Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a408dd-3d37-49b1-bc50-b7bb5dcec443/1/45sulxCjKueGkcSoIQyS903vz2o.roa
File: 45sulxCjKueGkcSoIQyS903vz2o.roa (raw, json)
Hash identifier: 2TbhEP+eBmKKQ9EeTD4KKCbKOPNSicxW5dkFbhakFQ4=
Subject key identifier: E3:9B:2E:97:10:A3:2A:E7:86:91:C4:A8:21:0C:92:F7:4D:EF:CF:6A
Certificate issuer: /CN=6e8e848a1d90b7b52924b8ac70d2c02bf8a9ca2d
Certificate serial: 018964753D0FF04987D1E685C504F796E989
Authority key identifier: 6E:8E:84:8A:1D:90:B7:B5:29:24:B8:AC:70:D2:C0:2B:F8:A9:CA:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bo6Eih2Qt7UpJLiscNLAK_ipyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/a408dd-3d37-49b1-bc50-b7bb5dcec443/1/45sulxCjKueGkcSoIQyS903vz2o.roa
Signing time: Mon 17 Jul 2023 15:25:52 +0000
ROA not before: Mon 17 Jul 2023 15:25:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 176.126.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:75:3d:0f:f0:49:87:d1:e6:85:c5:04:f7:96:e9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e8e848a1d90b7b52924b8ac70d2c02bf8a9ca2d
Validity
Not Before: Jul 17 15:25:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e39b2e9710a32ae78691c4a8210c92f74defcf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:54:99:7b:5b:30:ed:6d:54:d3:09:7b:88:
95:d3:76:19:5d:33:21:88:38:c5:3e:08:f8:00:3f:
5e:ba:a6:4c:59:34:5f:6c:31:3d:d4:4b:0d:57:b9:
c5:f4:d1:c4:e8:45:ae:b2:d2:19:c0:be:14:56:17:
92:e5:0b:45:4c:15:15:52:4f:48:fa:99:66:28:0b:
65:0c:1c:e3:c0:c6:bc:a9:5f:df:11:39:b0:85:e4:
8a:40:86:f8:7a:be:bd:eb:7f:5a:bc:11:a8:23:cc:
83:c5:f7:fa:9f:e7:e1:f7:12:9d:47:97:08:4a:86:
a2:ab:77:bc:72:7e:c0:47:6f:fc:55:f2:68:1e:b6:
00:52:c9:e7:84:1e:2f:e0:2f:67:1b:29:91:c9:3a:
ee:ea:34:fe:68:a1:41:5f:01:1f:08:1b:e7:32:be:
b1:08:0c:d9:61:61:fa:c8:38:bd:3d:3d:92:8f:0e:
e2:9d:ad:21:c9:30:92:73:c8:6c:5a:ca:a3:18:3a:
5c:20:02:e9:99:89:48:92:77:f2:f3:11:cc:86:18:
c6:05:97:e3:50:28:82:34:5b:cf:e7:4f:be:e3:13:
f9:0a:67:67:2e:4b:6d:9d:d5:37:f1:ab:6a:45:81:
08:75:6d:f9:92:75:2c:6a:9c:aa:0b:18:11:4a:e3:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9B:2E:97:10:A3:2A:E7:86:91:C4:A8:21:0C:92:F7:4D:EF:CF:6A
X509v3 Authority Key Identifier:
keyid:6E:8E:84:8A:1D:90:B7:B5:29:24:B8:AC:70:D2:C0:2B:F8:A9:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bo6Eih2Qt7UpJLiscNLAK_ipyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a408dd-3d37-49b1-bc50-b7bb5dcec443/1/45sulxCjKueGkcSoIQyS903vz2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a408dd-3d37-49b1-bc50-b7bb5dcec443/1/bo6Eih2Qt7UpJLiscNLAK_ipyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.112.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a7:40:79:fe:bb:2d:77:a7:53:ef:dd:e0:83:39:20:cb:e2:
68:f8:d2:dc:13:42:2f:3b:0e:f3:71:59:68:6a:1b:fa:44:1b:
cc:3a:6e:33:53:c2:4d:ab:05:eb:a7:33:f0:89:37:4f:d3:55:
a9:cc:a3:a0:81:00:5a:bd:54:c9:87:f3:39:7a:eb:79:34:59:
da:eb:e9:19:2b:14:05:cb:e6:06:58:8e:d6:e6:fe:fa:e6:ad:
af:1e:64:49:6a:6f:01:d2:11:5e:f8:92:90:df:55:77:b3:53:
4d:13:1a:9a:1f:96:25:39:ff:e5:79:0b:f1:e2:21:0b:db:e3:
96:ee:f6:f6:81:04:3d:59:e3:fa:ee:c1:75:a9:e5:84:8b:ed:
ca:6f:20:61:13:b4:78:d8:c9:ed:09:36:9f:f9:f6:b6:4a:c4:
01:43:7b:c6:8f:a2:8a:61:af:34:44:b3:bb:59:79:ae:c3:5c:
64:69:c4:95:49:5b:f1:8f:f7:67:74:33:6c:c0:39:e4:6f:af:
04:b4:d6:64:63:8f:78:3b:4a:f8:b2:1b:89:85:71:5f:f8:d7:
0d:bf:a2:fb:57:61:16:bb:96:85:50:5c:9a:c9:01:6e:0c:d2:
60:af:7b:ae:b7:ce:fa:00:16:b7:c9:d2:42:2b:66:05:23:aa:
b2:30:03:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 16:39:51 2023 by rpki-client on console-fra.rpki-client.org