Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/vyg0kIom_smJ8_Ja1cMls8fuBR4.roa
File: vyg0kIom_smJ8_Ja1cMls8fuBR4.roa (raw, json)
Hash identifier: WISGSCVNjN1nYZQqUPLGQ/3AXH2bENxdrbhD7D0Zs04=
Subject key identifier: BF:28:34:90:8A:26:FE:C9:89:F3:F2:5A:D5:C3:25:B3:C7:EE:05:1E
Certificate issuer: /CN=94ae7c382777bc85e726bb5a93c76938bf28c961
Certificate serial: 01856F26BD7C4855A3BFCB1F4A063AD4CF19
Authority key identifier: 94:AE:7C:38:27:77:BC:85:E7:26:BB:5A:93:C7:69:38:BF:28:C9:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lK58OCd3vIXnJrtak8dpOL8oyWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/vyg0kIom_smJ8_Ja1cMls8fuBR4.roa
Signing time: Sun 01 Jan 2023 21:04:47 +0000
ROA not before: Sun 01 Jan 2023 21:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 176.97.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:bd:7c:48:55:a3:bf:cb:1f:4a:06:3a:d4:cf:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ae7c382777bc85e726bb5a93c76938bf28c961
Validity
Not Before: Jan 1 21:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf2834908a26fec989f3f25ad5c325b3c7ee051e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:51:eb:51:26:63:87:48:25:a0:c2:20:be:
e1:99:65:69:d4:5a:47:f0:6b:54:c4:c3:f5:d4:5d:
11:aa:5c:e0:a3:32:22:b0:cf:97:a1:6d:fc:e1:47:
4c:e7:2a:a4:54:de:6f:21:65:d7:e8:3a:84:c6:32:
b2:26:e3:02:3c:a0:2e:5e:45:af:2f:36:41:ef:76:
f6:d2:f4:e1:73:4b:38:8a:09:85:27:37:a8:1e:f6:
58:57:ae:dc:0d:51:dc:09:47:9f:08:25:c3:05:57:
98:f6:dc:71:01:70:97:09:b0:c4:ff:2c:fe:68:35:
6d:f9:9f:80:97:ca:ff:3b:99:89:7c:89:d1:00:84:
07:6c:07:4d:f7:f3:7f:9c:0c:49:06:8a:6a:90:e5:
ad:e6:ac:4c:08:c5:2b:d5:b1:a8:b8:e0:58:8f:68:
c0:ee:20:40:ab:fa:44:ae:a5:f8:6f:5e:47:02:dd:
35:0a:52:bb:ba:c6:cd:39:25:25:08:90:3c:55:30:
8c:5c:d3:c5:9c:e4:6f:7f:f9:3b:04:14:c5:f4:dd:
0c:97:6d:b5:68:e4:8d:49:a2:63:4e:a8:ef:75:8f:
17:21:3d:f7:21:d6:9f:6b:9b:8c:c4:ff:a2:d5:b1:
82:56:ba:be:cd:00:48:39:12:b5:2c:75:32:ea:32:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:28:34:90:8A:26:FE:C9:89:F3:F2:5A:D5:C3:25:B3:C7:EE:05:1E
X509v3 Authority Key Identifier:
keyid:94:AE:7C:38:27:77:BC:85:E7:26:BB:5A:93:C7:69:38:BF:28:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lK58OCd3vIXnJrtak8dpOL8oyWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/vyg0kIom_smJ8_Ja1cMls8fuBR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/lK58OCd3vIXnJrtak8dpOL8oyWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:30:69:88:fa:01:f7:e8:0e:e7:2d:34:33:26:18:6f:f6:a1:
53:38:46:14:1a:a5:0f:26:15:b5:d6:7e:2e:ee:2d:5e:6c:3a:
76:75:8e:01:dc:1c:36:b4:cf:7c:9a:92:6c:4d:d5:7b:a1:8d:
c7:67:36:51:ce:18:4f:0f:70:04:f1:12:18:37:5c:08:2a:eb:
fd:2c:c1:39:b8:ef:3c:2e:44:2f:ed:3b:ae:51:c9:0f:bc:ad:
e2:a9:fa:de:ea:fa:5b:84:b0:c6:89:af:70:16:93:27:bd:ce:
eb:da:79:18:69:2b:f1:a6:80:16:f6:01:15:a1:0e:73:48:63:
89:c8:84:32:01:57:9e:0e:4b:4c:f9:10:c8:4e:e9:13:58:5a:
a6:ca:33:58:ab:ac:c7:33:d7:6d:47:c1:32:6d:2a:6d:52:aa:
ee:c5:f6:90:b7:f9:65:4e:44:91:80:6e:5b:93:d9:2a:21:78:
65:ce:b1:85:fd:37:1e:b1:9c:66:30:6e:07:f5:60:77:a3:ca:
e1:34:27:ae:f6:1c:02:80:25:99:00:b9:29:2d:16:e5:53:7b:
94:42:bc:fb:2c:ab:2c:b4:82:e8:1b:47:64:b5:cd:2a:04:ad:
39:e5:83:8b:7b:c8:03:77:a0:6f:b5:a4:44:5f:28:23:b8:e5:
83:87:63:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 09:00:49 2023 by rpki-client on console-ams.rpki-client.org