Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/Tj6n2zNtPqfk62UPsSLQT4owOE0.roa
File: Tj6n2zNtPqfk62UPsSLQT4owOE0.roa (raw, json)
Hash identifier: Ibsq3eT0z+Q+VFJ27MZoKzPBhsq1wVL/1XwrORfwNbQ=
Subject key identifier: 4E:3E:A7:DB:33:6D:3E:A7:E4:EB:65:0F:B1:22:D0:4F:8A:30:38:4D
Certificate issuer: /CN=a1c7471bde182db9c2bc11d68e5ff52f4aac4f6e
Certificate serial: D7A0
Authority key identifier: A1:C7:47:1B:DE:18:2D:B9:C2:BC:11:D6:8E:5F:F5:2F:4A:AC:4F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocdHG94YLbnCvBHWjl_1L0qsT24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/Tj6n2zNtPqfk62UPsSLQT4owOE0.roa
Signing time: Sun 17 Apr 2022 12:42:27 +0000
ROA not before: Sun 17 Apr 2022 12:42:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8849
IP address blocks: 158.255.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55200 (0xd7a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c7471bde182db9c2bc11d68e5ff52f4aac4f6e
Validity
Not Before: Apr 17 12:42:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e3ea7db336d3ea7e4eb650fb122d04f8a30384d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:e1:81:3e:cb:c0:70:fb:cf:72:67:f5:d9:
4b:98:83:de:10:3d:be:59:9a:f0:8a:b2:ed:6c:ca:
c7:a0:fd:94:16:76:7e:c9:a4:29:83:40:45:8f:66:
0f:92:2f:41:fd:00:ab:3e:5c:d6:16:c8:db:2a:ac:
ba:8f:f1:ef:24:43:2d:0e:90:49:f0:53:5c:44:5a:
01:c0:df:fc:61:d8:43:78:25:02:f5:65:03:a3:92:
74:51:1e:55:91:7f:a7:61:d6:56:ce:73:f2:fa:d1:
88:76:90:d4:f7:94:bd:65:9e:e4:fb:c3:fa:10:93:
2e:34:04:85:f9:3f:6d:38:4b:93:a5:91:62:69:a3:
19:44:2b:9d:e5:18:a2:3b:b3:5d:62:21:1d:ee:0b:
4a:af:bc:8b:eb:03:b2:4f:e3:ee:87:1a:fb:67:3d:
90:86:ac:1e:5e:73:7e:4d:ed:54:e8:c5:32:21:d5:
28:6b:91:03:d7:78:24:a2:6c:50:10:b8:28:de:85:
1e:05:f4:00:1c:70:85:cf:5c:50:96:3d:fe:02:ce:
0d:c2:35:0a:3f:69:55:a3:89:bf:e8:8f:e6:31:c7:
1c:e4:b1:69:e3:ce:67:d3:f3:69:ca:76:32:cb:d9:
c0:35:48:5d:31:29:5f:f7:46:da:28:27:7d:40:1a:
fc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3E:A7:DB:33:6D:3E:A7:E4:EB:65:0F:B1:22:D0:4F:8A:30:38:4D
X509v3 Authority Key Identifier:
keyid:A1:C7:47:1B:DE:18:2D:B9:C2:BC:11:D6:8E:5F:F5:2F:4A:AC:4F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocdHG94YLbnCvBHWjl_1L0qsT24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/Tj6n2zNtPqfk62UPsSLQT4owOE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/ocdHG94YLbnCvBHWjl_1L0qsT24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.76.0/24
Signature Algorithm: sha256WithRSAEncryption
ec:62:1e:6e:5a:ef:87:0f:e8:1f:19:19:74:ec:6a:ed:63:8b:
ce:6f:b2:26:91:52:28:97:98:b5:8b:66:d8:ad:7d:22:0c:15:
c9:bf:ad:38:2f:dd:60:e7:cf:d0:47:a1:ad:8e:d2:23:f7:f1:
51:ee:90:22:9f:0d:0d:f7:4c:f7:f8:01:5e:c0:3f:f6:d3:2b:
af:42:55:2d:1b:c3:ea:32:3d:46:fc:08:89:2d:e8:10:b6:22:
61:78:d6:9b:87:3e:55:85:53:2a:ca:89:00:f7:60:1e:99:6f:
65:20:65:90:10:8a:5d:8e:3c:e9:38:0e:5d:02:4f:a6:ec:b1:
86:cf:d3:b1:32:cf:3b:34:74:a0:9d:fd:06:32:de:15:b4:88:
2c:08:ac:07:05:26:d2:23:51:b1:1f:c5:24:cb:27:9a:7c:d0:
fa:af:ae:57:70:95:e6:ec:b4:32:42:60:55:7f:43:0c:88:8f:
b2:fe:b0:54:74:a3:75:0a:3e:96:61:cb:46:72:3c:85:c4:37:
72:8a:1b:f6:bb:d7:80:23:f2:cd:90:6a:37:63:05:dc:3b:4e:
2f:b7:bd:01:c5:ee:fd:5f:32:69:50:64:a5:a6:7b:a9:ec:14:
49:4f:b7:eb:ea:62:31:f2:0d:1b:8c:dc:f9:98:39:a2:68:e7:
cc:9d:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:31 2024 by rpki-client on console-ams.rpki-client.org