Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/YCBJxICKWHuGDegxxNwytJyNST8.roa
File: YCBJxICKWHuGDegxxNwytJyNST8.roa (raw, json)
Hash identifier: mRWWjz4UfffcB5qLg4NxfFUbxi3xFe3DBiT69A06eH8=
Subject key identifier: 60:20:49:C4:80:8A:58:7B:86:0D:E8:31:C4:DC:32:B4:9C:8D:49:3F
Certificate issuer: /CN=5588153f3ec6b36a3fc6850d05337236f3ced112
Certificate serial: 01881EE0CF1E8D4197F30D93854F73C7A35B
Authority key identifier: 55:88:15:3F:3E:C6:B3:6A:3F:C6:85:0D:05:33:72:36:F3:CE:D1:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYgVPz7Gs2o_xoUNBTNyNvPO0RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/YCBJxICKWHuGDegxxNwytJyNST8.roa
Signing time: Mon 15 May 2023 10:07:09 +0000
ROA not before: Mon 15 May 2023 10:07:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 176.97.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:e0:cf:1e:8d:41:97:f3:0d:93:85:4f:73:c7:a3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588153f3ec6b36a3fc6850d05337236f3ced112
Validity
Not Before: May 15 10:07:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=602049c4808a587b860de831c4dc32b49c8d493f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5a:26:ee:14:df:78:23:40:a5:a0:c7:42:bf:
ce:9a:c4:42:9d:8b:c8:21:31:10:4c:28:56:ac:ca:
b0:dc:13:9c:32:42:da:b5:ac:9e:78:f4:ab:b6:55:
6b:ea:4f:32:67:f7:85:97:21:e7:30:d4:d9:7f:c6:
55:96:ed:b9:87:f4:d5:dc:bf:b6:4f:f7:81:cf:6e:
2e:92:9b:dd:df:49:e3:39:89:e3:59:fd:6a:b0:7b:
7d:03:65:0c:9f:10:51:6f:ff:ba:fe:ad:f2:0e:1e:
ed:49:f6:28:cc:96:f1:7f:04:a0:18:18:f4:c8:3c:
a2:7a:2f:5f:a8:a1:40:a5:81:dd:ad:17:40:25:a9:
62:82:6b:82:7c:a5:df:2c:c1:53:af:26:8c:6f:8a:
45:96:fb:6f:85:b6:82:29:0b:32:62:b2:b6:78:ba:
37:43:8b:8d:af:88:1e:d6:3d:2c:02:fc:f9:08:d9:
f6:83:80:e0:12:fd:ae:7c:af:8d:97:ad:97:b3:d8:
54:5c:23:88:f6:72:90:47:e2:d2:41:ca:c8:d9:61:
34:16:e4:eb:81:8f:3a:ea:7e:c7:33:d8:8e:f6:aa:
ed:5e:0c:2c:f5:b4:af:f7:b2:4e:9f:3a:8e:52:3c:
c8:8c:a5:f1:89:0a:b7:9f:37:73:b8:56:72:cc:3b:
b6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:20:49:C4:80:8A:58:7B:86:0D:E8:31:C4:DC:32:B4:9C:8D:49:3F
X509v3 Authority Key Identifier:
keyid:55:88:15:3F:3E:C6:B3:6A:3F:C6:85:0D:05:33:72:36:F3:CE:D1:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYgVPz7Gs2o_xoUNBTNyNvPO0RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/YCBJxICKWHuGDegxxNwytJyNST8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/VYgVPz7Gs2o_xoUNBTNyNvPO0RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.213.0/24
Signature Algorithm: sha256WithRSAEncryption
88:14:b0:6f:b2:a4:34:52:95:d8:3e:d9:82:e4:bd:55:a9:6e:
e5:1a:2b:f8:77:9c:a6:fd:86:e8:0c:3f:66:5f:9c:ff:d9:f8:
15:0d:4c:1d:10:87:91:36:82:14:35:b6:3e:63:1b:b1:f4:fe:
b6:75:bf:a3:19:20:7a:e0:34:b4:0f:ed:da:a9:23:f0:7b:52:
82:5b:3d:19:c8:3b:29:f2:6f:91:3f:89:48:a8:6b:65:9a:b1:
49:d8:4b:04:a5:92:89:8b:af:b7:0d:a3:d6:16:05:5b:e7:93:
6b:82:ab:2d:d2:6d:98:94:01:90:46:c6:9d:9f:3b:08:a3:ed:
0b:71:af:57:83:76:d3:79:d0:4e:bc:f7:28:53:42:08:fd:41:
c3:1b:01:7c:53:f2:40:2a:3e:87:0d:51:5d:f3:00:87:18:a2:
de:ab:14:86:8f:4f:4d:68:93:b8:47:9c:32:9e:9d:02:74:d9:
8d:82:7e:d4:d8:14:22:74:d4:c1:9a:e7:0a:62:69:62:80:10:
c0:ee:6d:5b:74:3e:fd:4d:2a:55:ef:71:f9:9b:27:a3:af:9b:
e6:be:8b:a7:bb:22:b1:d4:af:b0:79:f5:08:49:49:59:a5:bc:
af:c9:2d:20:75:02:65:6a:b4:6d:3e:6d:89:9d:ba:ce:69:89:
e9:39:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 09:12:23 2023 by rpki-client on console-fra.rpki-client.org