Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/9peuiE8uXAP5-msVdPkfcQHtzTc.roa
File: 9peuiE8uXAP5-msVdPkfcQHtzTc.roa (raw, json)
Hash identifier: v+MVflUHWDNsx0dnf1U60gzDr7Z+zFLzMg261YMaR88=
Subject key identifier: F6:97:AE:88:4F:2E:5C:03:F9:FA:6B:15:74:F9:1F:71:01:ED:CD:37
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 018CC349219F8FC2D6D2C8F7EB7E8F57662D
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/9peuiE8uXAP5-msVdPkfcQHtzTc.roa
Signing time: Mon 01 Jan 2024 04:29:59 +0000
ROA not before: Mon 01 Jan 2024 04:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48775
IP address blocks: 176.120.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:21:9f:8f:c2:d6:d2:c8:f7:eb:7e:8f:57:66:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jan 1 04:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f697ae884f2e5c03f9fa6b1574f91f7101edcd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a8:58:2a:11:0c:8a:8f:7c:70:3f:88:1e:4b:
c1:ec:7d:0d:94:53:31:cb:db:b6:94:21:37:60:c3:
63:32:25:7d:ba:c3:05:fc:6e:b4:7b:04:01:8b:38:
b3:16:04:2b:8a:b7:87:29:59:eb:e3:1d:79:9d:0a:
03:14:18:a7:16:1e:72:d8:5d:20:d1:ac:f4:d3:e4:
b7:bd:f1:8b:5b:f4:43:85:3c:dc:24:be:bd:22:4f:
65:cb:1e:ee:e1:15:a9:fe:a1:da:2c:d5:87:f0:15:
7f:e7:1e:24:d9:d4:cd:98:7b:70:f9:16:67:af:8c:
7b:f6:57:22:ea:d3:26:29:2a:f2:45:d0:98:e2:7b:
80:c6:b0:6b:00:ba:b3:78:88:67:e3:d5:ac:5b:20:
a2:5f:48:51:11:ed:96:ee:5c:aa:9f:f3:f7:bd:eb:
d9:a5:0f:ce:83:a9:3d:0f:6c:9c:13:f7:16:3d:97:
7d:b2:d5:68:d2:ed:3e:c6:46:0c:f3:e3:b0:9d:73:
9c:e9:57:64:34:f6:61:b7:da:71:a5:8f:09:aa:01:
0b:17:21:93:03:73:cd:0e:02:9a:97:ea:c5:65:73:
16:9b:4f:56:41:81:57:1e:62:57:61:c8:d8:fe:73:
8a:0b:91:32:d8:e7:af:fb:ad:37:b1:f4:21:db:02:
a4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:97:AE:88:4F:2E:5C:03:F9:FA:6B:15:74:F9:1F:71:01:ED:CD:37
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/9peuiE8uXAP5-msVdPkfcQHtzTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.96.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b8:8a:02:d4:88:1c:55:bc:ae:41:a2:40:de:b5:58:6b:ba:
4e:da:8c:c9:8e:e2:7d:ab:3f:62:d3:1e:0a:59:37:7a:de:b3:
ad:8a:14:e3:f3:ce:d7:d7:02:17:e5:29:1a:e3:81:89:7f:86:
59:b4:1d:72:56:57:a0:a8:08:60:66:96:3b:35:7d:48:b2:00:
d5:74:e7:32:23:35:10:f0:38:62:2a:13:5a:ac:48:76:e0:0a:
6c:e0:e0:4f:cc:1f:cc:6e:b9:b4:ee:76:4d:6d:ce:10:f8:d6:
3e:1c:a1:40:f2:ed:0f:02:65:75:07:d6:75:64:09:67:a6:46:
a0:3d:da:da:6e:55:b0:d2:87:41:a7:02:15:a6:2f:3b:a9:ce:
ed:9a:38:12:67:70:f0:1d:c9:96:42:b1:a4:fb:3b:c3:9f:46:
64:81:4b:50:d1:31:6d:90:ba:6f:09:81:0e:c9:88:16:5d:3a:
52:50:cc:b2:43:6b:af:b5:b3:11:47:ba:ba:cc:7c:f3:bc:cf:
c5:d0:05:c3:15:a6:42:06:97:b0:c4:01:93:5a:d7:a1:7b:74:
84:16:57:fb:a2:85:5d:a5:21:9e:e0:eb:10:fd:c5:e1:e3:83:
2f:f1:5a:51:f4:84:94:30:d7:0e:a9:77:f4:f5:17:65:39:77:
95:41:c6:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSSGfj8LW0sj3636PV2YtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YmU4MjdhNTgwZGU2MTUzOGRkZWZhMjgyMzk0NjhjNGU5
MDFiNDAwHhcNMjQwMTAxMDQyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjk3YWU4ODRmMmU1YzAzZjlmYTZiMTU3NGY5MWY3MTAxZWRjZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqhYKhEMio98cD+IHkvB7H0NlFMx
y9u2lCE3YMNjMiV9usMF/G60ewQBizizFgQrireHKVnr4x15nQoDFBinFh5y2F0g
0az00+S3vfGLW/RDhTzcJL69Ik9lyx7u4RWp/qHaLNWH8BV/5x4k2dTNmHtw+RZn
r4x79lci6tMmKSryRdCY4nuAxrBrALqzeIhn49WsWyCiX0hREe2W7lyqn/P3vevZ
pQ/Og6k9D2ycE/cWPZd9stVo0u0+xkYM8+OwnXOc6VdkNPZht9pxpY8JqgELFyGT
A3PNDgKal+rFZXMWm09WQYFXHmJXYcjY/nOKC5Ey2Oev+603sfQh2wKkyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPaXrohPLlwD+fprFXT5H3EB7c03MB8GA1UdIwQY
MBaAFBe+gnpYDeYVON3vooI5RoxOkBtAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjc2Q2VsZ041aFU0M2UtaWdqbEdqRTZRRzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80OTBlMDEtY2FmOS00ZDQ0LThmNTct
YTFkOWQwZjg4NjI5LzEvOXBldWlFOHVYQVA1LW1zVmRQa2ZjUUh0elRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80OTBlMDEtY2FmOS00ZDQ0LThmNTctYTFkOWQwZjg4NjI5
LzEvRjc2Q2VsZ041aFU0M2UtaWdqbEdqRTZRRzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHhgMA0G
CSqGSIb3DQEBCwUAA4IBAQBluIoC1IgcVbyuQaJA3rVYa7pO2ozJjuJ9qz9i0x4K
WTd63rOtihTj887X1wIX5Ska44GJf4ZZtB1yVlegqAhgZpY7NX1IsgDVdOcyIzUQ
8DhiKhNarEh24Aps4OBPzB/Mbrm07nZNbc4Q+NY+HKFA8u0PAmV1B9Z1ZAlnpkag
PdrablWw0odBpwIVpi87qc7tmjgSZ3DwHcmWQrGk+zvDn0ZkgUtQ0TFtkLpvCYEO
yYgWXTpSUMyyQ2uvtbMRR7q6zHzzvM/F0AXDFaZCBpewxAGTWtehe3SEFlf7ooVd
pSGe4OsQ/cXh44Mv8VpR9ISUMNcOqXf09RdlOXeVQcbe
-----END CERTIFICATE-----
Generated at Mon Mar 4 09:48:54 2024 by rpki-client on console-ams.rpki-client.org