Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/PXyYMTVYZoxOiBm_lyYQnnYe-qE.roa
File: PXyYMTVYZoxOiBm_lyYQnnYe-qE.roa (raw, json)
Hash identifier: LNVSjCJLX/tv4YbgzsjBAYcKbpvQBSATRorNkf2PWTc=
Subject key identifier: 3D:7C:98:31:35:58:66:8C:4E:88:19:BF:97:26:10:9E:76:1E:FA:A1
Certificate issuer: /CN=55372b942c5207680054cfb11ad911a868f0619c
Certificate serial: 0188916FEF186F904B8759ACCC4FFA3F3E76
Authority key identifier: 55:37:2B:94:2C:52:07:68:00:54:CF:B1:1A:D9:11:A8:68:F0:61:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTcrlCxSB2gAVM-xGtkRqGjwYZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/PXyYMTVYZoxOiBm_lyYQnnYe-qE.roa
Signing time: Tue 06 Jun 2023 16:00:11 +0000
ROA not before: Tue 06 Jun 2023 16:00:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 176.126.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:6f:ef:18:6f:90:4b:87:59:ac:cc:4f:fa:3f:3e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55372b942c5207680054cfb11ad911a868f0619c
Validity
Not Before: Jun 6 16:00:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d7c98313558668c4e8819bf9726109e761efaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:86:fe:d1:53:1d:0a:a5:9f:82:32:3e:12:7d:
cf:1b:bd:5a:9d:b4:e6:4a:c4:4c:e5:22:a1:6e:3c:
66:68:e4:8c:e4:5d:3c:56:d4:96:6b:bc:1f:de:d0:
e1:8b:12:e4:96:38:f1:9a:6c:45:1a:3b:5c:58:b5:
89:88:7f:9a:89:2e:77:36:6d:03:56:96:85:63:ff:
8f:40:13:d1:5e:b0:90:3f:94:73:f1:36:0b:03:77:
eb:76:0d:aa:7a:1b:a6:33:92:01:1d:57:eb:bf:35:
ca:bb:26:33:e6:85:c0:47:17:9f:b7:cc:7f:46:7f:
25:cb:bc:c0:25:b3:c6:fd:20:7f:d2:5e:62:52:dd:
8e:16:bc:1e:2f:23:cb:08:cc:4f:de:fc:08:da:38:
bf:24:71:17:94:05:c3:50:67:9e:0b:2e:7a:eb:2f:
58:cb:1e:6a:a1:03:45:e4:3d:47:fd:78:67:b9:6b:
6a:4b:5f:59:12:3a:72:6e:cd:ef:00:71:07:84:2d:
64:b9:58:3d:23:4f:5f:75:0f:4f:f6:e3:5d:ae:46:
00:7d:27:26:0a:41:2c:26:dc:fc:7e:2a:d7:26:1c:
ab:90:d3:08:da:a4:1f:d4:e3:e7:4c:2c:34:17:77:
7d:df:95:af:d2:d8:2c:e9:03:98:33:d3:8e:91:af:
83:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7C:98:31:35:58:66:8C:4E:88:19:BF:97:26:10:9E:76:1E:FA:A1
X509v3 Authority Key Identifier:
keyid:55:37:2B:94:2C:52:07:68:00:54:CF:B1:1A:D9:11:A8:68:F0:61:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTcrlCxSB2gAVM-xGtkRqGjwYZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/PXyYMTVYZoxOiBm_lyYQnnYe-qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/VTcrlCxSB2gAVM-xGtkRqGjwYZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0a:64:d8:10:e9:c8:07:e8:cd:f7:a5:0f:a3:1c:87:d8:b1:
a6:07:3c:59:bd:b2:87:d8:91:64:cb:ae:70:56:a2:41:06:50:
60:d6:99:ec:99:13:f3:79:8e:c3:da:c4:ca:5b:3e:fc:d4:47:
eb:b5:f0:ca:ae:71:54:9c:a0:b7:22:b5:9e:ad:20:fb:51:32:
ef:ca:55:55:a9:2d:f2:54:1b:7f:10:7f:0b:5b:06:ab:b6:4f:
00:c7:25:d0:c9:b3:ef:ea:8f:e3:f1:6e:fa:22:07:76:a2:19:
4e:eb:b0:d0:c2:a5:7d:d1:87:4c:80:22:3f:95:ee:4a:71:d4:
dc:fc:fd:f0:a9:8b:f0:df:99:ab:83:69:2e:1c:28:a1:9d:01:
ed:17:de:49:ba:b0:54:d6:bd:09:75:63:24:07:df:92:8c:e4:
88:e3:1b:22:28:61:7c:f3:67:c7:48:eb:73:81:ad:7d:80:81:
ab:84:df:7b:c0:dd:5c:c2:22:62:7a:74:4a:12:35:97:6f:ea:
33:5a:2f:0f:f8:f7:7f:4c:59:ec:30:61:b3:0f:d2:0d:75:b6:
a0:38:e4:7c:e1:70:e8:0e:07:5c:68:84:0e:fb:51:f2:b1:8b:
63:c3:58:16:83:3d:56:dc:1c:f3:16:9f:bd:70:4d:cd:ff:e4:
1c:b6:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:20 2024 by rpki-client on console-ams.rpki-client.org