Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/yaV5j2l5r4upD7jINSGona-YWcY.roa
File: yaV5j2l5r4upD7jINSGona-YWcY.roa (raw, json)
Hash identifier: nwn6f6r/uyXfqfwr0L94gBSWEQOIWforiXflxTaE918=
Subject key identifier: C9:A5:79:8F:69:79:AF:8B:A9:0F:B8:C8:35:21:A8:9D:AF:98:59:C6
Certificate issuer: /CN=40f257a57bc23e9db0997db7272fa94091e17d09
Certificate serial: 01149B4D
Authority key identifier: 40:F2:57:A5:7B:C2:3E:9D:B0:99:7D:B7:27:2F:A9:40:91:E1:7D:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPJXpXvCPp2wmX23Jy-pQJHhfQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/yaV5j2l5r4upD7jINSGona-YWcY.roa
Signing time: Sat 01 Jan 2022 11:57:42 +0000
ROA not before: Sat 01 Jan 2022 11:57:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 176.100.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18127693 (0x1149b4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f257a57bc23e9db0997db7272fa94091e17d09
Validity
Not Before: Jan 1 11:57:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9a5798f6979af8ba90fb8c83521a89daf9859c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9d:57:a3:96:89:f9:2e:e8:db:b9:c7:d4:9f:
ab:b3:49:dd:62:33:6f:79:39:8d:bb:c3:c7:be:21:
73:96:ab:1d:17:a2:86:7c:09:53:d1:13:66:e1:5b:
23:9d:d9:03:31:fa:51:af:55:6c:00:a6:82:6f:de:
29:a1:e0:f2:14:23:4a:6b:65:51:c6:5e:f8:53:45:
a3:57:2b:08:bb:9a:06:2e:73:8b:27:06:a6:77:22:
5f:f6:01:48:a9:72:06:d3:9d:b1:e6:cd:4c:01:47:
d3:09:bc:02:ab:ce:16:c8:2f:8d:8a:3d:8e:ce:93:
d8:ba:38:ad:b3:3c:c1:2f:5c:89:8e:97:5c:b3:ee:
6d:a3:f8:f0:b2:7b:d7:48:30:3a:0f:54:b7:f9:bf:
76:70:5a:55:4a:24:3b:22:f8:41:9f:07:f1:cb:0a:
6d:7f:b2:76:c2:4a:4d:bf:1f:1b:3c:64:6e:1c:06:
27:56:58:a3:12:c3:ae:e9:83:4f:c4:14:17:ba:6c:
8d:5a:26:5a:b6:ea:46:f8:2c:ee:13:fd:33:07:1c:
bf:45:be:fc:b4:3d:99:57:4c:f3:81:0a:83:1d:c7:
ce:b9:2a:c7:07:1f:40:a3:5a:f1:e3:b2:2d:be:c9:
25:ad:18:a7:d6:fd:0c:a4:89:54:22:ba:2c:a0:d8:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A5:79:8F:69:79:AF:8B:A9:0F:B8:C8:35:21:A8:9D:AF:98:59:C6
X509v3 Authority Key Identifier:
keyid:40:F2:57:A5:7B:C2:3E:9D:B0:99:7D:B7:27:2F:A9:40:91:E1:7D:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPJXpXvCPp2wmX23Jy-pQJHhfQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/yaV5j2l5r4upD7jINSGona-YWcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/QPJXpXvCPp2wmX23Jy-pQJHhfQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.47.0/24
Signature Algorithm: sha256WithRSAEncryption
37:50:e8:f6:23:3e:78:f1:cc:3b:6e:04:cb:89:8c:bd:84:97:
46:b4:37:b7:8c:45:9d:8a:bf:0b:dd:fe:04:d2:c6:2a:61:03:
f5:3e:89:35:80:ba:8c:e0:9a:6b:ac:90:9d:55:4d:b4:88:eb:
b7:55:3e:89:ab:7e:84:bf:42:21:6d:80:78:70:90:f3:74:76:
b0:7a:c8:d5:20:e6:c2:d7:03:0e:f4:71:6a:c7:bd:f4:6b:5a:
79:6b:79:03:d9:3c:4f:26:9d:e6:79:81:cb:df:8e:d5:9f:d4:
3b:50:65:25:cb:6a:80:2b:45:85:95:e5:be:b2:e3:ac:e4:c6:
71:23:d9:97:4a:79:b6:69:20:30:f1:c7:b0:83:1a:9f:56:53:
63:90:f8:21:d0:95:bc:59:d6:f9:71:9d:70:71:8e:4f:ef:4a:
96:9c:ae:4a:5e:f5:eb:ef:44:a9:44:fc:0a:6b:3e:24:36:97:
9f:b4:dd:ea:18:c3:04:fe:dd:9c:14:96:c6:ab:ba:d9:46:ed:
7d:16:ea:6b:54:42:eb:d5:97:bd:ca:db:c2:8c:e7:fd:fe:f6:
59:e1:31:5d:70:42:1a:75:8d:c5:2d:1a:51:39:ae:91:4b:e3:
ac:61:4d:8b:64:42:fd:6b:d4:a1:97:ee:e5:1f:76:49:40:05:
ac:03:88:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:46 2024 by rpki-client on console-ams.rpki-client.org