Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/qaDrjS03heRfBF6-MwzcycLtO7w.roa
File: qaDrjS03heRfBF6-MwzcycLtO7w.roa (raw, json)
Hash identifier: 5tTtQjXXtZKjVUHbEuN21TLmLRMFbEet/9vWYCqGGJQ=
Subject key identifier: A9:A0:EB:8D:2D:37:85:E4:5F:04:5E:BE:33:0C:DC:C9:C2:ED:3B:BC
Certificate issuer: /CN=c97c6b183917f26880dc7923802a1d0e44d7b822
Certificate serial: 01882086B3300A476AE9B32C47E30B95524B
Authority key identifier: C9:7C:6B:18:39:17:F2:68:80:DC:79:23:80:2A:1D:0E:44:D7:B8:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXxrGDkX8miA3HkjgCodDkTXuCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/qaDrjS03heRfBF6-MwzcycLtO7w.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 176.118.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b3:30:0a:47:6a:e9:b3:2c:47:e3:0b:95:52:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97c6b183917f26880dc7923802a1d0e44d7b822
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9a0eb8d2d3785e45f045ebe330cdcc9c2ed3bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:6e:6f:bc:c5:f3:48:3f:58:8e:63:2f:9d:
f7:1e:55:0c:3d:de:ee:6f:f8:b1:90:7e:e1:6f:1e:
85:6b:32:1b:3f:cd:a0:77:9f:8a:1c:80:9a:05:16:
f0:6e:a8:4d:88:ef:f6:9d:c0:3d:cc:e5:f4:76:cd:
98:a0:72:c0:9e:0c:1d:38:4e:70:95:40:1b:4c:22:
17:97:e1:d4:8d:95:50:3f:c8:b7:45:97:ed:6b:5d:
d1:2c:40:be:5f:b9:d2:29:95:5b:22:21:3a:6f:35:
79:04:2d:e2:b0:68:9f:49:1f:ed:83:98:c3:c8:71:
c4:7b:90:e8:68:42:e7:85:9a:c3:1d:8f:aa:77:90:
33:dc:67:ff:46:41:00:6e:96:17:e5:df:cd:1a:84:
6a:18:e5:4f:2c:43:f1:10:a7:db:39:c5:a1:ad:35:
ec:53:81:43:06:3d:6a:6d:55:07:44:6f:13:8f:ea:
97:55:db:de:3f:cb:82:3d:89:84:6a:30:c6:f1:75:
7b:3e:55:29:be:f3:28:97:48:84:33:3e:eb:7d:22:
b9:bd:6d:af:29:95:8f:60:48:9e:52:ae:31:9e:d1:
21:a9:31:8a:4c:53:63:1e:50:87:c5:57:2f:75:47:
52:45:a7:8e:78:fe:a8:d4:2c:40:9e:8d:fd:88:b1:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:EB:8D:2D:37:85:E4:5F:04:5E:BE:33:0C:DC:C9:C2:ED:3B:BC
X509v3 Authority Key Identifier:
keyid:C9:7C:6B:18:39:17:F2:68:80:DC:79:23:80:2A:1D:0E:44:D7:B8:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXxrGDkX8miA3HkjgCodDkTXuCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/qaDrjS03heRfBF6-MwzcycLtO7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/yXxrGDkX8miA3HkjgCodDkTXuCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.35.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:54:a7:21:8c:41:82:8c:fd:98:c8:6f:5b:ff:45:95:1d:18:
ab:53:49:b3:f7:7c:65:c2:6e:e8:f1:92:ec:86:f0:7a:1a:20:
67:f6:04:20:8a:ed:9a:00:be:75:88:45:a2:dd:09:cb:55:24:
17:8b:d2:71:ad:75:ba:2b:67:b8:cb:ce:83:2e:1f:d9:75:38:
aa:d5:0f:12:5b:bc:98:a2:d0:98:f6:dd:4d:9f:2a:ee:58:8d:
36:b4:2a:2e:6a:e2:e0:f7:cf:90:b4:f4:89:c1:6c:6a:6a:27:
45:30:ec:0b:91:ea:27:05:24:6a:5f:9e:7c:f4:a5:22:69:cb:
a9:e8:fe:1c:5a:3e:b3:14:ac:f8:7d:be:85:b8:88:87:0d:32:
07:0e:c4:d1:09:3c:ac:36:39:60:46:7d:e9:48:9e:b7:40:1b:
d7:1b:64:32:a5:9b:57:29:ec:8c:c9:bd:ef:ea:d5:d7:bc:05:
ff:fa:f8:1f:e3:76:c9:b6:4f:d1:2d:8d:46:8d:5e:0c:69:b5:
16:37:67:90:88:2c:0c:10:76:56:72:b6:f3:61:86:aa:6e:1b:
dd:79:21:75:13:44:b6:0c:74:c3:b2:93:7e:7b:4d:fb:c6:3d:
7a:f3:b3:a6:11:20:37:09:27:4a:3c:2d:08:b2:bf:13:e7:59:
6a:d1:96:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 08:18:27 2023 by rpki-client on console-ams.rpki-client.org