Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/CsJYlA07dp7b3bxBgQcl5uMvSkM.roa
File: CsJYlA07dp7b3bxBgQcl5uMvSkM.roa (raw, json)
Hash identifier: PnRO2y2WHPkatVqeLnHISNJZiGJp891sFbnBRM+UqwI=
Subject key identifier: 0A:C2:58:94:0D:3B:76:9E:DB:DD:BC:41:81:07:25:E6:E3:2F:4A:43
Certificate issuer: /CN=a7b52b24c1da522ed3ffee71362dbc15c9dae6fa
Certificate serial: 981FE4
Authority key identifier: A7:B5:2B:24:C1:DA:52:2E:D3:FF:EE:71:36:2D:BC:15:C9:DA:E6:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7UrJMHaUi7T_-5xNi28Fcna5vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/CsJYlA07dp7b3bxBgQcl5uMvSkM.roa
Signing time: Sat 01 Jan 2022 02:55:11 +0000
ROA not before: Sat 01 Jan 2022 02:55:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 176.126.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9969636 (0x981fe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b52b24c1da522ed3ffee71362dbc15c9dae6fa
Validity
Not Before: Jan 1 02:55:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ac258940d3b769edbddbc41810725e6e32f4a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:37:6a:68:97:dc:b9:6b:f1:41:d9:87:3e:
dd:e9:3b:89:98:80:51:c7:37:e6:fb:59:aa:0c:5b:
d1:61:ae:5a:6e:02:61:da:2f:a0:bf:09:e9:34:00:
62:7b:99:81:a0:82:9a:5b:b9:14:aa:2a:88:46:64:
99:c2:d2:65:e1:40:63:c5:17:48:17:fb:72:15:fc:
2c:ea:31:3e:52:03:86:3f:90:63:b4:b9:36:50:26:
76:2e:e7:07:ae:3b:69:3d:e3:e6:44:d4:4f:64:d6:
b8:a3:21:b8:a0:db:c9:eb:ea:18:48:e4:eb:cb:a2:
e0:ba:6c:47:4c:28:1b:87:d1:ba:5d:69:8d:de:66:
86:51:29:7b:9a:a0:ec:92:07:4f:ac:68:e1:64:d8:
20:21:08:29:5f:60:13:63:9d:d8:c1:b8:05:0b:93:
41:1c:0c:0f:85:54:12:27:92:c3:4a:c4:8a:49:3f:
da:bb:fa:14:7f:80:ce:6c:fa:f8:d0:03:00:28:2b:
32:ba:22:b4:95:fd:8c:00:66:d9:13:d5:e9:f3:4a:
78:07:17:36:19:94:cc:16:0e:84:6f:f8:36:f7:1e:
53:39:76:a6:9b:66:1e:2a:ff:f1:61:91:ff:52:29:
50:08:cf:a1:88:47:fd:cf:68:07:43:91:ef:25:7c:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C2:58:94:0D:3B:76:9E:DB:DD:BC:41:81:07:25:E6:E3:2F:4A:43
X509v3 Authority Key Identifier:
keyid:A7:B5:2B:24:C1:DA:52:2E:D3:FF:EE:71:36:2D:BC:15:C9:DA:E6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7UrJMHaUi7T_-5xNi28Fcna5vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/CsJYlA07dp7b3bxBgQcl5uMvSkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/p7UrJMHaUi7T_-5xNi28Fcna5vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.105.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e2:4f:20:ff:9b:18:0f:c2:9b:0f:14:fc:b8:cc:17:a1:80:
de:b9:eb:7b:f3:29:fb:53:4f:8a:45:c9:49:86:c1:1d:da:64:
1f:11:22:03:63:9c:56:5e:1d:65:01:1e:ac:91:c2:bb:61:c0:
5f:f8:89:11:d0:a6:05:85:e9:71:7b:07:2c:e4:ef:64:c3:89:
b0:2c:92:2d:18:12:45:01:5a:10:57:9d:00:c1:8e:fa:00:fd:
2b:57:e8:ec:64:aa:8d:6b:a0:2b:0a:4d:4c:36:59:52:d5:51:
1a:74:58:87:83:e8:7e:ad:f9:06:a3:84:f2:6e:ad:e0:cd:76:
e1:e5:96:7f:58:aa:10:7c:63:11:5f:f7:71:b3:18:29:f9:03:
6c:8d:3d:53:d1:53:50:12:61:5c:55:8e:17:22:07:22:25:d9:
be:25:2e:c9:d2:0c:c8:bd:06:fe:9f:bd:8e:14:2e:6f:69:81:
5c:87:76:12:ec:7d:57:ed:aa:50:66:70:6d:91:5a:08:5c:31:
86:4a:08:50:2c:dd:84:a6:49:dc:23:7b:71:69:2c:0a:76:30:
ed:f6:79:89:86:1d:a4:03:28:04:88:65:f6:26:61:8f:a9:88:
9a:be:8f:89:7c:26:41:87:76:9c:7f:4f:70:b8:e2:15:4a:23:
b1:d5:87:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:49 2024 by rpki-client on console-ams.rpki-client.org