Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6e63c0-7a72-459e-aa7e-9af303339ba3/1/sEKFsRvCqFe3lBoZQI9oteRw_6c.roa
File: sEKFsRvCqFe3lBoZQI9oteRw_6c.roa (raw, json)
Hash identifier: BqwHfyOoC96C0n04NuJBWxUqtKgcFBa+ZFPq7LrQbPQ=
Subject key identifier: B0:42:85:B1:1B:C2:A8:57:B7:94:1A:19:40:8F:68:B5:E4:70:FF:A7
Certificate issuer: /CN=1c3fc9be8ce46e3d6ce5c67ea33e2e199d409c7a
Certificate serial: 018964753DE455B9852D874177BB36F67C93
Authority key identifier: 1C:3F:C9:BE:8C:E4:6E:3D:6C:E5:C6:7E:A3:3E:2E:19:9D:40:9C:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6e63c0-7a72-459e-aa7e-9af303339ba3/1/sEKFsRvCqFe3lBoZQI9oteRw_6c.roa
Signing time: Mon 17 Jul 2023 15:25:52 +0000
ROA not before: Mon 17 Jul 2023 15:25:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 176.126.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:75:3d:e4:55:b9:85:2d:87:41:77:bb:36:f6:7c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c3fc9be8ce46e3d6ce5c67ea33e2e199d409c7a
Validity
Not Before: Jul 17 15:25:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b04285b11bc2a857b7941a19408f68b5e470ffa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:4a:8c:c2:27:0d:d8:06:2e:b6:d4:f7:65:
71:76:6b:c2:a1:05:27:fc:a0:f8:68:4e:2b:55:bc:
88:35:9f:67:f6:a8:a1:46:aa:11:e7:39:0b:0b:fe:
a6:a8:72:4f:95:65:fe:29:93:9a:ef:0b:99:52:85:
cb:9d:26:8c:a9:de:d3:65:25:16:c5:b6:77:63:ee:
58:a6:66:af:5c:e9:0c:63:65:a9:6a:84:b8:de:d5:
a4:52:c6:35:e6:99:41:1c:ca:d9:07:75:10:3b:bb:
95:f2:d0:ef:a8:1c:da:e3:e1:85:e5:0c:3c:a8:c6:
a9:75:4c:23:e1:06:2d:e2:47:49:f6:95:44:f3:e4:
34:c1:ad:57:4c:f8:9c:2f:83:33:24:8c:f6:0d:2b:
43:f2:4c:bc:ac:cc:c2:5b:f3:43:04:f7:c6:a0:27:
25:16:2f:fd:e6:40:52:2d:fc:69:1c:36:0f:9f:42:
d4:06:ea:6e:4c:6f:cd:c1:d4:76:36:6c:10:9b:17:
a6:90:8f:88:52:fd:19:4d:70:ec:0d:af:a2:93:23:
9d:fd:85:fc:17:39:50:eb:b7:82:5c:eb:09:72:7b:
ed:f0:8a:29:d2:fb:1f:fa:2d:4c:cc:ea:6c:6d:a3:
27:c8:74:19:5f:47:39:48:c2:2c:5b:55:6c:11:4e:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:42:85:B1:1B:C2:A8:57:B7:94:1A:19:40:8F:68:B5:E4:70:FF:A7
X509v3 Authority Key Identifier:
keyid:1C:3F:C9:BE:8C:E4:6E:3D:6C:E5:C6:7E:A3:3E:2E:19:9D:40:9C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6e63c0-7a72-459e-aa7e-9af303339ba3/1/sEKFsRvCqFe3lBoZQI9oteRw_6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6e63c0-7a72-459e-aa7e-9af303339ba3/1/HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.96.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6c:fd:df:d7:76:99:bb:2a:71:03:61:ec:c6:f5:65:16:af:
