Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/V0IcvjtvbRC6Z9Ytw4Tx1eFsJMA.roa
File: V0IcvjtvbRC6Z9Ytw4Tx1eFsJMA.roa (raw, json)
Hash identifier: zNP0S7uWbL4KJB3rhhJP+f8raHi8sdrhpmIQHZDaQko=
Subject key identifier: 57:42:1C:BE:3B:6F:6D:10:BA:67:D6:2D:C3:84:F1:D5:E1:6C:24:C0
Certificate issuer: /CN=a1c7471bde182db9c2bc11d68e5ff52f4aac4f6e
Certificate serial: 0185714C03CEEEF129C31046670FDDB9BC4D
Authority key identifier: A1:C7:47:1B:DE:18:2D:B9:C2:BC:11:D6:8E:5F:F5:2F:4A:AC:4F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocdHG94YLbnCvBHWjl_1L0qsT24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/V0IcvjtvbRC6Z9Ytw4Tx1eFsJMA.roa
Signing time: Mon 02 Jan 2023 07:04:45 +0000
ROA not before: Mon 02 Jan 2023 07:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8849
IP address blocks: 158.255.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:03:ce:ee:f1:29:c3:10:46:67:0f:dd:b9:bc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c7471bde182db9c2bc11d68e5ff52f4aac4f6e
Validity
Not Before: Jan 2 07:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57421cbe3b6f6d10ba67d62dc384f1d5e16c24c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:69:2d:8d:07:4b:87:eb:c6:08:60:94:0d:
81:96:9d:a5:6d:c4:a7:a3:bf:37:11:d1:5f:b0:db:
99:33:a7:d4:13:3a:b5:e2:86:f8:e8:14:64:65:a7:
57:3e:0a:5a:2c:3d:19:b3:a7:07:54:90:ec:f7:06:
94:c8:df:ca:83:1b:b6:7b:fb:dc:19:bd:3a:f4:0b:
7c:7c:b2:c6:64:b2:d9:a7:d5:1a:00:a6:63:aa:52:
b5:11:e4:93:8c:dd:2a:ed:8a:8c:0e:1d:56:38:cb:
17:a5:4c:e7:b1:e1:3c:80:bb:89:6e:8c:e4:65:65:
9a:e7:d7:5d:ce:70:4b:c3:4b:29:9c:8f:9a:35:02:
c4:0c:8a:89:26:ad:83:21:93:90:6b:02:38:fc:cd:
c3:2f:b6:57:2f:98:3c:78:f3:1a:eb:f7:cb:e2:75:
85:92:f7:af:29:78:ec:33:50:5a:17:f3:ea:f8:85:
a7:ac:95:2f:03:dc:e2:33:5e:d5:b2:14:9e:33:3f:
2d:cb:dc:31:e0:bd:f0:ad:72:ed:f1:66:51:bc:3b:
4b:61:fc:8f:2b:19:70:42:a6:14:f1:61:55:48:fa:
5f:f7:4a:87:5b:a5:f4:f4:19:ec:ba:d6:32:44:6e:
11:60:0d:60:17:2c:89:bb:7e:49:09:5c:e0:f3:1e:
90:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:42:1C:BE:3B:6F:6D:10:BA:67:D6:2D:C3:84:F1:D5:E1:6C:24:C0
X509v3 Authority Key Identifier:
keyid:A1:C7:47:1B:DE:18:2D:B9:C2:BC:11:D6:8E:5F:F5:2F:4A:AC:4F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocdHG94YLbnCvBHWjl_1L0qsT24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/V0IcvjtvbRC6Z9Ytw4Tx1eFsJMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/ocdHG94YLbnCvBHWjl_1L0qsT24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.76.0/24
Signature Algorithm: sha256WithRSAEncryption
47:5a:f4:22:69:be:41:d5:a1:2d:95:6b:93:49:94:64:1d:c8:
54:64:99:c6:7e:fb:43:b1:4b:3a:10:11:eb:c0:69:c4:67:29:
91:cc:1c:3b:14:2e:4f:c3:cc:c6:75:e2:5c:07:a1:fd:85:c7:
5c:3c:8c:8c:76:46:43:bd:1a:8b:1a:52:a3:ad:c4:a1:7b:00:
aa:0e:e2:0e:9e:39:c2:a7:ad:06:24:53:f9:51:cc:18:0b:21:
ad:52:ea:95:88:31:db:6a:0f:52:b5:88:94:6d:9e:2a:d8:19:
5f:bb:fb:e8:0a:2e:4f:9f:3d:db:63:67:e6:88:9f:98:9f:3e:
dc:54:27:af:c4:5d:ab:65:cd:e2:3a:d8:43:ea:22:8e:5f:88:
6e:a9:e7:b7:0e:66:0b:97:9c:41:e4:da:4c:32:21:16:85:82:
7c:bb:39:81:ae:1f:32:61:ee:51:76:82:45:07:7d:0a:12:2d:
a5:83:44:5c:05:e6:c4:14:be:4f:f6:86:44:94:59:c3:4d:1d:
a0:1b:34:b7:bb:73:32:09:d8:29:f8:0e:b0:16:3d:ea:fd:6f:
b5:f8:8b:bc:c2:7f:09:d0:33:51:59:44:3b:74:bf:2a:50:09:
bf:0a:cc:aa:cb:76:4b:5a:53:77:c1:78:41:c6:43:bd:1f:b7:
a2:09:79:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:31 2024 by rpki-client on console-ams.rpki-client.org