Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/IaekO2oCBc3g9mW5K-F9OYerIUk.roa
File: IaekO2oCBc3g9mW5K-F9OYerIUk.roa (raw, json)
Hash identifier: iRwL6OkS81sE24Gf5aLxUDmZGjaGIY3LJoNO/6tJ6dk=
Subject key identifier: 21:A7:A4:3B:6A:02:05:CD:E0:F6:65:B9:2B:E1:7D:39:87:AB:21:49
Certificate issuer: /CN=3883c95470a5ba4a87c505b683b816576371e3c8
Certificate serial: 018A9A56BC1362223F9F2D5BC2CBACBB04A2
Authority key identifier: 38:83:C9:54:70:A5:BA:4A:87:C5:05:B6:83:B8:16:57:63:71:E3:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIPJVHClukqHxQW2g7gWV2Nx48g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/IaekO2oCBc3g9mW5K-F9OYerIUk.roa
Signing time: Fri 15 Sep 2023 19:34:50 +0000
ROA not before: Fri 15 Sep 2023 19:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47377
IP address blocks: 176.126.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9a:56:bc:13:62:22:3f:9f:2d:5b:c2:cb:ac:bb:04:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3883c95470a5ba4a87c505b683b816576371e3c8
Validity
Not Before: Sep 15 19:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21a7a43b6a0205cde0f665b92be17d3987ab2149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:d9:a0:03:6d:40:cb:54:d6:37:a6:58:98:
3b:a9:2d:25:a4:75:fb:b2:21:b9:8f:49:fa:7a:2b:
ff:7b:cc:45:57:3c:8c:b8:2e:d7:e8:87:ab:a3:4e:
74:20:7d:8a:22:86:ff:8d:94:8f:d3:31:9f:e0:83:
da:69:e4:5d:a4:96:5b:b1:81:51:00:4c:d4:ee:c0:
fe:e2:5f:05:3c:2a:00:1e:65:cf:69:8b:62:05:86:
9d:27:2e:45:5b:89:f7:51:2f:b5:a4:a0:42:5e:e2:
e0:8c:08:ef:f6:ec:a1:69:7e:21:bf:36:ff:8c:a1:
34:39:af:be:52:00:29:31:2a:bc:e9:a5:40:ea:48:
21:8a:71:a5:81:35:ae:60:c8:ab:c9:2c:6c:03:92:
1b:e3:fb:8f:44:6c:c4:1e:60:54:17:49:59:54:a8:
8a:ef:63:00:22:3a:ec:5d:d2:ec:15:96:8b:bc:88:
07:7b:f2:b4:75:8a:c5:a8:ac:89:2b:01:03:f0:35:
5d:15:4c:eb:bc:47:d6:23:d3:93:a5:42:3f:b3:b4:
ea:cc:3a:82:80:d0:ee:84:40:9b:0a:21:ca:c7:c3:
0a:16:3f:be:dd:75:a3:2f:6a:20:e9:63:bf:b1:37:
8b:f6:93:9e:31:58:b3:e2:3e:39:28:a3:d0:bf:c2:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A7:A4:3B:6A:02:05:CD:E0:F6:65:B9:2B:E1:7D:39:87:AB:21:49
X509v3 Authority Key Identifier:
keyid:38:83:C9:54:70:A5:BA:4A:87:C5:05:B6:83:B8:16:57:63:71:E3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIPJVHClukqHxQW2g7gWV2Nx48g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/IaekO2oCBc3g9mW5K-F9OYerIUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.100.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d8:cb:0b:ef:85:4d:cf:7f:3a:c0:5a:d8:41:71:6c:1b:d3:
55:6e:ae:ef:79:e1:c0:1f:6c:49:a7:86:dc:ea:42:2d:9f:fe:
32:3c:22:18:5f:c0:dc:f7:e3:3e:f3:4d:4f:cc:36:48:8b:58:
5a:e2:e6:3f:90:d2:40:da:2f:98:44:20:10:5d:5c:09:b5:f6:
da:09:74:32:04:d3:ff:17:32:ae:46:05:77:64:b9:7a:ea:dc:
fa:63:46:cf:9b:30:db:ba:12:ac:b7:11:55:f8:36:fa:ee:4f:
27:23:2a:00:7e:d8:12:da:8b:ab:48:3e:06:09:f9:32:ec:f1:
0f:60:b6:d8:44:f2:42:f6:bb:33:6e:42:4b:dd:70:6f:c1:82:
06:57:3e:a7:66:cc:33:f9:3f:a8:c7:fc:e9:2c:28:50:e7:9c:
28:c2:cf:2e:a8:7c:ad:60:a4:b2:8f:cc:cd:f5:6d:8f:c6:b5:
db:2b:fc:bb:75:1e:64:e5:d0:19:31:ed:9e:a2:9b:70:f6:ed:
ad:c3:b8:87:b1:ab:6c:c8:72:3b:11:cb:ea:54:e0:09:98:28:
2d:02:2b:68:c1:33:12:80:37:28:27:59:66:b0:64:c0:ce:a0:
96:4d:64:44:17:06:9b:c1:cf:d5:de:d5:f3:16:bd:a7:a1:d2:
92:32:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 13:47:51 2023 by rpki-client on console-fra.rpki-client.org