Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/9b9a6e-1784-4aa6-ba3b-ab8083932c60/1/nFeBgRUwSSsLtndsvr3J18qjJZ4.roa
File: nFeBgRUwSSsLtndsvr3J18qjJZ4.roa (raw, json)
Hash identifier: BB1/C/G+fiLMW31K+I5W9XkOjJ0iOkX2GmIsSmu/LL0=
Subject key identifier: 9C:57:81:81:15:30:49:2B:0B:B6:77:6C:BE:BD:C9:D7:CA:A3:25:9E
Certificate issuer: /CN=4034513d969482401a40976c9d1f0bbfc3df6146
Certificate serial: 01852FE1346F8DD60C56A760163D586AE85C
Authority key identifier: 40:34:51:3D:96:94:82:40:1A:40:97:6C:9D:1F:0B:BF:C3:DF:61:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDRRPZaUgkAaQJdsnR8Lv8PfYUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/9b9a6e-1784-4aa6-ba3b-ab8083932c60/1/nFeBgRUwSSsLtndsvr3J18qjJZ4.roa
Signing time: Tue 20 Dec 2022 14:12:45 +0000
ROA not before: Tue 20 Dec 2022 14:12:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196724
IP address blocks: 195.182.36.0/24 maxlen: 24
178.23.176.0/21 maxlen: 21
2a00:1cf0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:e1:34:6f:8d:d6:0c:56:a7:60:16:3d:58:6a:e8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4034513d969482401a40976c9d1f0bbfc3df6146
Validity
Not Before: Dec 20 14:12:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c5781811530492b0bb6776cbebdc9d7caa3259e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:94:48:2c:9e:5a:ce:42:7f:63:ba:02:57:71:
7c:d3:42:1e:46:4a:8f:94:23:34:c1:b6:3a:b9:c7:
ea:33:5d:3d:4a:1d:77:4a:15:fb:61:c3:28:c2:d5:
8c:67:3a:87:ff:ca:57:73:5f:58:fe:11:1e:2b:f1:
b8:b6:2d:f9:a9:f0:f3:a9:20:69:14:6e:7a:d5:51:
e6:35:41:5c:7c:5d:d9:06:52:1b:e8:86:e3:03:a9:
c1:aa:de:80:fd:41:d1:23:a4:e9:8b:9e:12:01:94:
01:16:bd:3d:fc:42:6f:35:bc:2c:f2:65:1e:e1:a6:
e7:a7:7f:b8:82:bc:6c:e7:fa:46:71:bf:c7:e3:c3:
a9:ce:e7:db:84:29:bb:94:cf:00:9c:81:c9:16:d6:
8a:f3:c8:04:30:d9:69:e9:48:44:0a:76:8a:12:10:
ee:31:8f:ac:64:e4:fb:51:ae:66:14:5e:1a:f9:3a:
af:c3:7e:78:69:b9:38:d8:b8:17:e7:dd:bb:d1:28:
86:0f:85:75:20:7b:cf:36:66:5b:e0:c9:3a:8e:2e:
70:ef:8f:15:86:26:2c:da:3e:f0:12:06:72:50:3c:
df:f0:6b:0f:a3:04:28:22:47:76:79:87:d8:64:2f:
a8:c1:26:2c:57:3c:3f:d4:1c:77:5c:fa:bc:92:78:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:57:81:81:15:30:49:2B:0B:B6:77:6C:BE:BD:C9:D7:CA:A3:25:9E
X509v3 Authority Key Identifier:
keyid:40:34:51:3D:96:94:82:40:1A:40:97:6C:9D:1F:0B:BF:C3:DF:61:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDRRPZaUgkAaQJdsnR8Lv8PfYUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/9b9a6e-1784-4aa6-ba3b-ab8083932c60/1/nFeBgRUwSSsLtndsvr3J18qjJZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/9b9a6e-1784-4aa6-ba3b-ab8083932c60/1/QDRRPZaUgkAaQJdsnR8Lv8PfYUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.176.0/21
195.182.36.0/24
IPv6:
2a00:1cf0::/32
Signature Algorithm: sha256WithRSAEncryption
3a:0f:40:c2:62:50:2e:57:ea:82:64:b6:d6:33:ac:1a:29:0a:
a0:86:75:4c:7b:10:37:75:10:bf:01:d8:df:73:f7:97:ae:9d:
32:3b:82:de:a6:69:39:60:be:65:52:bd:e4:88:7d:f2:88:fa:
bb:2c:ca:ef:6d:f1:75:42:99:f9:5d:9d:8a:91:8c:49:2d:47:
5d:e0:8f:6b:30:d5:91:b6:1c:8f:20:81:25:be:f7:1f:f3:e2:
4f:f1:87:ed:7e:4d:88:3a:c9:c4:69:4b:87:67:37:b5:ba:87:
43:85:4f:3d:ea:da:3b:0c:c0:e2:a4:fa:39:52:4e:66:a6:bc:
3d:9b:af:a4:02:e8:66:9a:c7:ad:f5:cd:f1:e3:88:8d:4b:81:
ae:3d:cc:dc:76:a5:5a:10:3d:aa:bc:19:07:2d:d1:57:05:9e:
69:14:e5:30:c4:ff:e2:d5:c0:51:35:0b:c8:16:29:81:a1:9a:
9a:73:7c:eb:89:6e:c9:ef:12:46:fb:8b:a0:af:46:3a:64:a5:
e5:d7:9d:27:57:1b:56:40:bb:1a:70:0c:7c:74:54:00:f5:d7:
e4:69:9c:9c:e8:12:73:77:f4:33:17:59:8b:9e:e7:f7:87:3e:
fa:18:af:af:c9:31:5c:0f:bb:87:34:b1:0d:c1:d3:a8:88:5f:
ce:7a:3f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:41 2024 by rpki-client on console-ams.rpki-client.org