Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/KEbFQ5FhzxRy1fY2EAb-NL5oY1o.roa
File: KEbFQ5FhzxRy1fY2EAb-NL5oY1o.roa (raw, json)
Hash identifier: oRHOFqxc43KdAry+GbsfTJgUJc0XMd1hO93fKFaScvU=
Subject key identifier: 28:46:C5:43:91:61:CF:14:72:D5:F6:36:10:06:FE:34:BE:68:63:5A
Certificate issuer: /CN=8a9c7c4126ff4180db9d65cdd3ac2c6726ac91a7
Certificate serial: 0183D14929FDF540A5C76C3DE478496957B4
Authority key identifier: 8A:9C:7C:41:26:FF:41:80:DB:9D:65:CD:D3:AC:2C:67:26:AC:91:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ipx8QSb_QYDbnWXN06wsZyaskac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/KEbFQ5FhzxRy1fY2EAb-NL5oY1o.roa
Signing time: Thu 13 Oct 2022 12:19:36 +0000
ROA not before: Thu 13 Oct 2022 12:19:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56769
IP address blocks: 178.22.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:49:29:fd:f5:40:a5:c7:6c:3d:e4:78:49:69:57:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9c7c4126ff4180db9d65cdd3ac2c6726ac91a7
Validity
Not Before: Oct 13 12:19:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2846c5439161cf1472d5f6361006fe34be68635a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:a7:84:5e:59:d6:cb:a8:45:6e:0d:ab:69:
c9:e3:25:17:57:a1:e0:19:a7:7f:ef:ce:0b:b7:b7:
3f:17:fa:b4:bf:bd:e8:bc:05:f0:f6:67:88:8c:0d:
4b:4b:0c:0c:b2:78:df:2f:da:95:f9:72:a8:65:90:
0b:c5:83:43:22:18:f6:10:06:d2:22:91:c7:27:fe:
8b:5d:6d:55:ce:95:6a:5f:23:cc:50:13:1b:cb:83:
e7:22:d1:f8:1e:49:29:35:d3:72:ff:bf:aa:05:47:
31:77:41:ca:ab:75:b6:85:d7:d6:1a:75:e9:e8:e8:
b7:35:f9:f6:13:79:f7:dd:13:07:a2:4f:d6:14:c9:
db:25:77:d3:f6:14:73:ae:dc:bc:15:49:d8:26:75:
41:b1:9e:07:07:8c:c8:c9:55:99:6c:4d:17:c2:ac:
0e:67:5b:93:4c:f8:60:21:b8:e7:43:a4:d3:27:ab:
b3:d0:81:0c:57:43:9c:f1:8b:71:74:f2:69:3f:8c:
c5:47:53:be:4a:48:39:56:d0:e7:d8:bb:1e:b3:3c:
37:a0:25:30:ec:ac:28:e8:a2:be:87:2f:d8:66:21:
3e:d9:f0:89:c8:b8:7f:34:39:4c:34:3c:1b:9d:64:
be:3c:13:97:8d:5b:d5:d4:92:fd:c6:82:57:14:d8:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:46:C5:43:91:61:CF:14:72:D5:F6:36:10:06:FE:34:BE:68:63:5A
X509v3 Authority Key Identifier:
keyid:8A:9C:7C:41:26:FF:41:80:DB:9D:65:CD:D3:AC:2C:67:26:AC:91:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ipx8QSb_QYDbnWXN06wsZyaskac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/KEbFQ5FhzxRy1fY2EAb-NL5oY1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/ipx8QSb_QYDbnWXN06wsZyaskac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b1:4d:3b:01:bb:95:f7:0d:d9:e8:6b:22:49:e8:2c:17:44:
e1:c1:77:0e:fe:b7:2b:31:b1:74:7d:80:a4:0d:0f:0a:d3:1c:
6e:55:a5:0f:f9:70:24:bf:2a:33:1d:b3:d1:e3:b5:db:6a:32:
c2:71:c6:2e:90:c4:af:18:ba:fd:ab:a7:73:9f:14:fb:ec:f2:
dd:ca:43:5f:00:39:b9:19:a7:3e:15:36:92:2c:ef:cb:17:3b:
6e:fc:a5:35:d8:f0:c1:c7:1a:86:3b:08:63:d9:3d:6a:26:64:
b9:4d:ef:03:d0:50:7d:c9:5c:7c:fa:9c:96:0c:18:09:66:4d:
7d:dc:f0:bf:7f:94:f0:8e:89:65:d0:80:05:be:0d:64:88:3c:
45:51:79:65:c4:8b:61:f2:3e:3c:de:f9:48:2a:50:54:e1:79:
d7:65:87:66:af:8f:55:33:5c:90:17:af:90:bd:40:8b:ef:d8:
25:03:a3:2d:98:6d:1b:12:fb:e2:b7:e7:07:af:05:ff:da:68:
84:ed:c9:ab:20:14:e4:98:fa:45:37:53:1b:8e:39:38:f3:c5:
c5:a9:f4:bc:e5:a2:40:6d:1e:30:81:24:61:f7:a3:f5:36:14:
be:28:73:a0:5e:cc:07:d9:e6:3c:3d:95:38:65:1a:75:8b:36:
3e:c9:b2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:21 2024 by rpki-client on console-ams.rpki-client.org