Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/9ozu83W1sHfEqqmxck29iLoJ67w.roa
File: 9ozu83W1sHfEqqmxck29iLoJ67w.roa (raw, json)
Hash identifier: j7A9d90Bi+MZxV/d/MKaTsm0bFhdgKN1XDaiV/3u7mo=
Subject key identifier: F6:8C:EE:F3:75:B5:B0:77:C4:AA:A9:B1:72:4D:BD:88:BA:09:EB:BC
Certificate issuer: /CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Certificate serial: 0181D7F578E47176AD17044CC52B84B26E61
Authority key identifier: 71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/9ozu83W1sHfEqqmxck29iLoJ67w.roa
Signing time: Thu 07 Jul 2022 09:19:57 +0000
ROA not before: Thu 07 Jul 2022 09:19:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 86.106.22.0/24 maxlen: 24
176.126.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:f5:78:e4:71:76:ad:17:04:4c:c5:2b:84:b2:6e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Validity
Not Before: Jul 7 09:19:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f68ceef375b5b077c4aaa9b1724dbd88ba09ebbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ea:18:d7:8b:6e:39:19:d1:82:2f:5a:72:b9:
89:3d:30:d0:8e:51:0d:67:a6:ef:6f:69:84:47:d9:
7e:87:b0:32:7f:aa:af:5b:4b:66:f2:b2:81:98:04:
6c:96:d8:06:74:65:5b:61:b9:e9:da:16:d9:04:a2:
e4:24:01:60:1e:4d:d4:85:ad:16:fc:72:7f:c6:41:
5f:1f:8e:12:2d:a9:d7:a7:75:4b:29:bb:49:b9:44:
a3:b5:ef:09:c3:e1:fa:46:55:b0:ac:1c:43:56:14:
19:a5:68:86:f7:19:d9:e2:3b:84:5f:36:a0:9f:25:
b3:dc:f4:23:10:67:d6:f4:a7:7b:7e:57:d2:5c:5c:
14:9c:8f:2d:0a:9a:e7:f0:4a:6a:41:4b:30:a3:28:
5c:5e:4f:e6:93:de:c4:1b:46:e3:c0:fe:31:24:bb:
97:8c:55:48:bc:43:71:8e:be:04:90:5b:a6:00:b8:
df:92:13:60:c2:2a:25:90:17:9e:f2:4a:41:2b:b9:
9c:c7:9a:1f:a4:6d:d7:9e:b3:ad:67:52:19:86:56:
24:ef:a1:cb:0d:30:8a:15:d2:26:53:32:ea:d1:36:
a6:5e:0b:41:e6:ba:c9:df:b1:4c:1e:b2:54:74:99:
81:96:3b:c5:82:5f:1d:a8:ff:63:fd:a0:6f:5c:af:
6c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8C:EE:F3:75:B5:B0:77:C4:AA:A9:B1:72:4D:BD:88:BA:09:EB:BC
X509v3 Authority Key Identifier:
keyid:71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/9ozu83W1sHfEqqmxck29iLoJ67w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/cVuQCrn_8TiKT3RqiexBhZ70d54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.22.0/24
176.126.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7f:b2:d0:4f:dc:a7:ef:07:65:4c:19:10:7e:7f:64:7f:8c:
0d:d4:5c:1d:00:b6:b3:e0:4e:42:09:1e:cf:1b:f0:d0:c4:09:
37:cb:79:58:fd:11:64:8a:5f:36:90:f1:18:ef:48:db:93:0b:
7a:19:51:11:59:a8:18:70:58:b8:29:d9:84:1e:27:07:2c:24:
72:a1:4e:96:d8:bb:b8:55:f2:5b:8a:74:a5:89:72:a9:62:e0:
18:46:81:2c:ba:ae:1e:d3:fa:ab:2f:b3:c2:7a:ab:a8:d8:f0:
4d:ac:ff:b9:33:27:f0:06:1d:c7:70:2e:37:a5:4d:27:c5:5c:
73:58:bc:42:5b:61:35:1e:34:70:1f:c7:70:e9:05:06:71:0e:
4d:9c:2b:1b:fe:8e:82:af:4d:7d:e3:3e:dc:5b:e0:22:f2:de:
ed:fc:b4:e5:b6:92:b1:4a:07:99:95:59:8e:90:10:75:9c:65:
bf:7d:49:fc:a3:2c:ed:3f:39:42:29:0d:1e:43:4a:58:17:2a:
11:c4:fa:58:f1:14:4b:57:06:f2:c2:b7:06:c3:8d:6c:8a:bc:
27:eb:83:93:22:99:18:29:f4:11:c0:3d:0a:c0:28:c9:f1:ab:
e1:f6:92:e4:1e:4e:ef:f7:03:a6:1b:69:12:0d:d7:90:8f:f3:
1b:d1:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-fra.rpki-client.org