Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/aZnm7riYYvDvqls6J_eY3J0aOoA.roa
File: aZnm7riYYvDvqls6J_eY3J0aOoA.roa (raw, json)
Hash identifier: mcAGypHfU/9+i4eExQGKUby3p2uCWgw6lWuD30jaZWg=
Subject key identifier: 69:99:E6:EE:B8:98:62:F0:EF:AA:5B:3A:27:F7:98:DC:9D:1A:3A:80
Certificate issuer: /CN=3de34082925cfd294b51af128aca545ff21f0ed0
Certificate serial: 01856D8ACC6AD7300FCF9ED27DFB4688F7E1
Authority key identifier: 3D:E3:40:82:92:5C:FD:29:4B:51:AF:12:8A:CA:54:5F:F2:1F:0E:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeNAgpJc_SlLUa8SispUX_IfDtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/aZnm7riYYvDvqls6J_eY3J0aOoA.roa
Signing time: Sun 01 Jan 2023 13:34:50 +0000
ROA not before: Sun 01 Jan 2023 13:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 176.126.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:cc:6a:d7:30:0f:cf:9e:d2:7d:fb:46:88:f7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de34082925cfd294b51af128aca545ff21f0ed0
Validity
Not Before: Jan 1 13:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6999e6eeb89862f0efaa5b3a27f798dc9d1a3a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:f9:5e:b3:7d:82:9f:0f:f9:ca:2e:be:fb:
9d:c8:99:5f:c5:14:af:6f:8a:2a:6b:58:8f:76:0b:
dd:99:cf:3f:f4:3a:8e:98:22:5f:6c:c3:e0:80:2f:
21:35:6a:bc:bb:1a:6c:df:34:90:1f:13:7b:ed:3c:
f9:0b:e5:40:ea:88:d3:09:dd:95:a5:a3:8c:f5:64:
c1:65:bd:da:bd:52:d4:b6:9f:05:f8:a4:bf:c2:e1:
3d:e3:d1:0d:e8:e2:da:23:5b:c1:c0:41:bc:f4:a2:
84:09:57:8f:2e:3f:11:5b:88:fc:30:82:50:56:9a:
24:34:ae:25:33:e6:b4:86:10:12:3f:0d:2e:3d:f3:
53:6e:04:22:3c:4f:27:55:1a:eb:eb:2b:d2:36:1d:
fd:5b:b6:40:02:26:78:ec:5d:44:c1:51:40:3d:eb:
e0:83:3e:09:69:ca:d9:91:4d:df:d8:34:de:da:fb:
6c:7b:75:95:e2:39:a5:88:fe:93:ba:5e:fa:4a:5d:
55:fb:df:ac:da:8d:36:f2:2c:2f:7c:5c:04:1e:9d:
d4:bd:e9:ff:f3:13:a4:6b:5d:dc:60:ce:11:8f:26:
70:ee:af:db:ba:92:41:3e:c9:ab:92:8c:5f:90:fb:
03:df:2f:8a:6f:8c:db:2e:39:62:99:fe:37:8f:39:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:99:E6:EE:B8:98:62:F0:EF:AA:5B:3A:27:F7:98:DC:9D:1A:3A:80
X509v3 Authority Key Identifier:
keyid:3D:E3:40:82:92:5C:FD:29:4B:51:AF:12:8A:CA:54:5F:F2:1F:0E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeNAgpJc_SlLUa8SispUX_IfDtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/aZnm7riYYvDvqls6J_eY3J0aOoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/PeNAgpJc_SlLUa8SispUX_IfDtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.103.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ac:de:74:04:ed:bd:83:d0:df:19:c6:e3:71:fd:dc:04:12:
41:59:49:e9:10:4c:0c:40:24:d0:2f:2b:c8:f2:a6:90:93:ba:
64:76:33:3b:30:26:4f:26:c2:90:e8:29:86:e9:39:76:39:6b:
16:24:23:83:60:28:f1:b6:ca:61:1d:ab:e4:ea:b9:56:4f:b5:
ef:7e:e6:f2:74:c3:89:d4:72:76:38:26:ec:73:8a:c5:da:15:
1e:2a:f9:45:1f:d5:0c:ed:c2:13:dd:d5:63:f6:d9:a5:f7:01:
24:4f:62:12:a3:92:ce:fb:6a:2a:cb:dd:bd:bb:01:7c:f7:d9:
19:d9:33:7f:4d:2a:5a:39:cc:72:b9:36:4b:2a:ed:2e:ab:c5:
58:05:e2:e0:54:e6:dc:00:fe:28:23:9d:51:97:12:42:9b:6d:
ac:36:68:dc:a1:9a:b2:0e:ae:a5:05:c6:a0:3e:d0:9a:43:aa:
13:8b:01:ac:fd:fe:99:e1:e5:0c:19:b6:21:56:38:89:e0:39:
14:03:91:96:ed:3d:44:a6:f2:ad:5f:ce:7a:e9:4c:e7:09:4e:
e3:2e:2f:19:8b:20:9e:a8:17:3b:39:02:45:5f:92:13:92:11:
dd:58:fc:be:f4:df:0e:a5:00:eb:aa:ee:2a:e3:cf:99:48:9e:
60:33:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:33 2024 by rpki-client on console-fra.rpki-client.org