Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/q3ZKdCnQMABRBsqvH46MR6UkPmk.roa
File: q3ZKdCnQMABRBsqvH46MR6UkPmk.roa (raw, json)
Hash identifier: jZqj3hpHmm06TkmO+oi9DTXUr1dMqNfShz9xX7jC6qs=
Subject key identifier: AB:76:4A:74:29:D0:30:00:51:06:CA:AF:1F:8E:8C:47:A5:24:3E:69
Certificate issuer: /CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
Certificate serial: 01B048
Authority key identifier: 4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/q3ZKdCnQMABRBsqvH46MR6UkPmk.roa
Signing time: Wed 06 Apr 2022 11:21:26 +0000
ROA not before: Wed 06 Apr 2022 11:21:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 176.116.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110664 (0x1b048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
Validity
Not Before: Apr 6 11:21:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab764a7429d030005106caaf1f8e8c47a5243e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:16:02:21:91:e0:f9:ef:a8:01:d5:e1:a4:fd:
d3:11:73:f6:2b:e1:58:22:7f:0a:24:d1:15:ea:f1:
45:1f:a9:d5:28:7c:b2:ad:97:0f:b2:d0:fc:99:c3:
ca:a2:4a:39:de:92:5f:70:da:01:72:fd:36:72:e7:
4b:22:18:2b:44:e4:36:08:4e:d0:60:16:8d:b4:4c:
ce:17:11:46:e6:7c:d0:db:6d:ef:43:fa:e8:cd:4b:
c2:0e:39:4a:28:84:5f:d7:aa:4d:32:e1:16:d6:29:
83:1d:89:9d:43:04:df:c0:3d:ac:ae:10:eb:26:b4:
8c:88:2c:91:3f:7f:f8:df:67:ff:be:56:9b:d1:d9:
30:a3:ee:78:ef:d3:69:4a:ea:57:2c:6b:ca:af:5f:
ca:b4:d8:e1:2d:fa:4b:ee:4e:d1:c7:e1:a3:e8:d7:
fb:60:db:0a:e0:5e:f6:18:e7:ee:ed:8a:39:38:d1:
87:85:12:45:71:32:95:6a:e9:65:2e:db:6f:aa:46:
7c:70:8f:53:45:39:16:c3:b5:2c:8c:7c:4e:05:0f:
65:ef:82:72:19:7a:70:89:06:e0:29:99:00:1b:ca:
e3:12:b7:60:e8:f2:c8:da:f5:a9:be:61:86:d2:4d:
a8:a5:95:df:5c:df:42:68:f7:fd:f7:e4:e9:65:fb:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:76:4A:74:29:D0:30:00:51:06:CA:AF:1F:8E:8C:47:A5:24:3E:69
X509v3 Authority Key Identifier:
keyid:4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/q3ZKdCnQMABRBsqvH46MR6UkPmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.6.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:40:96:fa:57:6a:5f:51:9e:df:5b:e5:ea:6c:60:d6:80:5a:
a1:0c:32:12:10:91:ca:31:a3:d0:75:c4:77:da:b2:16:d4:54:
3f:72:9f:fa:34:f0:8a:44:de:eb:42:1b:1a:75:6a:47:48:13:
e0:3a:da:e2:f7:a2:55:59:ad:59:ee:d2:e5:00:54:07:8d:7b:
83:93:9b:e0:5b:32:9d:e5:f6:1f:2f:94:ad:79:f0:5b:6d:e4:
6f:d5:b5:ce:3a:d2:ba:e7:a8:74:11:65:bc:07:bc:eb:3e:fe:
cd:a4:79:5e:54:28:e5:18:60:97:bc:5f:65:2c:21:9b:8c:12:
3e:d6:00:51:db:ad:50:fe:64:b3:af:bc:38:c2:e6:a5:4a:db:
11:e5:95:d2:07:02:92:9a:56:32:12:d7:9c:41:48:a9:8b:57:
77:58:d2:3b:50:02:77:e7:55:1b:60:83:69:aa:d2:4c:38:2e:
7a:a2:7c:20:3f:78:b4:f3:4b:ce:fb:4d:8f:41:05:e7:4b:16:
01:27:41:46:c9:f1:00:e9:3d:32:e5:ef:68:38:4e:d8:6a:ae:
0c:73:e6:fd:ee:da:d6:72:9d:31:b1:d6:2a:44:36:99:6e:1e:
3b:33:69:98:f6:ad:fb:11:b7:6b:51:66:20:c5:c2:88:4a:29:
23:0f:4b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:28 2024 by rpki-client on console-fra.rpki-client.org