Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/7F3mYOrWGB-6qHPjEOO4kBXTmqg.roa
File: 7F3mYOrWGB-6qHPjEOO4kBXTmqg.roa (raw, json)
Hash identifier: AoHJAalnH7vaNCpkVl7A8GEE9QKHWcjpNtfnmqdRSog=
Subject key identifier: EC:5D:E6:60:EA:D6:18:1F:BA:A8:73:E3:10:E3:B8:90:15:D3:9A:A8
Certificate issuer: /CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Certificate serial: 018B1EF727B243D25BB2AD5A6A11F8571096
Authority key identifier: 9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/7F3mYOrWGB-6qHPjEOO4kBXTmqg.roa
Signing time: Wed 11 Oct 2023 13:39:55 +0000
ROA not before: Wed 11 Oct 2023 13:39:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54252
IP address blocks: 176.118.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:f7:27:b2:43:d2:5b:b2:ad:5a:6a:11:f8:57:10:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Validity
Not Before: Oct 11 13:39:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec5de660ead6181fbaa873e310e3b89015d39aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:f0:30:9f:4b:b7:92:53:f7:6c:78:df:17:
99:6e:90:ec:d8:96:1f:27:82:90:f3:50:42:71:2a:
63:8f:81:11:3e:1e:c3:d5:bc:ec:21:4b:fb:6d:b3:
1f:ed:76:7f:9d:32:96:10:b3:24:24:d8:66:3e:67:
2f:ec:b4:82:22:91:4b:82:00:58:5a:12:a4:da:86:
a7:98:59:b8:73:1d:4b:ab:e4:97:58:46:15:c9:d6:
69:6e:9c:48:07:08:21:b5:36:04:1e:f5:3d:bb:8f:
57:77:72:30:bd:a4:97:57:14:93:ce:f9:1e:1c:56:
4c:63:d0:9b:9a:09:a1:9b:8e:04:55:95:1e:99:16:
7c:82:39:3d:65:bc:6a:d0:c9:f3:37:5f:09:4f:5a:
4f:e2:93:f1:83:71:9b:ce:5f:fa:5d:37:4e:65:18:
1c:0a:3f:5e:a0:31:f1:57:22:61:a8:31:f7:80:28:
09:e3:0c:39:82:d9:53:7a:c4:58:db:4e:1a:27:cb:
4d:33:45:3e:08:42:f9:08:c8:01:54:92:9d:74:40:
bc:e6:d7:2a:87:4f:ea:01:d7:44:e1:47:23:81:63:
20:3c:56:9c:ba:36:8c:10:57:d8:1a:8b:7d:6d:ff:
44:e8:d5:65:1e:66:12:f5:bc:b7:ab:36:62:7f:c0:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5D:E6:60:EA:D6:18:1F:BA:A8:73:E3:10:E3:B8:90:15:D3:9A:A8
X509v3 Authority Key Identifier:
keyid:9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/7F3mYOrWGB-6qHPjEOO4kBXTmqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.161.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:7f:28:93:b7:ab:b4:21:7d:03:24:1f:21:44:84:03:a7:87:
38:41:14:17:94:b0:0b:ec:76:51:78:34:5a:80:8b:0e:98:b3:
95:dd:a0:66:fd:4a:c9:5f:b4:36:4b:f1:08:8e:16:58:f0:46:
08:18:64:c3:19:2d:5a:aa:63:c8:78:52:22:ef:76:bc:71:05:
3b:79:ac:23:86:31:67:a5:d5:0c:33:21:1d:d0:2a:7e:05:00:
53:15:60:6c:88:8f:01:12:06:e5:76:27:d0:36:ff:81:8d:f3:
25:86:98:14:ec:44:79:45:f9:58:9f:a4:c3:9b:54:28:05:e5:
74:cd:7e:8d:5d:81:d4:b0:cb:80:7f:01:86:7f:6b:18:9a:37:
e2:e2:a7:b6:ed:49:d4:b7:97:30:c9:e9:a0:e1:6e:8e:3f:da:
f3:5f:e3:32:26:8d:80:b1:6b:09:93:29:dd:20:36:3d:3a:7f:
39:e3:af:ae:ed:e3:20:f7:8d:63:55:25:2c:a2:13:c7:0d:e7:
01:11:fe:6f:8c:75:04:8c:35:97:5d:37:11:54:b2:ba:75:f6:
8f:68:74:58:1e:f9:f1:3c:26:39:45:c1:a1:0c:db:ca:3a:6b:
c0:cc:32:cd:ff:ec:d6:60:ae:e2:2d:f2:a9:32:58:b2:cb:ef:
98:3f:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 01:15:29 2023 by rpki-client on console-ams.rpki-client.org