Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/58580a-2119-4cf5-b687-c7ff145886d3/1/l17DadexdkS1YIBam9h2-gIJaTw.roa
File: l17DadexdkS1YIBam9h2-gIJaTw.roa (raw, json)
Hash identifier: Pvl2IqJEniO3Iu8DpWy/MH5WAE8xtMZsJmUwQtsXmnM=
Subject key identifier: 97:5E:C3:69:D7:B1:76:44:B5:60:80:5A:9B:D8:76:FA:02:09:69:3C
Certificate issuer: /CN=e8abd28b83d82f7c2d77b060fbed56da40dea776
Certificate serial: 3447
Authority key identifier: E8:AB:D2:8B:83:D8:2F:7C:2D:77:B0:60:FB:ED:56:DA:40:DE:A7:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvSi4PYL3wtd7Bg--1W2kDep3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/58580a-2119-4cf5-b687-c7ff145886d3/1/l17DadexdkS1YIBam9h2-gIJaTw.roa
Signing time: Sun 17 Apr 2022 12:39:19 +0000
ROA not before: Sun 17 Apr 2022 12:39:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8849
IP address blocks: 176.97.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13383 (0x3447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8abd28b83d82f7c2d77b060fbed56da40dea776
Validity
Not Before: Apr 17 12:39:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=975ec369d7b17644b560805a9bd876fa0209693c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:e8:78:df:38:b6:cf:81:9f:04:4a:18:29:
6e:ac:03:4b:53:34:aa:f9:ef:0a:65:f4:30:9d:b9:
fa:15:ca:8f:93:31:5a:e3:99:2b:86:5f:f3:9e:84:
1c:4f:03:6b:f4:b2:53:c8:5c:d2:6d:71:88:6d:cc:
f6:05:24:7d:34:65:49:0a:1c:2c:34:88:8d:06:1a:
92:ed:25:11:c6:47:79:8a:5e:82:e9:2a:6d:b2:6b:
59:1c:bc:8e:20:19:f8:19:45:ae:86:aa:ec:3b:eb:
41:76:e9:fb:35:74:4f:7e:99:36:59:4b:99:f1:4f:
31:6e:37:37:1b:eb:1b:b0:82:be:d5:bf:36:37:05:
21:2e:2d:2e:3d:54:ff:e7:95:8f:c6:4e:ba:23:fc:
35:df:a0:09:c5:46:a4:5b:92:d5:36:37:3e:07:b1:
6e:e8:a3:72:44:d0:d3:86:6f:80:82:cd:93:15:55:
83:42:68:8c:9a:59:52:14:2e:a5:96:ce:3e:83:6f:
38:e2:bf:50:6c:70:ce:a2:70:b7:d4:c8:bd:c5:97:
5b:bf:f6:d8:c6:f9:73:bd:cf:e0:a2:ea:ee:00:11:
2e:5c:c8:3d:1f:a2:30:16:7e:b0:c1:f0:1d:58:22:
63:38:4f:1d:bf:5b:8e:3e:44:b9:6c:6a:c3:df:2f:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5E:C3:69:D7:B1:76:44:B5:60:80:5A:9B:D8:76:FA:02:09:69:3C
X509v3 Authority Key Identifier:
keyid:E8:AB:D2:8B:83:D8:2F:7C:2D:77:B0:60:FB:ED:56:DA:40:DE:A7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvSi4PYL3wtd7Bg--1W2kDep3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/58580a-2119-4cf5-b687-c7ff145886d3/1/l17DadexdkS1YIBam9h2-gIJaTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/58580a-2119-4cf5-b687-c7ff145886d3/1/6KvSi4PYL3wtd7Bg--1W2kDep3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.192.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f5:3c:34:bc:de:f6:09:5b:9f:f2:99:ab:09:01:06:bc:e9:
ec:e3:07:10:7b:77:d4:da:c5:2d:9e:ae:1d:05:ff:eb:de:74:
a8:b2:03:d1:56:aa:55:6d:ca:e9:97:5b:98:63:01:b7:45:bb:
16:1a:29:18:38:43:f5:8f:d3:b8:83:80:45:a5:dc:3c:00:e8:
4e:38:22:a8:0f:e1:6b:3a:6a:00:da:93:ab:0f:75:06:6a:7c:
78:36:dc:39:6e:a7:69:9a:69:cf:96:f6:c8:f7:00:3c:29:67:
4d:20:60:51:53:ff:a9:9a:1f:41:14:cd:e4:d2:70:29:ec:2a:
40:ca:c5:bd:f4:66:87:4f:a4:38:b6:23:f8:6f:40:cd:6a:1a:
01:e5:07:86:ce:5c:74:2e:f5:12:6f:39:54:49:9a:12:e2:ca:
46:c1:b0:2a:25:7d:d4:66:dc:c5:6c:fd:2e:b8:8e:c1:eb:b6:
d5:08:e6:02:1b:66:79:0c:f1:6e:8c:39:33:76:49:d8:76:a8:
39:4e:65:01:34:38:f7:e4:6a:f5:f9:ce:68:91:3d:90:94:86:
cb:13:73:95:61:c1:da:16:31:63:53:54:7c:1d:6c:b5:c4:de:
ae:c8:f1:71:d1:49:b8:b2:d8:58:73:ec:6e:0f:c1:e3:61:f9:
2b:79:cd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:52 2024 by rpki-client on console-fra.rpki-client.org