Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/977fa3-3f65-4f40-9105-8603cdecf9a2/1/zxTN2OC7Rs3YH1iZ9a6y27Mdjo4.roa
File: zxTN2OC7Rs3YH1iZ9a6y27Mdjo4.roa (raw, json)
Hash identifier: HnDRnXGv0bMTn54WhQOVc9pkn0hL5qGK2wYkx8gRwMo=
Subject key identifier: CF:14:CD:D8:E0:BB:46:CD:D8:1F:58:99:F5:AE:B2:DB:B3:1D:8E:8E
Certificate issuer: /CN=8fb1a18133bf384e7099e5985c40fe281e2da755
Certificate serial: 018572BA3BDFE95052FAF0E2C2493FD786E1
Authority key identifier: 8F:B1:A1:81:33:BF:38:4E:70:99:E5:98:5C:40:FE:28:1E:2D:A7:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7GhgTO_OE5wmeWYXED-KB4tp1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/977fa3-3f65-4f40-9105-8603cdecf9a2/1/zxTN2OC7Rs3YH1iZ9a6y27Mdjo4.roa
Signing time: Mon 02 Jan 2023 13:44:45 +0000
ROA not before: Mon 02 Jan 2023 13:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 176.126.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:3b:df:e9:50:52:fa:f0:e2:c2:49:3f:d7:86:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb1a18133bf384e7099e5985c40fe281e2da755
Validity
Not Before: Jan 2 13:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf14cdd8e0bb46cdd81f5899f5aeb2dbb31d8e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:e3:5e:6c:47:d8:aa:26:e4:7b:ee:35:95:
b5:12:b5:d7:07:b4:cb:99:9a:78:78:f4:57:13:15:
63:8c:a9:86:b6:ed:2f:b6:42:7a:c0:b7:1a:7b:fd:
60:99:b6:45:3a:4f:84:d0:f2:bb:6d:15:78:8e:10:
78:48:0f:b8:22:a6:61:79:65:55:41:90:71:56:09:
31:f2:e1:42:c1:ba:b0:78:9f:af:15:0d:58:bd:32:
1f:05:d3:a7:06:67:cb:a8:1a:7c:23:21:0d:99:18:
d4:ae:2f:3c:2c:4e:29:df:68:d3:f6:25:12:8c:77:
7e:b7:1f:69:cc:02:50:de:d7:7e:4b:07:96:25:ce:
b2:d2:cd:43:09:dd:4b:05:0a:ea:ba:cb:e1:a0:83:
03:36:12:c0:0b:8f:36:41:6b:41:85:7c:e0:34:fa:
95:74:5a:26:6d:43:11:d8:44:e3:a6:d0:22:91:db:
1c:04:5a:da:fd:b1:4e:be:ff:a6:d7:a0:bb:60:97:
99:5a:97:a7:14:f2:50:5b:37:21:d5:08:91:6a:6c:
45:a7:7d:05:7d:c3:6e:1a:97:e9:46:ac:41:5e:29:
d7:3e:57:ff:ab:f9:93:a2:6d:bd:73:43:0c:e2:24:
0f:f0:48:6a:4f:ba:b9:5b:3f:b1:c5:c6:0f:09:04:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:CD:D8:E0:BB:46:CD:D8:1F:58:99:F5:AE:B2:DB:B3:1D:8E:8E
X509v3 Authority Key Identifier:
keyid:8F:B1:A1:81:33:BF:38:4E:70:99:E5:98:5C:40:FE:28:1E:2D:A7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7GhgTO_OE5wmeWYXED-KB4tp1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/977fa3-3f65-4f40-9105-8603cdecf9a2/1/zxTN2OC7Rs3YH1iZ9a6y27Mdjo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/977fa3-3f65-4f40-9105-8603cdecf9a2/1/j7GhgTO_OE5wmeWYXED-KB4tp1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.126.0/24
