Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5a7c57-2aef-4caa-94c5-f56865c56ba9/1/1-fpwiOFh5nAOQ-phA5Pp2teig9E.roa
File: 1-fpwiOFh5nAOQ-phA5Pp2teig9E.roa (raw, json)
Hash identifier: g9eIwFEk9BTjWFwRJuQKXu1i5xa78KLXTUDUKIs1BT4=
Subject key identifier: F9:FA:70:88:E1:61:E6:70:0E:43:EA:61:03:93:E9:DA:D7:A2:83:D1
Certificate issuer: /CN=bde74850b31f3ac2198bf85ffb5c50bc703cc8a6
Certificate serial: 01857142F264A894202229523AE14208E4F5
Authority key identifier: BD:E7:48:50:B3:1F:3A:C2:19:8B:F8:5F:FB:5C:50:BC:70:3C:C8:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vedIULMfOsIZi_hf-1xQvHA8yKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5a7c57-2aef-4caa-94c5-f56865c56ba9/1/1-fpwiOFh5nAOQ-phA5Pp2teig9E.roa
Signing time: Mon 02 Jan 2023 06:54:50 +0000
ROA not before: Mon 02 Jan 2023 06:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 176.126.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:f2:64:a8:94:20:22:29:52:3a:e1:42:08:e4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde74850b31f3ac2198bf85ffb5c50bc703cc8a6
Validity
Not Before: Jan 2 06:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9fa7088e161e6700e43ea610393e9dad7a283d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:38:29:61:78:22:a3:63:c8:58:2a:71:99:5e:
ac:b1:53:d9:dc:0a:dc:ac:41:b0:cb:87:25:11:82:
14:c3:f1:55:d9:36:17:fe:6b:1e:f1:09:d2:9a:0b:
ae:ea:d6:67:b6:7d:04:d6:09:f4:90:a5:54:6f:37:
36:53:57:61:30:b6:70:ce:9d:d5:f3:57:e0:c1:49:
04:18:c6:3f:ac:69:2a:f3:c6:42:cd:aa:bf:67:48:
18:64:2b:33:f3:2e:56:0b:57:3c:66:9d:32:0c:80:
ff:0c:ce:17:4c:55:c0:e5:ce:79:84:4a:bf:fb:59:
34:df:4d:21:90:f6:dc:51:6d:15:f8:72:7b:5e:06:
96:93:67:66:16:61:b7:86:fd:f6:99:50:30:b4:5a:
11:ab:88:65:2c:38:d4:ae:1b:8d:53:7e:8c:25:63:
99:45:53:3f:d7:2f:af:4f:47:03:35:c4:ca:ba:5b:
99:50:f1:1f:70:c1:fc:18:42:3e:bf:d9:27:ce:b3:
60:96:ff:fe:bb:59:5a:31:ff:14:72:08:e8:f0:0a:
b3:22:bd:e4:40:4a:df:ee:b0:0c:cc:50:9e:53:16:
13:51:49:54:3a:ce:59:f3:d4:bd:16:43:31:73:1a:
06:1c:8c:51:1e:77:89:c2:52:f0:85:ef:d1:27:fd:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FA:70:88:E1:61:E6:70:0E:43:EA:61:03:93:E9:DA:D7:A2:83:D1
X509v3 Authority Key Identifier:
keyid:BD:E7:48:50:B3:1F:3A:C2:19:8B:F8:5F:FB:5C:50:BC:70:3C:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedIULMfOsIZi_hf-1xQvHA8yKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5a7c57-2aef-4caa-94c5-f56865c56ba9/1/1-fpwiOFh5nAOQ-phA5Pp2teig9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5a7c57-2aef-4caa-94c5-f56865c56ba9/1/vedIULMfOsIZi_hf-1xQvHA8yKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ed:a0:4d:7f:4f:ca:ef:4e:e0:b0:ab:77:88:e0:11:49:72:
36:ed:58:55:98:f6:cb:8f:c3:a7:28:0a:6d:85:67:dc:5d:5d:
83:de:81:77:17:a8:82:94:96:d7:2e:43:08:cd:16:b5:24:58:
9d:87:3a:59:37:40:03:68:8e:db:4b:a8:22:c7:ac:19:18:26:
dd:0c:31:43:51:82:9f:93:c6:29:48:58:66:dc:3f:b7:04:97:
31:7b:c5:4f:bc:25:b6:25:b3:db:14:8e:93:06:91:e1:4b:86:
ed:ce:bc:e2:f0:40:d6:13:58:5a:5b:02:c8:26:6b:c4:97:e0:
55:03:3a:71:2d:31:c2:de:d6:4b:fd:85:24:65:b6:ea:e1:24:
30:bc:cd:72:70:d1:e8:4e:1e:ce:6f:c3:40:1f:cc:62:1c:2f:
5b:25:cf:bf:e6:96:19:72:4a:fb:e2:a4:ad:33:dd:17:97:16:
46:f6:eb:0d:da:b5:4b:66:25:75:94:d1:bb:35:aa:2d:00:ca:
0b:b5:5e:df:70:08:84:83:5c:8d:46:b5:2c:6e:19:0e:6d:33:
82:53:cd:ad:54:4f:c2:ea:0e:af:17:cf:95:db:3d:93:5e:d7:
d9:c4:bc:5b:08:c4:46:85:b0:b9:e0:89:7c:ab:c0:68:d8:fc:
82:88:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:17 2023 by rpki-client on console.sobornost.net