Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf7d1a-a962-46bb-a468-a871e02567ac/1/7dvoKp0Q5-OuuylRONSGIsnrgi8.roa
File: 7dvoKp0Q5-OuuylRONSGIsnrgi8.roa (raw, json)
Hash identifier: OyeHzMPNA87JUYUqqpJramWxgWv7gfmI/c4/NgCDUyw=
Subject key identifier: ED:DB:E8:2A:9D:10:E7:E3:AE:BB:29:51:38:D4:86:22:C9:EB:82:2F
Certificate issuer: /CN=03cf6bfa389b5ea43c0d2782fee6f0444420476b
Certificate serial: 04D8BC7B
Authority key identifier: 03:CF:6B:FA:38:9B:5E:A4:3C:0D:27:82:FE:E6:F0:44:44:20:47:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A89r-jibXqQ8DSeC_ubwREQgR2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf7d1a-a962-46bb-a468-a871e02567ac/1/7dvoKp0Q5-OuuylRONSGIsnrgi8.roa
Signing time: Sat 01 Jan 2022 01:56:11 +0000
ROA not before: Sat 01 Jan 2022 01:56:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41230
IP address blocks: 176.119.145.0/24 maxlen: 24
2a10:d00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81312891 (0x4d8bc7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cf6bfa389b5ea43c0d2782fee6f0444420476b
Validity
Not Before: Jan 1 01:56:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eddbe82a9d10e7e3aebb295138d48622c9eb822f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:19:bb:6b:50:72:eb:08:db:54:69:91:39:
6b:fe:51:aa:ee:0d:1f:34:93:ce:36:7d:03:b7:cf:
59:c4:2b:12:d4:e1:a8:f1:e5:ee:f9:99:89:5d:dd:
1f:8d:5c:09:eb:0e:7e:45:c2:38:6e:e0:a1:9b:95:
1d:a8:46:f9:ff:dc:62:43:21:eb:43:9f:cd:1e:22:
65:0c:fe:d0:c7:a4:c0:7a:96:1d:73:4d:52:7c:8d:
92:a2:fb:c0:76:67:95:c2:6a:30:af:2d:b9:08:54:
a7:2d:c2:4d:b7:73:b5:06:02:01:cc:85:2b:15:03:
a5:57:86:7c:69:8e:85:a6:06:e1:02:58:4e:d8:22:
1d:9f:be:76:81:c3:f6:f5:47:28:f9:1f:8d:01:fe:
95:ed:31:28:fe:75:1a:e0:3b:17:60:44:13:ae:d7:
3d:ef:42:08:4a:fe:78:f5:44:3b:e8:5e:60:82:38:
8f:74:88:9b:37:9b:42:6c:96:4d:bc:49:4e:22:4c:
bb:66:4b:dd:e2:94:4c:5f:a0:ef:0c:39:2a:64:9a:
d6:ec:e2:c6:47:ef:62:65:5b:16:bf:e9:bc:1f:38:
5b:e0:28:5c:f7:4d:5a:a3:19:bf:b1:b4:43:4a:09:
1e:7c:57:70:0f:c4:8d:4b:83:ee:81:2d:c5:63:bd:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DB:E8:2A:9D:10:E7:E3:AE:BB:29:51:38:D4:86:22:C9:EB:82:2F
X509v3 Authority Key Identifier:
keyid:03:CF:6B:FA:38:9B:5E:A4:3C:0D:27:82:FE:E6:F0:44:44:20:47:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A89r-jibXqQ8DSeC_ubwREQgR2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf7d1a-a962-46bb-a468-a871e02567ac/1/7dvoKp0Q5-OuuylRONSGIsnrgi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf7d1a-a962-46bb-a468-a871e02567ac/1/A89r-jibXqQ8DSeC_ubwREQgR2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.145.0/24
IPv6:
2a10:d00::/29
Signature Algorithm: sha256WithRSAEncryption
26:0e:c6:9c:5a:df:22:28:e1:d0:8a:fe:98:c8:17:30:eb:56:
42:8c:93:d1:cc:8e:14:92:9d:b7:d6:83:62:f4:18:a3:52:53:
4e:a3:a8:3c:25:93:0b:eb:1f:eb:f6:2a:1c:6f:7b:f8:d9:44:
f0:dc:5e:f4:89:cd:b8:e9:ff:b5:0d:8e:c9:f3:e9:8c:5e:b0:
94:f1:ab:c1:37:c4:6e:c8:6c:27:cd:a0:0d:84:d6:1d:5e:1a:
fb:73:b9:7a:eb:40:d2:e9:ba:af:77:26:a5:02:09:27:82:36:
a4:fe:7a:50:df:61:f3:1d:3d:78:f9:32:a4:7c:2e:00:6d:16:
86:5b:ef:97:d3:e7:ff:34:42:98:3e:1f:fc:06:a6:a0:dc:dc:
51:de:bb:39:86:32:a8:ec:ef:47:b0:2a:74:af:79:80:74:16:
2f:62:fe:fa:9c:37:55:83:ce:57:f2:29:6f:c2:e8:52:61:50:
c4:3e:85:d9:4e:9d:df:57:80:f2:b4:fa:7f:dd:c1:52:15:00:
f4:e4:18:25:9e:20:00:8a:fb:a7:16:92:a1:04:b0:7d:18:31:
38:b2:1f:d9:27:b6:03:74:7c:49:5b:59:10:f6:eb:32:a3:c0:
68:a9:70:42:ad:44:7b:36:b9:7e:6f:a2:80:5c:72:c0:7c:0a:
6d:f4:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:33 2024 by rpki-client on console-fra.rpki-client.org