Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3fc2fb-d24e-41cc-835b-91f3e38d0535/1/_7BDx9p6-561oBaK-nuL6htObqA.roa
File: _7BDx9p6-561oBaK-nuL6htObqA.roa (raw, json)
Hash identifier: dSPTFOUUUNBqVnI8Fn2edj9O1Wyl9y+8R3QDEBFq6CI=
Subject key identifier: FF:B0:43:C7:DA:7A:FB:9E:B5:A0:16:8A:FA:7B:8B:EA:1B:4E:6E:A0
Certificate issuer: /CN=a518fe89f78527304023f8c5f05ab2e3a3d6d9f2
Certificate serial: 9B8B99
Authority key identifier: A5:18:FE:89:F7:85:27:30:40:23:F8:C5:F0:5A:B2:E3:A3:D6:D9:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRj-ifeFJzBAI_jF8Fqy46PW2fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3fc2fb-d24e-41cc-835b-91f3e38d0535/1/_7BDx9p6-561oBaK-nuL6htObqA.roa
Signing time: Sat 01 Jan 2022 03:54:04 +0000
ROA not before: Sat 01 Jan 2022 03:54:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 176.126.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10193817 (0x9b8b99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a518fe89f78527304023f8c5f05ab2e3a3d6d9f2
Validity
Not Before: Jan 1 03:54:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffb043c7da7afb9eb5a0168afa7b8bea1b4e6ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:d6:5e:9b:a8:24:3e:83:29:35:78:18:f5:
6c:47:47:db:a5:53:26:32:a0:ab:72:ee:9f:8e:5b:
fd:e0:cb:e2:4f:f8:a8:6e:75:07:23:59:e4:d4:5a:
66:97:6b:a5:d4:5d:61:0f:4b:4d:5f:00:78:7b:a7:
1b:13:b0:e3:8c:a8:b4:d1:20:5a:6b:c2:78:29:22:
2a:a9:53:22:97:eb:68:b1:32:b3:5a:ed:15:e1:c8:
25:2e:e4:4d:be:3c:3f:43:43:e3:09:4b:3a:aa:06:
6e:f4:89:da:80:d4:9d:05:cd:fc:e7:a2:00:69:e6:
01:af:b2:69:25:df:4f:8d:f0:dc:e0:18:92:61:e3:
92:db:1b:fc:34:36:68:64:e0:90:eb:25:cc:8e:dd:
5f:fd:9e:82:ed:44:db:5a:ce:05:8a:dd:4c:96:9e:
67:b7:82:7a:bd:b6:eb:cd:69:f1:84:bb:3a:ad:c6:
53:03:93:35:fc:1b:12:02:9e:50:dd:08:00:9e:d5:
7d:fc:5d:48:6d:e5:ac:55:13:34:ba:d7:e6:3b:d9:
7e:bf:20:58:df:bb:70:63:53:c1:fc:41:61:5a:31:
f0:98:da:06:5e:ae:46:f1:2c:66:ea:50:0e:18:8b:
61:1c:ee:4d:f2:29:05:2a:6e:9f:43:f6:3d:09:c3:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B0:43:C7:DA:7A:FB:9E:B5:A0:16:8A:FA:7B:8B:EA:1B:4E:6E:A0
X509v3 Authority Key Identifier:
keyid:A5:18:FE:89:F7:85:27:30:40:23:F8:C5:F0:5A:B2:E3:A3:D6:D9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRj-ifeFJzBAI_jF8Fqy46PW2fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3fc2fb-d24e-41cc-835b-91f3e38d0535/1/_7BDx9p6-561oBaK-nuL6htObqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3fc2fb-d24e-41cc-835b-91f3e38d0535/1/pRj-ifeFJzBAI_jF8Fqy46PW2fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f9:fb:f9:99:fc:b9:8f:f9:84:82:f1:a9:de:b4:a4:30:c6:
fa:e6:c7:58:60:9a:97:15:d4:b6:5e:12:d5:c1:cf:59:57:da:
c9:ab:10:9d:b5:39:f7:fa:e4:09:c8:46:30:6a:fe:ce:08:ad:
61:a1:5c:68:6f:f4:f9:d0:96:7e:d3:9d:d0:fe:78:3e:c4:44:
3c:d0:f1:25:4f:2d:80:53:cf:fb:61:00:39:1c:41:5d:2c:47:
a4:7b:12:41:67:b3:48:4f:a9:78:3c:a0:06:06:6d:41:f2:6e:
15:68:ef:cf:67:f2:32:13:a9:55:1a:a4:ec:3c:8a:c6:e4:4b:
39:69:ad:4e:31:54:bc:2a:ab:d0:13:f7:26:ce:32:b7:b7:55:
47:69:95:2d:f9:44:4c:c6:17:e4:2d:f5:bf:50:1f:d0:c1:b2:
d1:11:04:74:ba:eb:db:70:a9:33:0b:5a:9a:70:25:69:c8:c5:
ea:4c:20:8f:ba:0a:75:e3:d6:85:4e:41:29:c5:b6:9f:85:db:
bb:8f:21:89:c6:47:94:d7:91:db:3c:16:eb:6c:c4:14:25:d3:
92:08:14:56:3a:51:62:94:73:1c:38:97:14:bf:93:89:b2:ff:
90:ad:13:7a:e0:cb:0c:bd:f8:0a:52:23:0a:0c:67:c6:47:79:
7a:23:1f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:34 2024 by rpki-client on console-ams.rpki-client.org