Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/t7lDog8YtV13otJ2z3C2NZ6xGZM.roa
File: t7lDog8YtV13otJ2z3C2NZ6xGZM.roa (raw, json)
Hash identifier: 699IPNLNFnnF3A+r5MTnHxTilkB+irWI56xX9a5jeRY=
Subject key identifier: B7:B9:43:A2:0F:18:B5:5D:77:A2:D2:76:CF:70:B6:35:9E:B1:19:93
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 01856CC16B4823767DD790DAB1DBEB77DCB4
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/t7lDog8YtV13otJ2z3C2NZ6xGZM.roa
Signing time: Sun 01 Jan 2023 09:54:53 +0000
ROA not before: Sun 01 Jan 2023 09:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50594
IP address blocks: 176.120.109.0/24 maxlen: 24
176.120.110.0/24 maxlen: 24
176.120.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:6b:48:23:76:7d:d7:90:da:b1:db:eb:77:dc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jan 1 09:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7b943a20f18b55d77a2d276cf70b6359eb11993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:5d:0a:7b:9b:25:d5:99:b8:eb:6e:42:0c:
eb:8b:bb:6e:77:e0:e6:16:76:f6:e8:44:98:d5:32:
fa:d8:9b:67:0b:71:2f:4a:ed:ac:e0:73:2f:c8:e2:
53:63:2e:7e:7c:6e:1b:a0:67:df:ef:e8:be:3c:40:
cc:d2:0e:ac:68:06:03:24:fa:1d:e6:09:28:83:52:
83:d2:45:ef:c4:84:cb:71:bd:d4:bc:17:e2:6a:1d:
08:e3:26:63:23:7d:8b:a2:a6:34:85:a8:98:3e:2d:
6d:fb:d7:7d:eb:2f:7e:3a:16:e4:ad:08:3c:f7:dc:
0b:df:34:9a:bd:55:ad:50:73:7c:1e:b9:db:2d:5a:
3e:63:e6:71:3b:70:bb:1d:72:4c:fa:b6:41:21:0f:
97:b1:b7:22:74:ec:46:db:dc:d9:c7:5f:ef:46:64:
46:e9:4a:6e:c6:f2:a2:97:b7:3b:4a:34:bd:6e:77:
2d:d8:9a:ea:99:9d:73:06:64:c0:d7:42:7d:6b:91:
e6:28:1f:90:05:26:78:9f:39:63:8b:b1:22:43:93:
bc:78:08:c0:81:b7:95:76:b1:5d:7f:ec:cc:51:3c:
22:32:0c:f3:32:4e:38:30:2f:ef:03:23:8c:99:b2:
8b:ed:db:55:db:50:29:79:b8:0e:e7:9a:6f:ea:17:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B9:43:A2:0F:18:B5:5D:77:A2:D2:76:CF:70:B6:35:9E:B1:19:93
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/t7lDog8YtV13otJ2z3C2NZ6xGZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.109.0-176.120.111.255
Signature Algorithm: sha256WithRSAEncryption
b0:18:59:2d:e1:1d:b6:db:0a:36:18:ed:8f:30:87:c8:99:ee:
bb:e2:63:9e:c6:52:23:67:45:75:ef:15:59:99:99:e3:11:52:
80:41:33:4f:1e:05:c7:13:3a:9f:e3:1b:dd:7d:68:d9:21:fb:
10:44:eb:c3:af:7c:85:60:19:50:fe:05:58:e9:89:02:f6:33:
65:cc:ba:27:e5:50:8c:52:f1:0e:96:a4:f3:c7:bf:46:18:93:
e3:ac:27:2d:20:6b:c1:f9:82:f5:ce:68:74:d7:30:81:e7:8d:
63:cf:53:f5:71:7a:0e:09:6a:08:ea:a6:df:27:07:0f:92:01:
68:18:39:18:20:66:a2:c2:51:25:ae:2c:5f:c3:42:79:0e:76:
1c:f2:b1:59:c5:ac:24:1b:2e:43:2c:0f:fe:49:c5:04:86:52:
4a:28:02:d8:91:45:23:4c:7b:2d:6c:1b:7e:c2:29:90:dc:7b:
9b:f8:04:a2:a4:4f:92:a0:1b:ac:b3:47:ed:cb:3e:41:81:3c:
43:95:fb:e0:af:c1:9c:18:e4:59:e6:b8:69:e1:77:52:4d:71:
f2:91:a3:35:8f:5f:fb:ae:7b:23:5b:2d:01:8b:69:6a:47:f3:
23:7e:f5:24:df:4b:80:6d:c5:b8:0f:c7:af:85:df:35:08:9e:
44:10:42:a9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVswWtII3Z915Dasdvrd9y0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YmU4MjdhNTgwZGU2MTUzOGRkZWZhMjgyMzk0NjhjNGU5
MDFiNDAwHhcNMjMwMTAxMDk1NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2I5NDNhMjBmMThiNTVkNzdhMmQyNzZjZjcwYjYzNTllYjExOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB1dCnubJdWZuOtuQgzri7tud+Dm
Fnb26ESY1TL62JtnC3EvSu2s4HMvyOJTYy5+fG4boGff7+i+PEDM0g6saAYDJPod
5gkog1KD0kXvxITLcb3UvBfiah0I4yZjI32LoqY0haiYPi1t+9d96y9+OhbkrQg8
99wL3zSavVWtUHN8HrnbLVo+Y+ZxO3C7HXJM+rZBIQ+XsbcidOxG29zZx1/vRmRG
6UpuxvKil7c7SjS9bnct2JrqmZ1zBmTA10J9a5HmKB+QBSZ4nzlji7EiQ5O8eAjA
gbeVdrFdf+zMUTwiMgzzMk44MC/vAyOMmbKL7dtV21ApebgO55pv6hcyfwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLe5Q6IPGLVdd6LSds9wtjWesRmTMB8GA1UdIwQY
MBaAFBe+gnpYDeYVON3vooI5RoxOkBtAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjc2Q2VsZ041aFU0M2UtaWdqbEdqRTZRRzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80OTBlMDEtY2FmOS00ZDQ0LThmNTct
YTFkOWQwZjg4NjI5LzEvdDdsRG9nOFl0VjEzb3RKMnozQzJOWjZ4R1pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80OTBlMDEtY2FmOS00ZDQ0LThmNTctYTFkOWQwZjg4NjI5
LzEvRjc2Q2VsZ041aFU0M2UtaWdqbEdqRTZRRzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACweG0D
BASweGAwDQYJKoZIhvcNAQELBQADggEBALAYWS3hHbbbCjYY7Y8wh8iZ7rviY57G
UiNnRXXvFVmZmeMRUoBBM08eBccTOp/jG919aNkh+xBE68OvfIVgGVD+BVjpiQL2
M2XMuiflUIxS8Q6WpPPHv0YYk+OsJy0ga8H5gvXOaHTXMIHnjWPPU/Vxeg4Jagjq
pt8nBw+SAWgYORggZqLCUSWuLF/DQnkOdhzysVnFrCQbLkMsD/5JxQSGUkooAtiR
RSNMey1sG37CKZDce5v4BKKkT5KgG6yzR+3LPkGBPEOV++CvwZwY5FnmuGnhd1JN
cfKRozWPX/uueyNbLQGLaWpH8yN+9STfS4BtxbgPx6+F3zUInkQQQqk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:31 2024 by rpki-client on console-ams.rpki-client.org