Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/BZ2crKU-og-UPKGseHA83_JdqRQ.roa
File: BZ2crKU-og-UPKGseHA83_JdqRQ.roa (raw, json)
Hash identifier: VAXO20dXPjKXPgZLj6THlQturzD8rBkk3LehaBMog0Q=
Subject key identifier: 05:9D:9C:AC:A5:3E:A2:0F:94:3C:A1:AC:78:70:3C:DF:F2:5D:A9:14
Certificate issuer: /CN=a7b52b24c1da522ed3ffee71362dbc15c9dae6fa
Certificate serial: 01856DD421071AB5D951969E9FB33508EB49
Authority key identifier: A7:B5:2B:24:C1:DA:52:2E:D3:FF:EE:71:36:2D:BC:15:C9:DA:E6:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7UrJMHaUi7T_-5xNi28Fcna5vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/BZ2crKU-og-UPKGseHA83_JdqRQ.roa
Signing time: Sun 01 Jan 2023 14:54:56 +0000
ROA not before: Sun 01 Jan 2023 14:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 176.126.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:21:07:1a:b5:d9:51:96:9e:9f:b3:35:08:eb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b52b24c1da522ed3ffee71362dbc15c9dae6fa
Validity
Not Before: Jan 1 14:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=059d9caca53ea20f943ca1ac78703cdff25da914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:bd:be:3f:ef:b4:57:51:03:d1:48:95:99:
5f:b0:46:3e:04:bf:be:a9:c9:aa:23:6b:8b:5b:fc:
03:24:cd:16:74:af:43:a0:0d:c6:50:47:75:c5:32:
b1:a8:e4:7d:5c:6c:04:75:4e:f7:04:e0:77:f8:6f:
8d:68:01:98:17:4d:e8:40:28:be:df:23:13:af:25:
ac:c5:69:57:d8:ab:75:ef:83:e1:56:8d:a9:e3:87:
33:ec:5e:e8:99:3d:11:34:e9:02:b6:19:de:06:38:
3e:6b:2f:62:38:60:00:e2:81:d1:98:50:d4:eb:1c:
b7:ae:f6:eb:00:38:fc:3b:3c:4b:73:db:3b:7e:3d:
43:f4:82:74:fe:2f:56:11:ac:41:d8:78:ee:01:80:
c3:1e:f9:b5:a6:01:3f:b3:00:17:61:41:67:b3:05:
30:03:35:9d:1a:2c:e2:e8:69:25:20:e8:9a:99:f1:
3d:60:f4:1f:01:f9:ea:9a:81:6e:7d:16:f5:a8:60:
da:0c:66:30:2b:c2:ef:6e:0e:a4:c5:d4:7b:3f:ff:
12:77:96:db:4b:88:b8:47:49:b7:0a:6e:94:fd:5b:
a8:08:21:27:7f:36:f8:63:e8:37:d8:6c:54:43:44:
26:89:ba:5c:fd:65:34:78:c2:15:27:54:1a:95:be:
78:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9D:9C:AC:A5:3E:A2:0F:94:3C:A1:AC:78:70:3C:DF:F2:5D:A9:14
X509v3 Authority Key Identifier:
keyid:A7:B5:2B:24:C1:DA:52:2E:D3:FF:EE:71:36:2D:BC:15:C9:DA:E6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7UrJMHaUi7T_-5xNi28Fcna5vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/BZ2crKU-og-UPKGseHA83_JdqRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/p7UrJMHaUi7T_-5xNi28Fcna5vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.105.0/24
Signature Algorithm: sha256WithRSAEncryption
42:84:e0:04:c9:16:9d:41:27:14:0b:b1:42:ae:78:10:74:7e:
b4:e7:bb:2f:16:b9:40:8e:57:5c:94:bc:3e:ef:d9:89:d7:c9:
54:f0:b7:53:d4:1b:75:d0:17:92:63:71:41:bc:1c:d1:15:94:
b1:e6:a1:28:9b:2c:dc:b3:8d:c1:c0:f4:0a:1b:0a:ac:47:62:
70:74:25:db:e0:19:f9:3e:11:4e:90:04:0a:a1:29:24:4a:73:
0c:ac:8b:bd:b7:d0:46:a1:b7:91:3b:50:d7:09:c5:9a:2c:b8:
39:e5:15:75:d6:c0:2b:e3:6a:56:21:e3:3b:05:13:55:c9:e2:
e9:4b:77:ad:8d:6c:d8:6b:db:91:ad:ff:7a:70:9e:18:8f:9b:
7c:e9:cd:78:0a:29:a0:52:d3:5c:e3:e8:25:d2:71:b5:0e:13:
48:13:d3:b7:26:bd:b9:6f:57:d6:91:88:d1:ca:5b:22:60:08:
a1:dc:26:ae:90:af:96:96:97:1b:31:2e:38:95:55:ef:f0:22:
ec:44:6c:f7:a1:3b:a7:ee:5d:eb:8d:24:4d:5d:bb:4d:8c:1c:
6c:f2:7e:ff:72:bd:98:22:d8:f4:38:40:a2:7d:ef:c6:1a:c6:
b5:21:9f:73:45:7c:69:c4:c3:0e:e2:fa:2a:b8:18:b8:13:9b:
41:b6:49:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:49 2024 by rpki-client on console-ams.rpki-client.org