Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/DXLHqs8BbGyKRKqGflYCSEOveU0.roa
File: DXLHqs8BbGyKRKqGflYCSEOveU0.roa (raw, json)
Hash identifier: NkDpecU9nsVE4fcSawDGYiS7bVLGMS79snVqoWRKXbY=
Subject key identifier: 0D:72:C7:AA:CF:01:6C:6C:8A:44:AA:86:7E:56:02:48:43:AF:79:4D
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 018CC34921DFB51742DADFEF489ABE6C2E74
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/DXLHqs8BbGyKRKqGflYCSEOveU0.roa
Signing time: Mon 01 Jan 2024 04:29:59 +0000
ROA not before: Mon 01 Jan 2024 04:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49183
IP address blocks: 176.120.98.0/24 maxlen: 24
176.120.102.0/24 maxlen: 24
176.120.100.0/24 maxlen: 24
176.120.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:21:df:b5:17:42:da:df:ef:48:9a:be:6c:2e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jan 1 04:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d72c7aacf016c6c8a44aa867e56024843af794d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:8e:ef:65:02:23:2d:db:c8:52:7e:11:78:
c9:5c:58:fc:12:c7:c5:21:39:b1:52:77:a7:dc:d7:
c8:15:ec:65:67:13:bb:19:23:e7:45:5d:61:8a:7e:
b3:b9:9e:3c:d2:16:9c:43:a1:bf:9d:de:e2:df:89:
13:03:b5:1c:15:37:c5:90:aa:cc:5d:55:08:9d:9d:
b7:96:80:7f:02:3b:89:ea:23:2b:15:b0:1b:b5:ea:
df:03:f9:6c:39:45:2a:13:7a:14:36:c1:b1:ac:dc:
1e:d3:f4:2e:7d:44:b4:07:b3:13:d3:c8:60:b9:93:
55:e8:4a:37:c6:2c:aa:17:d4:e0:ce:37:57:a6:a8:
3f:b4:4d:e5:15:c8:45:8b:5f:49:f0:83:0b:07:eb:
b7:41:5e:cc:f3:54:5e:01:96:bb:ea:1b:9a:45:66:
f2:d9:3d:22:84:33:11:28:b0:b5:69:0c:02:ca:60:
be:81:34:85:49:87:40:b1:e0:46:cd:56:a1:0d:f3:
e2:72:37:c2:c2:cb:52:67:7f:40:0a:55:07:c3:29:
28:51:b3:3f:00:b0:33:69:f9:02:9f:1b:1e:84:30:
e6:bd:7b:c9:26:84:41:6b:96:aa:cd:aa:04:bf:79:
d9:c0:a9:8c:3a:65:9d:f5:01:35:b6:d9:98:c3:c6:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:72:C7:AA:CF:01:6C:6C:8A:44:AA:86:7E:56:02:48:43:AF:79:4D
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/DXLHqs8BbGyKRKqGflYCSEOveU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.98.0-176.120.100.255
176.120.102.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1c:11:99:b1:e1:75:d6:e8:c8:bd:a4:24:a7:8d:25:ea:bc:
54:7e:b2:3d:b2:a8:30:ee:f2:b3:7f:be:d2:cb:6a:c7:aa:f8:
d8:f9:24:28:7c:90:31:fe:eb:6a:93:ff:f3:0a:0c:43:fe:a7:
73:40:dc:46:91:ea:e3:09:4f:6c:50:32:66:c3:e3:87:dd:40:
75:f1:da:98:3f:45:07:21:0e:0e:65:46:85:8e:63:03:7b:dd:
c3:bb:39:59:fc:8f:d3:f0:70:5f:8c:82:b6:ab:89:89:58:05:
c9:11:d0:31:53:e0:e4:dd:67:bd:20:dd:c7:b5:e1:dc:a2:5a:
87:59:5e:e7:f7:b6:51:54:d8:80:e3:f5:ea:a7:47:28:c7:53:
6b:a7:16:13:98:27:7f:69:f8:bb:f0:ce:e8:11:3b:33:4b:93:
54:61:17:ac:c4:72:3b:ae:4c:be:ab:30:64:5f:aa:07:7a:cc:
f2:aa:f7:f1:32:c3:c2:f0:13:0c:8c:42:6c:d1:bb:d0:df:b8:
93:5b:6e:8a:7d:6d:fd:ff:84:63:70:d4:b5:f2:e5:f1:53:0e:
c6:19:0c:6b:8f:e5:a8:b6:57:00:7c:9f:68:bb:0a:c5:05:4f:
1e:5b:46:38:73:9f:af:58:96:9a:72:70:54:ac:86:56:66:9c:
a2:58:a7:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 4 09:33:10 2024 by rpki-client on console-fra.rpki-client.org