3a:74:9a:9c:8d:
7d:8e:72:a7:8c:a8:8b:bb:23:ca:05:95:44:9d:5c:
f9:2d:da:8c:ee:92:56:b4:72:b3:52:52:b8:10:09:
8b:81:08:d5:c3:b8:99:3b:e0:d3:94:23:33:50:eb:
59:85:7c:c0:22:1f:c1:09:34:3d:82:d7:8a:21:f5:
d4:48:35:57:9b:f1:63:9e:b1:2c:0c:8e:31:ec:e7:
f5:3f:ab:ae:bc:94:d6:d8:3d:e3:47:b5:a5:ab:96:
97:e8:62:e4:cf:ca:d0:c4:5e:3b:dd:53:eb:48:a1:
56:46:28:cf:58:e9:ca:95:12:e2:b1:3b:50:63:19:
d6:81:49:17:18:cf:27:66:67:aa:3e:54:e9:32:1e:
bc:99:a7:6b:f5:84:11:aa:ff:e1:42:6e:3a:e7:4f:
e8:b5:a5:72:66:49:9b:a3:c9:ca:e4:2a:c8:7b:01:
3a:b5:fb:0a:15:0f:fa:be:f3:4f:e6:0b:e3:f3:ff:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8E:25:70:F2:30:92:5B:93:AF:28:C0:E4:FE:69:14:CF:91:FA:C0
X509v3 Authority Key Identifier:
keyid:85:63:56:46:2B:6F:A0:7F:39:CE:20:83:CE:45:7D:65:41:89:0E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWNWRitvoH85ziCDzkV9ZUGJDkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/tI4lcPIwkluTryjA5P5pFM-R-sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/hWNWRitvoH85ziCDzkV9ZUGJDkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.99.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:7e:c4:06:73:77:94:9a:40:42:cd:30:26:63:17:cb:47:af:
9b:52:f1:68:22:e9:9c:8c:25:0f:7e:a5:48:bb:24:9c:fe:d6:
7c:1f:98:10:a5:f4:6c:c9:7f:24:9e:7f:a4:0c:3c:0d:11:ea:
97:82:3e:73:be:a2:54:dc:aa:9e:06:5b:56:e7:67:ab:3d:e6:
fd:23:bc:b0:c1:3d:22:2c:74:52:9d:e0:ec:31:4a:73:77:ce:
04:91:1a:cc:17:7a:8f:0e:e1:b3:37:7d:61:ef:6e:ff:2f:62:
d6:2a:a8:b4:12:a3:d0:e5:c8:7e:64:09:a8:01:40:58:df:60:
7b:e1:a9:6e:d3:75:b8:fb:9a:d8:51:77:62:95:f9:e2:66:fc:
29:4c:2e:67:90:2b:16:4a:63:aa:62:ca:62:da:0a:b5:f4:06:
83:fb:90:04:0b:4a:14:a5:bc:45:6f:10:e0:43:c1:02:8d:f8:
33:ec:1a:58:b0:4d:d1:49:54:81:17:70:e7:1b:6f:b4:bf:ea:
db:a6:71:53:90:81:43:c9:e4:37:42:9a:cc:6d:c5:3a:72:e1:
06:0f:3f:48:5c:08:90:1e:b7:5d:6f:57:61:e1:33:63:c3:cf:
06:7e:a7:b7:4a:89:b4:e6:8b:57:be:68:78:6c:34:84:1c:6c:
ac:88:94:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:58 2024 by rpki-client on console-ams.rpki-client.org