Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/27d0cc-b209-41e5-be05-2b8910a95514/1/yevzHrnGVKRiRD2vmyIK3kVlhGw.roa
File: yevzHrnGVKRiRD2vmyIK3kVlhGw.roa (raw, json)
Hash identifier: a3tPh2icVNxtYcB28tDWP7UZEruXFp89wgQ3NSJEb6A=
Subject key identifier: C9:EB:F3:1E:B9:C6:54:A4:62:44:3D:AF:9B:22:0A:DE:45:65:84:6C
Certificate issuer: /CN=a8d537c491469848df09fd71aa4733f9fc8ca097
Certificate serial: 018964753D5C887BB804913940E0D1F27D0E
Authority key identifier: A8:D5:37:C4:91:46:98:48:DF:09:FD:71:AA:47:33:F9:FC:8C:A0:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU3xJFGmEjfCf1xqkcz-fyMoJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/27d0cc-b209-41e5-be05-2b8910a95514/1/yevzHrnGVKRiRD2vmyIK3kVlhGw.roa
Signing time: Mon 17 Jul 2023 15:25:52 +0000
ROA not before: Mon 17 Jul 2023 15:25:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 176.126.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:75:3d:5c:88:7b:b8:04:91:39:40:e0:d1:f2:7d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d537c491469848df09fd71aa4733f9fc8ca097
Validity
Not Before: Jul 17 15:25:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9ebf31eb9c654a462443daf9b220ade4565846c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:03:f6:04:11:f8:f9:e4:df:4a:51:18:69:
45:a9:5a:5b:9b:4c:cb:23:db:74:a1:76:32:f0:59:
b3:2e:0b:fc:17:45:9e:40:c4:03:42:c5:8f:b3:36:
75:3b:89:38:7a:99:90:39:88:b5:7c:3c:3e:bf:b1:
20:75:4a:23:36:f9:89:b8:57:2f:db:35:0b:33:fb:
bc:cb:fd:41:66:46:1d:b5:3f:70:ef:93:b2:3c:b1:
25:79:2e:f6:34:7b:b2:89:15:59:e9:3e:9c:9d:01:
2f:fc:05:02:1f:69:8c:05:f8:a7:ea:5d:5c:b9:74:
41:0b:32:23:c1:74:f1:bf:db:0b:43:76:06:9d:44:
79:12:ab:bb:47:38:cd:85:4d:d7:33:d5:a9:89:61:
14:63:48:e5:c5:52:54:d4:6f:a1:85:f5:1c:35:32:
ea:eb:94:42:cc:f2:3f:e8:53:26:2d:25:6f:ff:3e:
a8:d2:66:43:ec:41:e8:12:7a:a2:33:3f:c5:aa:95:
1b:88:fe:b8:40:de:60:0c:ed:a8:4e:69:4f:ca:bf:
c9:dd:b1:ae:3e:49:a4:5e:a3:8c:b9:94:fd:2a:e0:
ab:6f:47:69:ca:bd:21:e0:da:cf:60:f0:0d:b1:2d:
24:a1:aa:87:eb:da:b9:7e:f6:71:50:64:a3:74:68:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:F3:1E:B9:C6:54:A4:62:44:3D:AF:9B:22:0A:DE:45:65:84:6C
X509v3 Authority Key Identifier:
keyid:A8:D5:37:C4:91:46:98:48:DF:09:FD:71:AA:47:33:F9:FC:8C:A0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU3xJFGmEjfCf1xqkcz-fyMoJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/27d0cc-b209-41e5-be05-2b8910a95514/1/yevzHrnGVKRiRD2vmyIK3kVlhGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/27d0cc-b209-41e5-be05-2b8910a95514/1/qNU3xJFGmEjfCf1xqkcz-fyMoJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.115.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:70:6a:aa:4e:0e:35:55:20:c7:2a:63:fa:43:7d:92:c3:2f:
f7:39:3e:39:b5:95:62:16:2c:13:8c:19:69:43:51:36:dd:38:
e0:18:54:7f:62:37:f2:90:0c:ff:9c:31:c7:4a:e8:5e:25:0e:
41:18:03:1f:84:ba:0f:02:33:92:73:06:bf:a5:41:20:60:ff:
11:47:fb:99:3d:53:b7:d7:a0:c6:bb:34:4b:c7:c0:da:64:51:
1c:e4:f1:3e:06:3a:5c:ef:1b:9a:f3:3e:54:bf:8b:ec:2c:67:
b5:dd:9d:56:08:a2:cd:80:57:66:39:55:53:d1:16:da:26:53:
b9:a2:21:ea:1d:95:fa:fe:58:3e:05:57:4a:3c:c8:95:df:ee:
32:4b:23:bc:b6:d9:68:85:a1:f8:1e:a5:51:fc:9a:c5:e7:3c:
60:30:80:98:f9:10:b3:05:36:e8:2a:eb:24:84:d5:97:50:ca:
13:a0:18:b2:51:a5:e8:22:32:ac:1d:b9:3c:60:03:36:eb:97:
36:1e:67:96:f8:58:60:d2:3c:e6:c4:b5:86:74:42:b3:b0:56:
d9:9d:73:8e:4f:22:69:1d:78:47:03:77:90:1c:4b:24:4e:34:
1f:80:5b:5d:33:0e:f3:45:ad:79:26:d9:89:72:ea:64:d7:fe:
3c:37:5f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:16 2024 by rpki-client on console-ams.rpki-client.org