Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/KP-78Gr10HAdf2pbtOLZaFXbs1s.roa
File: KP-78Gr10HAdf2pbtOLZaFXbs1s.roa (raw, json)
Hash identifier: qe9C6y1oMzoebGKDPJyw2bUqqg34gYb9CvntDnNr9Uo=
Subject key identifier: 28:FF:BB:F0:6A:F5:D0:70:1D:7F:6A:5B:B4:E2:D9:68:55:DB:B3:5B
Certificate issuer: /CN=23daf57a212bb7f320a2246f97959575d0e68ce3
Certificate serial: 01856CB85311ABFEFA433F34EA6AECE4EAF1
Authority key identifier: 23:DA:F5:7A:21:2B:B7:F3:20:A2:24:6F:97:95:95:75:D0:E6:8C:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9r1eiErt_MgoiRvl5WVddDmjOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/KP-78Gr10HAdf2pbtOLZaFXbs1s.roa
Signing time: Sun 01 Jan 2023 09:44:57 +0000
ROA not before: Sun 01 Jan 2023 09:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 176.116.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:53:11:ab:fe:fa:43:3f:34:ea:6a:ec:e4:ea:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23daf57a212bb7f320a2246f97959575d0e68ce3
Validity
Not Before: Jan 1 09:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28ffbbf06af5d0701d7f6a5bb4e2d96855dbb35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4b:f2:d6:7f:88:4a:8d:97:ea:e2:49:95:a5:
da:f2:5a:0f:82:7c:3c:8c:fd:17:3c:a8:2e:f7:26:
19:3b:e8:52:cd:d9:ee:62:cd:00:67:81:83:35:01:
76:f2:e1:3f:d8:11:6e:45:ad:1f:d2:09:88:8a:da:
94:4b:71:8c:aa:1a:e8:4f:04:46:67:e6:69:23:d7:
1b:d1:d0:b6:6a:71:22:aa:3e:22:ae:42:1f:36:e7:
5b:cb:c0:0f:c0:25:da:fe:8e:00:74:a1:a6:14:e2:
b1:cc:c0:2c:27:56:5e:f4:c6:c4:12:00:e4:e0:58:
19:48:89:f3:61:da:d9:82:6c:58:2d:1f:a9:d5:94:
e4:08:03:17:30:b9:b9:3f:32:0c:7d:1a:f8:80:74:
db:9a:0b:18:dc:92:06:b1:89:3a:ff:09:7c:b8:85:
36:83:b8:d9:80:3d:4c:8b:36:bb:3e:87:c2:ba:a2:
fe:70:4a:72:e3:1b:e5:f0:5e:95:29:71:2c:d3:d3:
78:f4:69:ab:de:0c:79:a8:fc:48:b8:a3:15:99:77:
e6:8f:d8:37:56:bc:78:b4:64:05:42:23:78:0c:c6:
89:61:b4:8e:b0:19:e4:b6:bb:eb:f8:1b:4d:8e:85:
f1:db:99:1c:54:7b:15:59:ec:82:a3:05:a7:d6:75:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FF:BB:F0:6A:F5:D0:70:1D:7F:6A:5B:B4:E2:D9:68:55:DB:B3:5B
X509v3 Authority Key Identifier:
keyid:23:DA:F5:7A:21:2B:B7:F3:20:A2:24:6F:97:95:95:75:D0:E6:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9r1eiErt_MgoiRvl5WVddDmjOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/KP-78Gr10HAdf2pbtOLZaFXbs1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/I9r1eiErt_MgoiRvl5WVddDmjOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.31.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:74:e8:83:90:08:e6:b4:ef:a3:86:c8:5f:6c:ed:5e:94:ac:
0b:37:b8:2f:a5:18:7e:e4:3c:90:98:0a:65:0b:b2:89:fd:57:
da:b5:80:b1:ff:0e:82:ba:3a:41:07:d9:b1:0e:59:e2:aa:e5:
99:51:34:a3:eb:24:65:30:33:43:ac:ba:ba:78:3d:67:37:79:
38:19:06:b7:97:05:31:89:ed:ea:75:b3:d9:47:4b:1a:74:74:
56:b2:d9:f8:0c:0b:88:0a:c7:13:0e:3e:89:55:a6:25:fc:2e:
e7:74:30:10:d8:52:50:17:17:fd:27:4e:fa:69:55:bb:a4:16:
6b:fa:09:0f:68:b2:42:e3:f4:1c:54:a8:60:25:6b:74:98:17:
c1:7a:85:2a:b4:12:56:59:b6:54:2e:08:8c:34:b9:6a:4a:0f:
67:08:85:40:c2:4b:51:d1:42:1f:73:78:1c:de:27:8a:51:c0:
cf:de:95:09:25:ca:a1:83:7c:f3:b7:04:49:f9:35:62:67:e7:
51:ee:f8:cc:7b:d0:1e:67:fe:00:ae:dd:99:ad:9d:27:51:34:
a6:f3:b1:44:f7:85:50:8b:39:6e:c2:f3:83:61:c3:4a:36:6b:
cd:04:24:87:5e:45:9c:89:82:75:f5:4a:11:ca:a7:a0:92:43:
a5:2d:89:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:31 2024 by rpki-client on console-ams.rpki-client.org