Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8f95cd-a797-4780-855c-7e42c15a8a1d/1/EE9r2ZsiSM7N6MZU4mj1QcOOGGY.roa
File: EE9r2ZsiSM7N6MZU4mj1QcOOGGY.roa (raw, json)
Hash identifier: TgVo6wxIaV4sVLoF0hoeX4DJJsaL4WaX35+vfOFtq2Q=
Subject key identifier: 10:4F:6B:D9:9B:22:48:CE:CD:E8:C6:54:E2:68:F5:41:C3:8E:18:66
Certificate issuer: /CN=cbec2487e97a699b5451a429e7dddaf295b523f1
Certificate serial: 018619
Authority key identifier: CB:EC:24:87:E9:7A:69:9B:54:51:A4:29:E7:DD:DA:F2:95:B5:23:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-wkh-l6aZtUUaQp593a8pW1I_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8f95cd-a797-4780-855c-7e42c15a8a1d/1/EE9r2ZsiSM7N6MZU4mj1QcOOGGY.roa
Signing time: Mon 07 Feb 2022 07:51:31 +0000
ROA not before: Mon 07 Feb 2022 07:51:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29684
IP address blocks: 176.98.35.0/24 maxlen: 24
176.98.32.0/24 maxlen: 24
176.98.32.0/22 maxlen: 22
176.98.33.0/24 maxlen: 24
176.98.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99865 (0x18619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbec2487e97a699b5451a429e7dddaf295b523f1
Validity
Not Before: Feb 7 07:51:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=104f6bd99b2248cecde8c654e268f541c38e1866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:30:2f:9f:cb:f6:d9:22:93:2c:61:0d:72:4e:
22:ba:df:ec:2a:f7:68:a2:03:7f:2a:47:2f:f2:34:
99:e8:80:97:38:3a:f2:30:eb:3f:3a:84:18:a3:cb:
07:4d:de:1a:61:6e:ee:95:0f:67:cf:89:d2:10:ff:
37:1f:7c:fa:18:bb:e8:26:f7:ba:fd:ff:c9:4a:5d:
04:f7:23:3a:15:c1:f7:72:49:1a:f8:11:5e:a5:80:
89:9b:0f:bb:12:f1:73:b7:54:1f:29:85:3c:67:1d:
55:1c:ca:86:d9:38:e0:27:bd:e4:c3:f2:c3:55:ad:
b6:ba:75:3e:f5:d5:62:5c:af:26:97:44:28:bf:6c:
0f:44:ce:c9:1b:19:cd:3d:e8:c7:32:43:25:4d:87:
3f:df:53:3c:61:ad:25:f2:f7:79:0a:e6:7a:af:01:
14:0a:19:b9:9c:f4:7a:40:57:7f:78:54:ed:b0:80:
8e:dc:1b:dd:d0:2c:a4:1c:e1:41:22:69:75:14:fc:
c5:4f:e6:d0:a8:55:cc:22:6c:92:b0:6b:73:53:16:
3f:af:6d:6b:ac:32:a6:81:a8:88:45:d0:01:1a:41:
cd:37:a4:66:2e:d6:0a:c6:35:91:55:37:38:1d:1d:
ca:65:de:3f:0b:cf:19:82:ba:2b:c7:77:37:0f:85:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4F:6B:D9:9B:22:48:CE:CD:E8:C6:54:E2:68:F5:41:C3:8E:18:66
X509v3 Authority Key Identifier:
keyid:CB:EC:24:87:E9:7A:69:9B:54:51:A4:29:E7:DD:DA:F2:95:B5:23:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-wkh-l6aZtUUaQp593a8pW1I_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8f95cd-a797-4780-855c-7e42c15a8a1d/1/EE9r2ZsiSM7N6MZU4mj1QcOOGGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8f95cd-a797-4780-855c-7e42c15a8a1d/1/y-wkh-l6aZtUUaQp593a8pW1I_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.32.0/22
Signature Algorithm: sha256WithRSAEncryption
10:6d:f1:cf:5d:22:2a:79:2c:78:62:10:d0:5a:83:04:91:fd:
f2:1f:d8:6b:7a:81:4d:e7:d7:df:5b:84:99:15:77:6a:53:d0:
da:71:f9:7b:d5:d6:0c:3e:71:02:29:81:44:74:c1:47:29:c1:
26:4c:68:e5:ac:a6:d3:24:b0:03:e3:a7:9d:be:78:46:0d:1c:
fc:fd:48:d0:4d:1f:18:85:67:e7:7c:f3:92:41:96:28:06:61:
c8:db:e5:ef:6c:fc:3b:ad:a5:2a:65:94:d7:95:fd:b4:6d:1f:
9a:86:10:73:f6:0a:d0:d9:bb:73:c1:57:9a:90:5f:ae:0f:5d:
97:11:c6:bb:53:a2:00:bc:eb:5f:92:e1:64:e4:58:84:18:f8:
71:a4:61:35:e4:e0:04:11:36:da:69:ba:b0:02:6a:d7:5c:77:
a6:d7:5e:a8:df:be:fd:e1:80:7d:50:17:f7:84:82:c9:14:b9:
1a:63:8c:b1:cf:df:60:f8:2f:73:fb:cc:72:2f:83:ca:39:45:
27:a3:46:a8:64:f1:9a:37:f1:61:e4:ad:fd:20:32:32:0a:6c:
48:a4:23:a0:95:24:a3:26:63:0f:1e:59:27:d6:92:77:8f:61:
df:c2:ef:77:6a:4c:1a:37:02:e8:68:df:fa:bf:37:4e:d2:e6:
2a:46:6a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:34 2024 by rpki-client on console-fra.rpki-client.org