Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/9oOSxTqQK5EHH3CJjrIBCyvNmn4.roa
File: 9oOSxTqQK5EHH3CJjrIBCyvNmn4.roa (raw, json)
Hash identifier: NsZ1LvnD0y3YiS5Cqjfquoy4Bp3RNhU4Vb30eV0Px4k=
Subject key identifier: F6:83:92:C5:3A:90:2B:91:07:1F:70:89:8E:B2:01:0B:2B:CD:9A:7E
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 018CC3492240183E99EC591DA7113ED37E36
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/9oOSxTqQK5EHH3CJjrIBCyvNmn4.roa
Signing time: Mon 01 Jan 2024 04:29:59 +0000
ROA not before: Mon 01 Jan 2024 04:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49824
IP address blocks: 176.120.97.0/24 maxlen: 24
176.120.105.0/24 maxlen: 24
176.120.103.0/24 maxlen: 24
176.120.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:22:40:18:3e:99:ec:59:1d:a7:11:3e:d3:7e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jan 1 04:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f68392c53a902b91071f70898eb2010b2bcd9a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:ab:85:ba:51:5f:bc:84:03:b6:01:c5:69:
bb:04:17:d4:e1:b5:79:c0:89:43:cd:33:35:f8:bb:
7a:1b:aa:37:1d:43:2a:e3:a6:13:0f:38:17:5d:fb:
76:e1:af:a3:63:49:e2:05:0f:6f:a9:0f:6a:21:ef:
81:12:a1:be:4f:98:73:05:eb:14:3f:08:83:d1:2f:
7f:c8:3e:e2:7c:7b:6e:d7:df:9a:95:ba:ce:96:88:
0a:c1:b8:12:a0:49:3d:c0:a3:e1:3f:b5:c1:f8:eb:
2a:f5:e3:ed:ab:98:1b:aa:46:b8:09:dc:b7:85:19:
fe:19:f0:02:d7:90:ca:37:2e:fc:84:a7:a8:55:a3:
c1:d0:14:55:26:31:63:8b:2d:cb:cb:b0:90:2e:87:
13:28:87:97:74:dc:86:36:69:6b:30:a8:96:fd:1d:
47:f4:0f:5b:8a:61:e0:a0:71:3a:7a:ed:ef:76:85:
41:92:09:74:12:dd:7f:35:73:fb:3b:41:48:20:87:
94:62:c3:22:8e:9e:ad:1b:25:0f:ae:78:63:e4:f2:
0a:e9:e8:35:74:d0:10:78:d8:76:75:95:ac:be:05:
a9:2a:91:dc:08:e8:a2:6d:5d:f6:61:69:20:11:c8:
87:5a:5c:73:45:12:17:54:78:2d:e9:9c:c1:88:3a:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:83:92:C5:3A:90:2B:91:07:1F:70:89:8E:B2:01:0B:2B:CD:9A:7E
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/9oOSxTqQK5EHH3CJjrIBCyvNmn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.97.0/24
176.120.103.0/24
176.120.105.0-176.120.106.255
Signature Algorithm: sha256WithRSAEncryption
06:4e:7d:28:89:b2:d1:48:88:32:dc:c9:95:c7:f6:2b:d0:10:
c3:4e:7f:be:05:11:1d:b8:a2:32:b6:db:84:e1:4b:9f:b5:5d:
25:64:93:cc:fc:c1:bf:08:bc:29:d9:31:2c:9a:3f:7b:26:67:
d9:71:e1:3c:2f:08:11:51:76:de:be:5e:9b:3e:25:5b:da:09:
ae:b7:a7:7a:6e:76:53:92:35:83:c7:68:db:7b:28:94:a1:9e:
68:5c:8b:ed:fb:d6:7a:ec:ed:84:5b:45:d7:05:62:f5:d1:14:
50:ab:50:a3:27:ff:45:9b:70:64:bc:c0:3b:07:bd:00:f6:c4:
08:c9:62:85:45:05:81:39:ac:18:0c:58:d6:c9:5a:e1:17:70:
2f:71:f8:5a:2b:98:9b:d5:01:27:19:21:62:b0:49:4a:98:a8:
0a:7f:74:b2:98:49:e3:b7:7f:77:5b:dd:c5:30:1b:76:5c:26:
c8:11:79:08:e0:7f:d1:31:b4:71:f3:0d:8c:9a:69:c4:38:ef:
eb:bf:00:8e:82:db:a6:65:d6:2d:7f:79:3b:ea:02:34:93:dc:
ab:25:12:4c:a0:8c:ee:0b:85:ca:9e:07:00:78:fa:0e:7f:93:
cb:e7:3f:d7:93:d9:3b:be:ff:79:07:89:07:bb:c0:98:ec:8f:
15:a7:de:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 09:48:54 2024 by rpki-client on console-ams.rpki-client.org