Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/bu9gUaZXOX37ltxJEEjHEWR8IOE.roa
File: bu9gUaZXOX37ltxJEEjHEWR8IOE.roa (raw, json)
Hash identifier: aCslLRz3kGK3b1gKB3J56FMtg8lfhbFjl9vyU9O4CQ8=
Subject key identifier: 6E:EF:60:51:A6:57:39:7D:FB:96:DC:49:10:48:C7:11:64:7C:20:E1
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 036B3C
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/bu9gUaZXOX37ltxJEEjHEWR8IOE.roa
Signing time: Wed 22 Jun 2022 05:59:44 +0000
ROA not before: Wed 22 Jun 2022 05:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49824
IP address blocks: 176.120.97.0/24 maxlen: 24
176.120.105.0/24 maxlen: 24
176.120.103.0/24 maxlen: 24
176.120.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224060 (0x36b3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jun 22 05:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6eef6051a657397dfb96dc491048c711647c20e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:7a:76:bf:27:49:88:ff:b2:da:1c:f4:fa:
f0:c9:06:e0:25:c8:7f:dc:a9:11:d2:78:02:0f:92:
2c:f7:11:8a:f7:ae:cf:02:3f:e1:72:45:b1:37:c5:
1e:ab:ee:f9:19:5f:d1:8a:0a:16:1e:2d:b5:74:e7:
d3:69:aa:bf:27:d3:e5:ba:ce:c0:c8:e5:94:d5:60:
70:2c:ee:5f:e0:c1:c9:cb:fb:fc:34:74:79:d8:02:
08:9f:9b:28:7c:3a:7c:8b:3c:8a:20:a8:7c:ab:a4:
22:b6:c5:8a:74:6d:34:cf:29:52:55:90:1a:f2:c9:
6e:43:e4:52:38:2b:44:08:c7:c3:fb:90:ef:0b:7d:
ec:8e:24:51:ca:bf:c6:73:83:4d:a7:91:1f:b0:49:
fa:b9:f5:88:46:68:61:bc:ad:73:9f:dd:1c:14:c2:
b5:4c:08:7e:b4:ad:b8:b9:ef:74:28:cf:65:cc:9c:
d6:27:3e:32:1e:99:2e:a3:b3:8b:8f:a7:e6:e8:e3:
f1:d0:3c:50:c6:f6:81:1e:53:eb:cb:e6:ef:0e:83:
7a:5d:c9:1d:4a:16:36:7c:0d:f2:96:a1:80:0e:89:
12:01:35:77:f1:c0:bd:36:43:ed:14:03:53:f3:be:
e7:77:a5:22:d8:f0:ed:2f:f6:e4:56:a1:d0:3f:d7:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EF:60:51:A6:57:39:7D:FB:96:DC:49:10:48:C7:11:64:7C:20:E1
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/bu9gUaZXOX37ltxJEEjHEWR8IOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.97.0/24
176.120.103.0/24
176.120.105.0-176.120.106.255
Signature Algorithm: sha256WithRSAEncryption
60:dc:eb:bb:0f:eb:f7:fc:93:29:59:2b:19:d7:22:fd:ed:ef:
ca:82:94:6f:f2:49:8f:5b:df:7c:42:f2:85:5d:96:a2:0b:45:
cb:c2:ce:a6:6c:57:4f:75:90:02:9b:40:c9:c6:1c:40:73:43:
82:57:16:47:0c:54:65:d8:0b:a9:82:da:d2:47:54:c1:4d:8e:
1e:7a:f7:62:b7:39:90:57:5c:75:59:39:a7:77:b7:25:26:48:
06:39:02:91:71:88:7d:58:df:73:1d:a5:37:92:d9:31:79:1a:
ce:c4:95:5a:04:8d:f5:fb:56:d7:24:28:f8:f6:8a:e2:60:3a:
dd:5a:49:bb:c3:fa:a9:5a:03:67:43:b1:79:2a:a2:95:86:6d:
34:78:9a:6f:3a:49:4e:3d:50:f1:8e:68:85:07:1c:ed:c9:e8:
96:ea:f0:59:63:fe:ad:c4:16:d7:06:05:bc:5b:6e:bb:0a:24:
27:55:3d:af:2a:0b:5a:5b:cf:80:4c:0a:c2:6c:83:61:18:1b:
9a:97:54:72:be:70:50:6e:0f:c4:77:c9:80:e2:be:4a:9a:7b:
bf:b9:cc:a1:33:18:29:f1:18:a9:7d:2d:4d:ca:53:cf:3f:cc:
3d:0b:87:b8:26:4b:c7:b7:16:13:c8:27:24:c5:08:95:a2:67:
dc:34:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:37 2024 by rpki-client on console-fra.rpki-client.org