Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8eb46c-218c-444c-89d2-acf322267c47/1/8_AnFXZjYW3KXcnDsumZFLb_6jc.roa
File: 8_AnFXZjYW3KXcnDsumZFLb_6jc.roa (raw, json)
Hash identifier: G1SgWx8ADQrhF5CHUweeSQOPjtWah/Gckjdt88TnRe0=
Subject key identifier: F3:F0:27:15:76:63:61:6D:CA:5D:C9:C3:B2:E9:99:14:B6:FF:EA:37
Certificate issuer: /CN=f7c001d8d8dec684325fa8601f07c9ac04507819
Certificate serial: 0189654AC37A1E5DE9AF20702DCFB305B36E
Authority key identifier: F7:C0:01:D8:D8:DE:C6:84:32:5F:A8:60:1F:07:C9:AC:04:50:78:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98AB2NjexoQyX6hgHwfJrARQeBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8eb46c-218c-444c-89d2-acf322267c47/1/8_AnFXZjYW3KXcnDsumZFLb_6jc.roa
Signing time: Mon 17 Jul 2023 19:19:05 +0000
ROA not before: Mon 17 Jul 2023 19:19:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 176.116.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:c3:7a:1e:5d:e9:af:20:70:2d:cf:b3:05:b3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c001d8d8dec684325fa8601f07c9ac04507819
Validity
Not Before: Jul 17 19:19:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3f027157663616dca5dc9c3b2e99914b6ffea37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:5d:0e:9b:9d:8e:c5:d5:26:25:1c:ba:e4:
ad:fb:6e:b6:75:a1:a1:af:2b:55:ca:81:4d:20:dd:
fe:c0:a1:a2:fc:ee:7d:c3:cd:c6:38:77:2e:1c:2b:
f6:43:10:bc:fc:73:f6:ab:38:9b:ec:ee:26:25:50:
d5:14:10:79:90:ab:ea:3d:46:2f:cf:4a:cd:f4:ca:
03:b8:e3:f7:4a:2b:b9:8e:80:43:e6:45:47:a7:2c:
d7:2c:07:2b:5a:c8:a9:b3:96:15:b0:ed:ca:30:86:
75:1f:e5:b6:a4:7e:22:b0:c3:54:d5:8c:0a:f2:b7:
b5:14:19:93:ac:be:2e:c7:be:bc:b2:ad:2d:0a:ff:
07:5e:eb:6b:80:c2:79:7f:99:48:fe:b0:c4:26:06:
b0:53:4c:56:64:c4:3b:b8:ba:04:02:75:9b:7d:4f:
b8:86:0b:a9:b4:ca:8b:4b:cd:a2:24:8f:87:55:06:
63:9c:0f:b1:ba:dc:1b:c8:cf:5f:68:f2:f2:ac:14:
e5:42:d8:f0:7d:c0:1a:28:ef:ae:c8:04:1b:54:a1:
e2:f9:26:09:9a:06:ca:a5:53:48:19:bf:1a:27:f5:
55:0a:08:7e:18:9d:95:bc:86:f7:f7:92:07:f0:9c:
58:f5:ad:40:27:ad:46:d2:52:fa:57:09:7a:ce:03:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F0:27:15:76:63:61:6D:CA:5D:C9:C3:B2:E9:99:14:B6:FF:EA:37
X509v3 Authority Key Identifier:
keyid:F7:C0:01:D8:D8:DE:C6:84:32:5F:A8:60:1F:07:C9:AC:04:50:78:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98AB2NjexoQyX6hgHwfJrARQeBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8eb46c-218c-444c-89d2-acf322267c47/1/8_AnFXZjYW3KXcnDsumZFLb_6jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8eb46c-218c-444c-89d2-acf322267c47/1/98AB2NjexoQyX6hgHwfJrARQeBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b2:ca:cf:49:66:e6:81:69:dc:40:1f:15:a2:32:09:18:b7:
15:56:f4:d9:ee:c0:ef:c6:cf:1b:4a:d2:3f:eb:74:10:6b:33:
fc:c1:24:e7:17:2a:05:f2:e3:ab:c3:8f:86:c6:8c:89:a5:63:
35:b0:06:78:ad:9d:b2:39:3d:2c:0f:7a:4f:e0:9c:af:fe:60:
03:ef:c2:29:07:72:96:47:77:58:41:b0:ab:3d:77:30:d2:48:
ff:ca:0e:8f:11:e8:ff:86:a9:22:08:e9:2d:89:74:6e:0f:51:
c2:5d:3d:cf:e8:c4:af:1b:b6:73:f3:f5:1d:a1:c9:59:56:ef:
5a:d2:38:2e:4b:dd:c3:55:0c:49:be:a7:36:a6:48:9c:82:1d:
7d:43:b3:d7:80:5c:ed:f7:f0:53:13:75:ae:34:5a:d5:b5:ee:
1a:eb:ff:0e:49:a6:da:5b:a4:92:92:97:77:24:d0:73:49:30:
fa:a8:98:ab:fe:df:5a:ca:71:e3:ac:71:e1:77:2a:57:42:19:
af:f4:16:41:11:48:b2:0e:4f:9e:42:41:da:90:00:9f:6c:69:
9b:78:e2:6f:95:ae:c1:5b:cb:10:e4:37:3f:38:65:2c:67:87:
f5:1a:bb:cc:3e:b3:fd:af:4d:0b:a5:51:b7:40:9c:f7:08:f7:
9d:c4:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:31 2023 by rpki-client on console.sobornost.net