23:9b:1f:f9:30:ef:4d:04:e7:6c:df:b3:4f:99:c4:55:70:10:
73:02:c6:ce:c9:a6:e2:fa:82:54:2b:bf:78:67:eb:cc:52:14:
21:0b:d7:c6:4b:77:39:9c:34:79:39:4a:28:b4:61:34:c0:95:
79:26:68:93:3c:07:ce:15:8c:ad:01:6a:40:ca:6d:3c:d6:ba:
8f:39:f9:e2:be:9b:ee:64:db:1b:a9:5f:0d:e8:62:5d:38:9e:
0e:04:ea:87:37:3f:f6:20:3c:03:8e:d9:06:a6:04:c1:1b:1c:
ee:52:f1:9c:9e:6b:df:90:c5:69:73:3b:e5:15:6b:b9:d2:90:
bc:64:3d:e9:f7:3d:97:b3:9d:28:68:77:8d:e8:11:a3:f2:93:
63:78:c2:84:1b:bb:d2:f9:69:cc:ac:f2:cf:7f:39:78:2a:5c:
11:85:23:04:24:65:bd:ee:50:5d:5c:d1:c0:4b:8c:6d:d3:8e:
b6:c8:db:34:06:6a:7d:d6:f4:45:e0:97:ee:b1:c1:9e:a6:cd:
b2:fa:c5:72:25:5b:b9:b3:af:6a:a8:b6:62:16:e7:2c:2a:41:
36:b6:a5:f4:ca:14:7d:77:45:ba:dc:fd:c5:da:e7:f3:4a:06:
aa:29:9e:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkdT3kVbmFLYdBd7s29nyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjM2ZjOWJlOGNlNDZlM2Q2Y2U1YzY3ZWEzM2UyZTE5OWQ0
MDljN2EwHhcNMjMwNzE3MTUyNTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDQyODViMTFiYzJhODU3Yjc5NDFhMTk0MDhmNjhiNWU0NzBmZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjBKjMInDdgGLrbU92VxdmvCoQUn
/KD4aE4rVbyINZ9n9qihRqoR5zkLC/6mqHJPlWX+KZOa7wuZUoXLnSaMqd7TZSUW
xbZ3Y+5YpmavXOkMY2WpaoS43tWkUsY15plBHMrZB3UQO7uV8tDvqBza4+GF5Qw8
qMapdUwj4QYt4kdJ9pVE8+Q0wa1XTPicL4MzJIz2DStD8ky8rMzCW/NDBPfGoCcl
Fi/95kBSLfxpHDYPn0LUBupuTG/NwdR2NmwQmxemkI+IUv0ZTXDsDa+ikyOd/YX8
FzlQ67eCXOsJcnvt8Iop0vsf+i1MzOpsbaMnyHQZX0c5SMIsW1VsEU61FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLBChbEbwqhXt5QaGUCPaLXkcP+nMB8GA1UdIwQY
MBaAFBw/yb6M5G49bOXGfqM+LhmdQJx6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERfSnZvemtiajFzNWNaLW96NHVHWjFBbkhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ZTYzYzAtN2E3Mi00NTllLWFhN2Ut
OWFmMzAzMzM5YmEzLzEvc0VLRnNSdkNxRmUzbEJvWlFJOW90ZVJ3XzZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82ZTYzYzAtN2E3Mi00NTllLWFhN2UtOWFmMzAzMzM5YmEz
LzEvSERfSnZvemtiajFzNWNaLW96NHVHWjFBbkhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsH5gMA0G
CSqGSIb3DQEBCwUAA4IBAQB3bP3f13aZuypxA2HsxvVlFq8jmx/5MO9NBOds37NP
mcRVcBBzAsbOyabi+oJUK794Z+vMUhQhC9fGS3c5nDR5OUootGE0wJV5JmiTPAfO
FYytAWpAym081rqPOfnivpvuZNsbqV8N6GJdOJ4OBOqHNz/2IDwDjtkGpgTBGxzu
UvGcnmvfkMVpczvlFWu50pC8ZD3p9z2Xs50oaHeN6BGj8pNjeMKEG7vS+WnMrPLP
fzl4KlwRhSMEJGW97lBdXNHAS4xt0462yNs0Bmp91vRF4JfuscGeps2y+sVyJVu5
s69qqLZiFucsKkE2tqX0yhR9d0W63P3F2ufzSgaqKZ4O
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:31 2024 by rpki-client on console-fra.rpki-client.org