Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6efa0b-b838-47dd-b4ed-2306d0ae3fcd/1/RG2jHrYuTAovc3hjctuYEJn7Xf4.roa
File: RG2jHrYuTAovc3hjctuYEJn7Xf4.roa (raw, json)
Hash identifier: /Bcz98DlztkF4oZ6YyEmFlVooyXRocplvsr6B1CpBWE=
Subject key identifier: 44:6D:A3:1E:B6:2E:4C:0A:2F:73:78:63:72:DB:98:10:99:FB:5D:FE
Certificate issuer: /CN=bc61bfbac54675fe0a8a2f17c73e936e4e1151a5
Certificate serial: 01856EEFEA86B93821A3EB162E3CA752E32C
Authority key identifier: BC:61:BF:BA:C5:46:75:FE:0A:8A:2F:17:C7:3E:93:6E:4E:11:51:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGG_usVGdf4Kii8Xxz6Tbk4RUaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/6efa0b-b838-47dd-b4ed-2306d0ae3fcd/1/RG2jHrYuTAovc3hjctuYEJn7Xf4.roa
Signing time: Sun 01 Jan 2023 20:04:54 +0000
ROA not before: Sun 01 Jan 2023 20:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 176.126.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:ea:86:b9:38:21:a3:eb:16:2e:3c:a7:52:e3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc61bfbac54675fe0a8a2f17c73e936e4e1151a5
Validity
Not Before: Jan 1 20:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=446da31eb62e4c0a2f73786372db981099fb5dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ec:41:4f:90:aa:05:d1:2f:57:b5:66:e6:46:
3c:67:9f:32:48:ec:bb:ae:a7:27:d3:55:a7:33:24:
e9:8c:3a:88:6d:6c:c0:29:f1:c9:91:b6:b7:ea:d9:
a2:f9:e0:db:72:b4:ae:11:65:fc:42:db:b4:72:27:
f6:4c:27:07:d9:c7:14:40:6c:98:39:66:ff:64:d9:
3d:d4:e0:ab:91:ec:06:dd:a3:66:8d:38:c4:31:cc:
1c:81:ee:c8:4e:50:31:b8:f3:f2:b4:24:02:44:11:
c5:7c:4d:75:e2:89:d0:94:ca:ee:14:40:aa:74:30:
a8:84:8b:94:16:6d:6c:f6:1e:ca:c5:9d:8c:a0:64:
48:52:a1:6c:5b:2f:c4:64:8f:d8:26:73:1f:9a:c0:
85:cd:7f:10:1f:b6:e7:6e:d9:93:35:07:52:0e:df:
35:93:67:b5:e4:66:cd:df:b7:6e:0c:5a:4b:c2:49:
37:a9:23:89:97:a1:08:25:0f:4a:fe:09:f0:31:26:
59:a4:ec:af:ac:ba:5b:3d:c5:41:3f:5b:85:88:e8:
e9:8a:ef:cc:f9:f5:f0:d2:34:2d:5a:29:55:42:1e:
74:6e:61:fc:76:7a:03:aa:53:7a:21:6e:b1:f6:44:
ca:49:90:78:1b:ad:9b:c6:2f:08:27:c0:49:b0:9e:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6D:A3:1E:B6:2E:4C:0A:2F:73:78:63:72:DB:98:10:99:FB:5D:FE
X509v3 Authority Key Identifier:
keyid:BC:61:BF:BA:C5:46:75:FE:0A:8A:2F:17:C7:3E:93:6E:4E:11:51:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGG_usVGdf4Kii8Xxz6Tbk4RUaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6efa0b-b838-47dd-b4ed-2306d0ae3fcd/1/RG2jHrYuTAovc3hjctuYEJn7Xf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6efa0b-b838-47dd-b4ed-2306d0ae3fcd/1/vGG_usVGdf4Kii8Xxz6Tbk4RUaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.113.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5b:47:45:48:d5:85:bd:db:df:7b:41:b9:75:a6:36:0d:fe:
fd:46:a7:73:b5:4f:b0:93:52:37:6f:b9:55:e2:ba:cb:1e:6a:
62:58:ec:88:54:38:27:5e:06:77:cc:3b:ba:84:03:06:55:a7:
73:8c:88:bc:3c:d3:16:b2:09:f9:07:cb:9a:bf:a6:3a:f1:8f:
d4:c0:7e:99:7f:ed:ac:9d:a6:4b:d7:22:bf:c8:b3:3f:1a:a9:
f7:de:32:71:24:ca:eb:1b:13:12:93:17:36:ed:02:0d:c6:d2:
63:9f:12:6d:ff:b8:76:51:4a:c4:31:df:04:63:2d:61:8b:d2:
ad:71:0b:87:ef:68:a6:ac:df:1d:c9:4a:92:b8:35:8a:d1:58:
da:21:db:59:93:72:bb:b3:14:c9:96:67:3e:9e:77:76:71:b5:
cb:db:4e:6e:36:e7:5a:7e:4b:5e:17:62:8f:6a:31:09:cb:52:
3f:0e:c4:af:4f:c4:ba:b9:08:c9:60:95:8d:5d:5b:e7:c6:7c:
dd:e5:7b:c0:27:a4:27:46:ca:80:5b:89:72:6b:63:33:a6:e3:
b9:e0:6c:43:d9:fa:19:c9:63:8f:0d:29:48:58:47:68:b0:0b:
1d:63:c2:cc:80:08:e9:97:6b:b9:2f:b4:5c:00:85:a5:07:1a:
3c:16:41:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 14:30:08 2023 by rpki-client on console-fra.rpki-client.org