Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/nyreZjec4kQETkMCioazfKLv4Pg.roa
File: nyreZjec4kQETkMCioazfKLv4Pg.roa (raw, json)
Hash identifier: q3AX/IEMOVB1pLPRp3IyNxoGyQqITVvUOp64Zb5/jMw=
Subject key identifier: 9F:2A:DE:66:37:9C:E2:44:04:4E:43:02:8A:86:B3:7C:A2:EF:E0:F8
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 01856CC16BB235067DC95325268E49979E86
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/nyreZjec4kQETkMCioazfKLv4Pg.roa
Signing time: Sun 01 Jan 2023 09:54:53 +0000
ROA not before: Sun 01 Jan 2023 09:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58332
IP address blocks: 176.120.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:6b:b2:35:06:7d:c9:53:25:26:8e:49:97:9e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jan 1 09:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f2ade66379ce244044e43028a86b37ca2efe0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:36:85:f5:9e:70:f3:21:dd:1e:86:ed:27:
4b:c5:f2:28:ec:70:7b:3d:0f:5f:52:83:e9:8d:b5:
fb:b9:8c:6d:3b:8b:4d:a3:bf:af:fc:10:4e:94:e3:
41:45:69:ad:68:5b:bf:73:23:24:e7:55:86:6c:3f:
cb:85:d8:42:b0:aa:89:1d:ea:68:6f:89:89:7e:c9:
14:02:39:25:04:66:de:63:f6:e3:84:2f:bd:f6:40:
4a:b0:6b:c6:b5:d1:47:aa:96:71:87:dc:97:04:db:
17:e8:df:52:d9:2f:23:86:84:31:db:79:34:94:48:
da:5e:d1:03:9d:6d:1a:3c:f3:32:df:4e:17:ab:c8:
b1:55:07:6c:37:31:1f:bd:9a:0f:05:8f:d1:be:9a:
5c:47:38:2c:83:c4:58:60:20:78:47:85:72:3a:e6:
d1:fc:f2:6d:e3:c5:b8:0c:a6:55:03:78:19:78:bd:
47:d9:bf:49:e0:29:52:22:4f:83:8a:e6:a7:84:7a:
18:ad:38:2d:a5:dd:b2:eb:13:76:5d:7d:fb:95:6b:
4d:82:66:64:e9:78:a5:bb:aa:81:49:0f:c7:db:c5:
d4:7a:97:17:28:22:a0:85:00:42:af:97:eb:ae:87:
0a:96:84:be:15:68:d2:a6:ae:08:b8:71:28:3a:b0:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2A:DE:66:37:9C:E2:44:04:4E:43:02:8A:86:B3:7C:A2:EF:E0:F8
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/nyreZjec4kQETkMCioazfKLv4Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.104.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e5:84:39:f2:b3:9e:2f:6a:a2:ae:c5:1e:47:73:bd:72:69:
47:8e:f4:85:86:9b:d6:60:8b:6e:06:72:60:68:d2:c5:f4:97:
b2:e7:55:eb:37:13:d8:67:33:99:84:6c:52:11:a6:78:ed:21:
19:39:60:d9:8a:1b:28:c7:ec:88:4c:b9:04:c2:cc:de:1f:76:
96:bc:ec:0c:b1:94:f3:af:90:7f:76:ea:70:12:e5:81:1b:bd:
70:cb:42:ae:b2:d3:a2:62:01:6d:b3:4e:d9:b8:77:5f:0d:e5:
08:ff:94:40:29:6f:73:e9:86:43:7a:16:da:94:16:8e:ef:1a:
a5:02:06:70:75:f3:0e:5e:d7:9c:94:58:b1:e4:1f:ba:4b:71:
69:5b:98:ba:84:ab:08:30:c0:97:03:27:42:71:dd:f2:5e:2c:
fc:7c:d0:0f:e1:a5:a7:4d:0f:8b:e7:8d:27:b0:ad:57:1b:7f:
bc:71:e7:9c:06:33:5c:66:2e:e4:2d:c6:b1:82:9b:b9:e9:16:
a9:b1:1b:c5:c1:8d:b9:58:2a:90:ea:f0:b4:c6:ac:d2:73:5c:
13:5b:18:a2:fe:fc:29:0b:51:d9:6a:f9:b5:ef:79:1d:8b:82:
57:39:75:df:ff:ca:0d:02:32:b5:9b:ee:bb:5b:50:7e:83:96:
12:06:33:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:37 2024 by rpki-client on console-fra.rpki-client.org