Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/KI8gkl3Z3eJzJW_FhW7WIadxDsU.roa
File: KI8gkl3Z3eJzJW_FhW7WIadxDsU.roa (raw, json)
Hash identifier: lTPXebdIFAiiTt5GZIIauh8oR+KQ0ZQnMBVXPQIpOPA=
Subject key identifier: 28:8F:20:92:5D:D9:DD:E2:73:25:6F:C5:85:6E:D6:21:A7:71:0E:C5
Certificate issuer: /CN=f650519a99c5992ffb67ad345d48892aa1bfb9d7
Certificate serial: 0183410D5766127472DB49C14CCC03749EFB
Authority key identifier: F6:50:51:9A:99:C5:99:2F:FB:67:AD:34:5D:48:89:2A:A1:BF:B9:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lBRmpnFmS_7Z600XUiJKqG_udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/KI8gkl3Z3eJzJW_FhW7WIadxDsU.roa
Signing time: Thu 15 Sep 2022 12:08:56 +0000
ROA not before: Thu 15 Sep 2022 12:08:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16246
IP address blocks: 176.98.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:41:0d:57:66:12:74:72:db:49:c1:4c:cc:03:74:9e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f650519a99c5992ffb67ad345d48892aa1bfb9d7
Validity
Not Before: Sep 15 12:08:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=288f20925dd9dde273256fc5856ed621a7710ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:c3:0b:66:8f:4f:1e:fa:f6:33:34:02:96:
42:cc:98:ab:0e:20:8f:cc:e8:e7:32:28:91:8e:94:
95:a0:21:ad:19:db:9e:82:46:7d:88:2a:33:5d:67:
ee:9d:3b:0e:0f:ae:22:be:a2:84:3f:19:4c:c7:1b:
31:ae:92:1d:5d:41:4f:97:37:58:77:02:61:ef:19:
89:6f:6d:46:3f:83:d5:29:a4:86:ce:94:66:20:92:
9c:ba:5b:f8:8b:25:22:d5:2f:97:b9:db:92:2d:07:
a6:71:d0:ea:13:10:26:b7:41:70:f7:23:99:3e:af:
10:3a:33:ca:be:ef:49:fe:fa:59:ed:de:e3:d9:12:
9d:ef:f6:7c:0b:9d:16:d6:bc:30:d6:1a:02:f9:82:
0a:15:cc:0c:e7:cb:2f:e1:97:45:2a:cf:8b:9e:f7:
3c:01:60:b2:cd:24:10:d8:18:69:66:f5:0f:a1:4c:
17:85:88:fd:41:d9:7b:35:34:a2:c3:3a:bc:aa:01:
65:25:55:47:68:80:eb:46:20:5e:cb:b6:55:39:12:
7a:bc:18:ca:aa:5e:c2:e3:92:0a:04:a5:9f:a7:0f:
3d:34:fa:83:9f:2b:8b:5c:6d:6e:b1:06:ad:1c:19:
10:1a:c7:d9:3d:2c:a5:be:cf:11:87:74:b7:f7:2a:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8F:20:92:5D:D9:DD:E2:73:25:6F:C5:85:6E:D6:21:A7:71:0E:C5
X509v3 Authority Key Identifier:
keyid:F6:50:51:9A:99:C5:99:2F:FB:67:AD:34:5D:48:89:2A:A1:BF:B9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lBRmpnFmS_7Z600XUiJKqG_udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/KI8gkl3Z3eJzJW_FhW7WIadxDsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/9lBRmpnFmS_7Z600XUiJKqG_udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.96.0/20
Signature Algorithm: sha256WithRSAEncryption
54:99:c9:55:be:50:ba:67:9c:6f:27:88:a2:5e:fc:86:3a:1f:
93:8e:ed:64:e0:fb:85:13:79:cd:b0:61:9c:16:de:ae:99:15:
47:68:fd:e0:dd:44:06:b3:43:58:55:93:ec:a5:ce:12:44:81:
7d:a9:46:14:98:c1:bf:c7:4a:0d:ae:8f:a2:28:77:3d:e5:d6:
e5:78:68:80:af:08:46:8f:2d:3c:dd:47:85:4e:de:28:68:98:
26:67:03:d0:71:56:8b:de:59:35:47:92:14:59:30:bd:dd:11:
ab:fc:d5:0b:50:0e:1e:50:47:a4:0d:11:47:7f:f0:f6:7c:6a:
80:f9:a9:7b:eb:cf:56:da:3e:f3:60:ea:c3:18:44:fb:e6:78:
fc:1a:3b:79:c3:0f:56:b4:61:15:22:a1:16:ce:9b:2d:1a:84:
09:b9:61:91:16:7d:83:48:db:45:ee:8a:5a:8f:a7:bf:3d:57:
8c:83:71:0e:cf:2b:b7:4d:4e:96:cf:8a:08:42:ed:7c:6c:ce:
d2:99:c2:20:bd:d0:c4:34:4b:5e:22:b5:f6:e7:6f:17:f2:5f:
bf:df:e3:fc:66:29:8f:ff:22:a8:c1:0d:fc:e1:f8:e0:43:d6:
0b:6d:be:f8:4d:ca:60:ff:d2:df:cf:5d:6c:26:7f:ff:26:ae:
54:6d:28:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:56 2024 by rpki-client on console-fra.rpki-client.org