Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/1-b2oN97uA7RIsnDjLwcrvAkOATM.roa
File: 1-b2oN97uA7RIsnDjLwcrvAkOATM.roa (raw, json)
Hash identifier: 0u6NcJdKrWBlPzLLnc6K39gNWXS2KCPEW2+gN6FD+x4=
Subject key identifier: F9:BD:A8:37:DE:EE:03:B4:48:B2:70:E3:2F:07:2B:BC:09:0E:01:33
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 0183CD383A52E6EFB89B160676A10FC9539E
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/1-b2oN97uA7RIsnDjLwcrvAkOATM.roa
Signing time: Wed 12 Oct 2022 17:22:37 +0000
ROA not before: Wed 12 Oct 2022 17:22:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 176.113.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cd:38:3a:52:e6:ef:b8:9b:16:06:76:a1:0f:c9:53:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Oct 12 17:22:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9bda837deee03b448b270e32f072bbc090e0133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:90:c2:e6:2a:4e:37:c1:e2:38:e4:9c:b4:
cd:e0:38:9d:85:0f:78:ad:56:ea:8f:48:f9:62:72:
43:58:65:03:72:bf:af:b0:b0:b1:d7:65:55:52:64:
90:bb:64:ca:30:6d:b1:5a:43:15:0e:08:2f:f2:22:
a9:e6:05:49:a6:37:1f:5b:25:bc:1c:3f:3a:23:0d:
f2:4c:3b:e0:96:00:99:49:d0:c3:b5:4e:69:64:fe:
8d:e0:52:b0:06:1b:a2:7a:2a:bb:87:55:e1:95:c5:
21:0d:0a:23:47:6d:6f:35:15:8c:c7:6d:6b:e2:4e:
75:cf:e8:a7:cf:1a:f5:ea:48:cb:d2:8d:52:e3:55:
e6:27:8a:25:09:50:f7:31:16:cd:c1:cd:83:a8:be:
33:1a:45:41:8c:c3:16:bb:fc:8e:db:7a:d4:58:f5:
d3:58:1c:08:b7:dd:8f:83:18:ad:32:d9:ea:16:65:
9e:34:eb:02:ae:70:33:07:f2:6c:1b:80:46:6b:40:
48:2a:ad:37:b4:93:46:0f:0c:ab:c3:20:35:66:d2:
37:d6:8e:96:4e:c5:a5:6c:2c:84:ef:5f:f5:01:1a:
20:02:e8:89:ce:e0:6f:5d:91:2c:30:ea:ba:0b:f5:
2e:d4:a8:b8:ac:e9:06:ef:64:d2:fe:46:e9:da:ad:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BD:A8:37:DE:EE:03:B4:48:B2:70:E3:2F:07:2B:BC:09:0E:01:33
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/1-b2oN97uA7RIsnDjLwcrvAkOATM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.100.0/22
Signature Algorithm: sha256WithRSAEncryption
78:c4:e3:d2:18:3d:b1:50:6d:6b:66:65:c5:ba:64:fb:eb:a7:
33:42:f5:42:8c:a4:43:a7:35:97:47:bf:74:48:3b:45:11:78:
a0:24:fc:40:90:f7:9e:25:5f:e7:38:36:d4:47:ee:d8:df:c6:
13:33:10:06:bf:d4:0e:9a:f3:c3:01:30:ea:5d:f0:a6:bd:14:
45:39:b2:44:3c:5b:03:ea:95:82:20:73:18:27:ca:f0:09:ac:
e7:17:09:6a:2c:4f:c7:21:67:8f:fe:a1:83:26:4f:69:39:59:
66:1d:14:6b:cb:c0:b5:f8:b9:f1:52:38:a4:34:62:7f:2a:e7:
43:bc:11:03:d2:4f:ea:5b:67:72:b4:93:10:1d:eb:50:53:72:
46:45:0c:1c:3d:33:ea:e0:f8:f2:a8:69:63:d7:be:1e:49:81:
da:cb:72:8c:4a:b6:84:19:40:a5:93:5d:d6:20:7a:f2:e5:fa:
72:8f:b1:a0:be:aa:e0:4c:ba:33:fb:1a:e9:1d:9d:c6:63:20:
1c:8f:37:04:d0:07:b6:da:69:f3:62:c8:ba:f6:16:49:28:32:
32:1f:d1:e8:9c:c8:2e:51:1e:d5:f5:97:a2:95:25:49:41:b2:
37:64:52:84:be:2e:2f:b4:e8:27:3d:8e:6f:18:1f:8c:7c:ef:
1b:5c:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:45 2024 by rpki-client on console-ams.rpki-client.org