Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/gxFVhrx4nBeezrD_0CZcQDnmBU4.roa
File: gxFVhrx4nBeezrD_0CZcQDnmBU4.roa (raw, json)
Hash identifier: HTOBs/HSMcv7mB/KLG4ZxM3B3Sy4nDZSVPr1yspTNgk=
Subject key identifier: 83:11:55:86:BC:78:9C:17:9E:CE:B0:FF:D0:26:5C:40:39:E6:05:4E
Certificate issuer: /CN=9ff736a181e954a7701aa328056f2c48c366aee7
Certificate serial: 01882086B1F9B22E577339767F54B187E23E
Authority key identifier: 9F:F7:36:A1:81:E9:54:A7:70:1A:A3:28:05:6F:2C:48:C3:66:AE:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_c2oYHpVKdwGqMoBW8sSMNmruc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/gxFVhrx4nBeezrD_0CZcQDnmBU4.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 176.126.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b1:f9:b2:2e:57:73:39:76:7f:54:b1:87:e2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff736a181e954a7701aa328056f2c48c366aee7
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83115586bc789c179eceb0ffd0265c4039e6054e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:27:7c:b2:f4:c4:75:3e:91:fb:f6:37:e1:
b7:17:c0:a0:b8:84:37:7f:14:02:e7:12:43:5d:bb:
61:97:c1:91:32:a5:d3:c6:04:5f:58:60:ac:df:59:
a8:80:84:61:92:15:8d:3c:f3:d8:8d:c0:49:72:10:
ab:2b:01:fd:4a:fc:c6:b4:0f:40:44:88:3d:c8:6b:
e2:75:4f:5a:18:1c:f0:84:ae:4d:f2:f7:f9:bb:76:
67:45:d3:6a:18:57:6d:49:fb:3d:d4:dd:8f:fa:3f:
a0:21:37:bd:94:c7:88:b1:23:04:c0:34:f8:46:1c:
1d:9e:2e:91:8e:43:76:92:a0:ff:1f:fe:e2:97:48:
7d:20:51:a7:6c:7d:93:d7:68:14:45:5b:e0:3b:e9:
66:0a:44:d6:d4:ec:68:00:ca:56:99:97:71:26:8c:
e5:ec:87:73:97:68:9c:93:4c:26:e7:66:49:98:55:
b7:51:20:21:51:69:27:9c:37:41:0a:34:24:61:3a:
46:81:44:42:07:e1:92:48:b7:da:4b:6c:6e:f6:dd:
16:1f:0f:ae:d9:89:fc:5e:00:c6:6a:1c:3a:70:a4:
73:01:70:9c:8e:2e:c9:ed:70:d5:31:7f:8b:3a:f3:
ac:15:7a:03:67:6e:b4:dd:a9:b9:fc:1b:17:27:bc:
04:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:11:55:86:BC:78:9C:17:9E:CE:B0:FF:D0:26:5C:40:39:E6:05:4E
X509v3 Authority Key Identifier:
keyid:9F:F7:36:A1:81:E9:54:A7:70:1A:A3:28:05:6F:2C:48:C3:66:AE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_c2oYHpVKdwGqMoBW8sSMNmruc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/gxFVhrx4nBeezrD_0CZcQDnmBU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/n_c2oYHpVKdwGqMoBW8sSMNmruc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d1:f8:83:f4:74:7a:52:22:af:9d:66:1d:a2:d7:1e:fe:59:
de:e5:75:80:56:87:4c:1f:80:00:c5:38:ea:2a:ca:9e:0f:ba:
90:87:ce:7e:bb:a7:e2:a9:a2:b0:96:17:8d:79:16:11:b7:e5:
27:82:b5:2f:12:db:23:7e:72:fd:0b:60:d9:b2:8f:82:60:e1:
57:13:36:e9:e7:01:3f:18:ee:27:d6:c1:54:69:ba:1e:19:6a:
14:2f:77:ee:1e:e6:a8:f8:7d:86:98:d4:88:fc:82:30:34:3e:
cd:29:4d:fe:f8:1a:be:99:e8:8d:17:26:1e:e3:70:42:c0:1f:
15:09:fe:bc:a9:14:13:7f:4e:4d:3a:bd:1c:b2:0a:7b:93:5e:
bf:ca:4a:58:8c:ce:dd:3c:5e:78:0f:9e:31:41:2a:11:d1:d1:
94:87:e4:67:b1:2d:35:a9:cb:f3:02:7f:36:ce:4e:d4:a1:de:
d9:8d:96:67:f4:c4:19:0e:8f:9f:9c:45:e8:2f:d7:45:f8:c9:
cf:24:d8:c4:c2:47:78:1e:08:65:e1:67:f9:b9:1a:2b:61:6f:
8d:a6:a0:ff:b2:ff:af:26:8a:d7:e8:e0:6c:c2:06:10:8a:61:
51:fe:6a:ff:8e:cd:d7:42:5e:0e:e6:f8:8e:98:ba:78:2a:ab:
a8:8a:20:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 13:39:05 2023 by rpki-client on console-ams.rpki-client.org