Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/wswgr7R7DkRaoErHai3fWLa9s9I.roa
File: wswgr7R7DkRaoErHai3fWLa9s9I.roa (raw, json)
Hash identifier: 8lzy7Ne7ZfGIz6xmnodO9USWJR3oML+83LrcKRJTLSM=
Subject key identifier: C2:CC:20:AF:B4:7B:0E:44:5A:A0:4A:C7:6A:2D:DF:58:B6:BD:B3:D2
Certificate issuer: /CN=3de34082925cfd294b51af128aca545ff21f0ed0
Certificate serial: 01867524E453922A66E4D591AD6E0C368E1A
Authority key identifier: 3D:E3:40:82:92:5C:FD:29:4B:51:AF:12:8A:CA:54:5F:F2:1F:0E:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeNAgpJc_SlLUa8SispUX_IfDtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/wswgr7R7DkRaoErHai3fWLa9s9I.roa
Signing time: Tue 21 Feb 2023 18:03:17 +0000
ROA not before: Tue 21 Feb 2023 18:03:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199785
IP address blocks: 176.126.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:24:e4:53:92:2a:66:e4:d5:91:ad:6e:0c:36:8e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de34082925cfd294b51af128aca545ff21f0ed0
Validity
Not Before: Feb 21 18:03:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2cc20afb47b0e445aa04ac76a2ddf58b6bdb3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:a4:b2:26:52:8e:de:6e:6b:6c:bf:8f:b5:
3c:0f:a0:c1:2a:6c:4a:0b:f5:e0:28:11:51:2c:6a:
e9:7c:ba:52:b7:6a:cd:da:4e:59:98:13:3c:e7:b9:
26:b0:35:18:e2:40:a3:a2:5a:0d:7f:16:49:87:26:
0b:b4:6f:7b:41:d0:d3:e4:02:92:aa:c0:5c:5b:82:
0f:10:3f:cd:55:f7:16:8f:10:19:25:91:31:4a:bb:
0a:39:70:f2:73:db:af:b0:22:bb:07:31:45:5d:26:
73:a3:c1:d9:58:ae:b1:e8:b6:d1:53:ac:f7:c2:79:
67:1f:84:2d:67:8d:2e:67:31:1a:4f:84:fa:e1:b9:
81:ac:a7:69:ef:d4:9e:da:d3:a9:e2:af:b6:ae:5f:
e3:f9:0a:1c:c3:a8:fa:51:87:cb:77:8d:b9:5b:bb:
b9:a2:79:6c:aa:7c:5c:7c:58:4d:d3:ae:23:cc:2b:
81:d8:c2:f3:dc:57:35:29:0b:e4:2f:bc:2e:eb:ee:
53:4e:42:d8:7a:1d:f9:9b:49:cd:0a:d5:f6:ea:0e:
84:b8:0e:9f:91:3d:2d:2e:ea:9f:02:96:20:16:98:
6d:e7:3e:cc:bb:c5:9a:8f:e0:0b:b1:d2:84:01:f9:
6e:aa:eb:da:4e:e4:05:5e:ae:b3:b6:6e:2c:d3:ff:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CC:20:AF:B4:7B:0E:44:5A:A0:4A:C7:6A:2D:DF:58:B6:BD:B3:D2
X509v3 Authority Key Identifier:
keyid:3D:E3:40:82:92:5C:FD:29:4B:51:AF:12:8A:CA:54:5F:F2:1F:0E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeNAgpJc_SlLUa8SispUX_IfDtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/wswgr7R7DkRaoErHai3fWLa9s9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/PeNAgpJc_SlLUa8SispUX_IfDtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.103.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5c:61:32:95:e0:e2:ce:4a:42:ce:f8:a1:71:d0:02:6e:04:
a2:72:33:0f:e2:f3:1a:0b:c3:e9:9d:66:be:c5:9b:4c:b6:45:
69:bf:0e:c9:a7:34:2a:ee:c7:b1:38:cb:bc:72:26:66:9f:29:
ca:df:d8:3c:ce:a9:f6:32:8b:0e:99:cd:0a:46:36:b6:33:c7:
e2:6a:04:5e:56:e5:ef:a6:0f:1a:21:b4:7b:58:b3:7f:1d:f4:
09:aa:62:e4:86:22:b4:e1:1e:e4:01:83:f2:30:23:17:7b:88:
ab:bb:ef:c9:17:d9:56:77:ae:9c:08:2b:bb:d5:38:7a:1e:83:
70:69:67:85:db:d4:d5:10:57:33:29:e6:40:ef:68:5e:0c:b8:
40:c2:b4:41:c6:c0:da:01:c2:01:53:0d:e4:fc:a5:68:d2:a7:
7c:23:24:fe:e5:81:34:41:0d:15:53:d3:3b:d9:1f:b5:54:64:
87:64:e4:83:88:0d:ee:3e:60:f0:0d:23:01:43:5e:fb:35:b6:
7e:47:46:80:c0:fc:d7:cf:93:d6:b7:03:0f:68:f4:4a:65:ae:
c4:24:20:37:09:ba:63:1c:72:06:81:94:62:15:19:2c:2e:c7:
14:97:e5:b6:3d:ee:0d:e9:12:21:e0:71:96:e7:b8:ab:a1:ca:
58:cf:22:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 13:58:46 2023 by rpki-client on console-ams.rpki-client.org