Signature Algorithm: sha256WithRSAEncryption
63:28:2d:89:96:f4:85:e3:3b:b8:b0:ae:a1:f9:62:f1:7d:48:
7d:d6:ab:19:9a:b7:71:05:93:6d:a5:c3:2f:ee:41:4a:92:c2:
7c:f8:c2:86:87:6d:a5:ba:9c:19:da:ff:57:1c:6e:96:ad:2d:
64:74:55:e2:26:57:24:22:02:87:c1:6d:06:1e:f9:67:a8:74:
d4:f7:df:a5:35:e4:92:be:d2:a4:44:64:6c:6d:69:b6:a1:42:
c9:0e:92:ca:08:67:4f:22:65:ee:8e:a1:f9:64:73:ea:8f:57:
32:1a:6e:1f:c3:d6:30:11:73:f7:2b:a4:9a:7b:97:8d:7a:84:
f2:49:2c:12:82:6d:14:f6:15:e8:e9:5c:ff:f3:c7:bf:da:28:
a1:7b:d0:32:ce:54:68:76:89:7a:9c:2f:46:dc:8c:30:b4:fc:
b5:58:87:d1:ab:c7:7a:ca:ae:ab:d5:73:de:70:11:04:5e:eb:
df:c2:7c:cb:3e:0c:41:5f:9d:4c:cd:55:c8:60:40:f7:e6:2a:
bc:29:25:3c:a5:d6:65:14:3a:63:0e:9c:50:83:7c:c0:4b:87:
15:33:f7:bb:d2:2a:17:bf:ce:65:75:9f:2c:91:86:e5:a1:cf:
19:9e:5e:ca:10:e8:2c:c6:3f:17:ec:2f:d4:1e:64:e8:87:77:
53:e5:07:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyujvf6VBS+vDiwkk/14bhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYjFhMTgxMzNiZjM4NGU3MDk5ZTU5ODVjNDBmZTI4MWUy
ZGE3NTUwHhcNMjMwMTAyMTM0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjE0Y2RkOGUwYmI0NmNkZDgxZjU4OTlmNWFlYjJkYmIzMWQ4ZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlijjXmxH2Kom5HvuNZW1ErXXB7TL
mZp4ePRXExVjjKmGtu0vtkJ6wLcae/1gmbZFOk+E0PK7bRV4jhB4SA+4IqZheWVV
QZBxVgkx8uFCwbqweJ+vFQ1YvTIfBdOnBmfLqBp8IyENmRjUri88LE4p32jT9iUS
jHd+tx9pzAJQ3td+SweWJc6y0s1DCd1LBQrqusvhoIMDNhLAC482QWtBhXzgNPqV
dFombUMR2ETjptAikdscBFra/bFOvv+m16C7YJeZWpenFPJQWzch1QiRamxFp30F
fcNuGpfpRqxBXinXPlf/q/mTom29c0MM4iQP8EhqT7q5Wz+xxcYPCQQsiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM8Uzdjgu0bN2B9YmfWustuzHY6OMB8GA1UdIwQY
MBaAFI+xoYEzvzhOcJnlmFxA/igeLadVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajdHaGdUT19PRTV3bWVXWVhFRC1LQjR0cDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85NzdmYTMtM2Y2NS00ZjQwLTkxMDUt
ODYwM2NkZWNmOWEyLzEvenhUTjJPQzdSczNZSDFpWjlhNnkyN01kam80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC85NzdmYTMtM2Y2NS00ZjQwLTkxMDUtODYwM2NkZWNmOWEy
LzEvajdHaGdUT19PRTV3bWVXWVhFRC1LQjR0cDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsH5+MA0G
CSqGSIb3DQEBCwUAA4IBAQBjKC2JlvSF4zu4sK6h+WLxfUh91qsZmrdxBZNtpcMv
7kFKksJ8+MKGh22lupwZ2v9XHG6WrS1kdFXiJlckIgKHwW0GHvlnqHTU99+lNeSS
vtKkRGRsbWm2oULJDpLKCGdPImXujqH5ZHPqj1cyGm4fw9YwEXP3K6Sae5eNeoTy
SSwSgm0U9hXo6Vz/88e/2iihe9AyzlRodol6nC9G3IwwtPy1WIfRq8d6yq6r1XPe
cBEEXuvfwnzLPgxBX51MzVXIYED35iq8KSU8pdZlFDpjDpxQg3zAS4cVM/e70ioX
v85ldZ8skYbloc8Znl7KEOgsxj8X7C/UHmToh3dT5Qc+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-fra.rpki-client.org