Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/V_3w7vcE4S6c9hqEthG9lKixc1s.roa
File: V_3w7vcE4S6c9hqEthG9lKixc1s.roa (raw, json)
Hash identifier: 7iJ8RdP+pJJTEmt6Y7gdEfTcoLiJ+faJXXeCWNZ231E=
Subject key identifier: 57:FD:F0:EE:F7:04:E1:2E:9C:F6:1A:84:B6:11:BD:94:A8:B1:73:5B
Certificate issuer: /CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Certificate serial: 018A8E5F8AADFD112A34D9DBBBF4DD13F9F3
Authority key identifier: 9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/V_3w7vcE4S6c9hqEthG9lKixc1s.roa
Signing time: Wed 13 Sep 2023 11:49:00 +0000
ROA not before: Wed 13 Sep 2023 11:49:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.118.163.0/24 maxlen: 24
176.118.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:5f:8a:ad:fd:11:2a:34:d9:db:bb:f4:dd:13:f9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Validity
Not Before: Sep 13 11:49:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57fdf0eef704e12e9cf61a84b611bd94a8b1735b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:a9:7a:38:f4:2c:b6:66:b7:63:e2:b5:98:
10:13:11:91:66:1d:94:ca:69:44:3c:f3:08:65:7c:
2d:e7:b9:c7:79:fb:5f:66:64:ea:6a:87:55:d4:92:
bc:45:96:75:00:b8:6b:0d:ba:6a:7c:f0:ef:b3:bd:
0d:9a:21:83:60:ae:55:80:10:75:b7:44:8f:9a:fe:
1c:2f:62:fb:32:1d:40:01:49:46:ee:26:56:28:88:
b2:b2:06:18:7e:25:8a:48:99:4c:cd:0a:b4:4a:b2:
bd:06:30:9e:f6:92:f2:30:2a:d3:7c:70:23:ac:0c:
61:75:5e:50:2d:72:2b:f7:da:dc:33:67:65:83:8f:
eb:c1:aa:d4:72:69:22:17:cf:fe:b6:9a:e4:bc:bc:
2e:82:86:ba:35:28:dc:1e:f0:91:24:62:f5:46:19:
21:87:94:b9:b0:34:65:db:45:c5:2c:74:8c:80:19:
a0:ee:e6:bf:62:40:6b:69:24:f9:df:ca:46:62:90:
00:1a:4d:17:ac:74:af:89:c3:35:fc:62:f3:56:6a:
7c:fb:86:dd:21:e6:f5:de:a1:4d:1d:90:c6:2a:2b:
00:65:ae:60:00:1a:9d:6c:1a:aa:af:89:43:b9:e1:
d5:60:8c:c6:69:95:55:9e:4d:c2:72:5f:b9:20:3d:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FD:F0:EE:F7:04:E1:2E:9C:F6:1A:84:B6:11:BD:94:A8:B1:73:5B
X509v3 Authority Key Identifier:
keyid:9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/V_3w7vcE4S6c9hqEthG9lKixc1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.162.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:72:5a:c7:29:d9:1d:de:9c:e8:31:8a:65:5f:0f:ba:f9:34:
95:c7:e6:7e:2c:c5:30:ee:ba:11:92:b2:29:f9:60:db:64:b2:
68:35:55:b3:51:69:30:f0:59:24:a3:7c:77:e7:6e:c6:02:f8:
28:a8:1a:26:0f:ac:a2:2c:7c:a8:5f:8d:b0:c8:9d:4a:ae:2d:
12:e5:09:a7:41:51:d8:e9:75:a8:d7:3f:a6:3b:51:83:33:ec:
1c:90:ec:77:16:fe:c0:3d:58:a2:84:28:37:c1:d1:5d:45:ef:
ad:d2:84:8b:d0:bb:08:77:9f:39:60:57:64:78:9e:db:b5:e7:
55:e8:b7:97:0c:6a:35:8b:60:17:45:a7:10:cc:bc:71:32:dc:
5d:ea:24:e2:cc:8a:16:72:b8:3e:b3:84:4c:27:2e:70:a6:89:
04:94:ee:44:df:62:ab:a1:3d:b3:fe:4e:60:ae:c1:46:8e:b9:
c1:0c:b8:f3:7f:a4:60:bc:f2:9e:f5:63:a2:e9:ee:ac:42:48:
77:5e:13:44:01:03:25:9d:fb:89:dc:ca:ef:c7:60:de:ca:ea:
1a:f6:01:67:cf:6b:df:49:88:5f:af:79:40:52:92:b5:46:8f:
46:68:db:28:48:12:d4:98:33:36:3b:ec:43:f7:e8:a1:8a:f2:
1c:ed:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:24 2024 by rpki-client on console-fra.rpki-client.org