Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/mgQp5EwxLJBwfya1V771e05w744.roa
File: mgQp5EwxLJBwfya1V771e05w744.roa (raw, json)
Hash identifier: naybJErYGo6/J5660Mojp0ubSB6ajSsxsVgArm1DXMA=
Subject key identifier: 9A:04:29:E4:4C:31:2C:90:70:7F:26:B5:57:BE:F5:7B:4E:70:EF:8E
Certificate issuer: /CN=17802133d98b655a9f5411b700ec79347e1eb490
Certificate serial: 018BC9BC86064659B01E8541B76963FBC9E6
Authority key identifier: 17:80:21:33:D9:8B:65:5A:9F:54:11:B7:00:EC:79:34:7E:1E:B4:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4AhM9mLZVqfVBG3AOx5NH4etJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/mgQp5EwxLJBwfya1V771e05w744.roa
Signing time: Mon 13 Nov 2023 17:30:57 +0000
ROA not before: Mon 13 Nov 2023 17:30:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35608
IP address blocks: 176.97.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:bc:86:06:46:59:b0:1e:85:41:b7:69:63:fb:c9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17802133d98b655a9f5411b700ec79347e1eb490
Validity
Not Before: Nov 13 17:30:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a0429e44c312c90707f26b557bef57b4e70ef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:88:d5:e7:f5:72:76:03:63:d7:7c:20:69:5f:
e7:47:30:76:13:51:cd:06:35:2f:fc:16:b7:a6:b6:
38:bf:1c:c9:5c:d9:15:99:0c:47:6e:54:08:ea:7a:
b6:1d:19:77:d2:6e:50:1c:23:d4:32:92:86:46:ec:
ac:4c:b7:9b:74:3f:b8:79:eb:38:c2:2b:e5:40:02:
b3:65:fa:1a:ca:07:2b:54:87:00:a4:9a:8d:16:f0:
e0:a7:8a:b1:45:34:53:a5:83:e4:8e:9f:16:61:b8:
0e:fe:2a:07:78:bb:26:5f:5a:f7:0f:b6:88:2d:ea:
48:09:86:b9:74:c0:a1:9c:26:7d:5d:b4:65:a0:cc:
b2:05:a8:c5:5a:aa:dd:a5:b4:95:42:fe:8c:18:72:
69:31:af:fd:10:5c:33:fb:69:df:46:63:80:48:ff:
15:0a:de:75:be:00:95:9d:43:43:14:c5:64:db:9a:
b4:6c:c9:74:d8:2b:e2:58:82:e7:7a:5b:cc:ce:10:
c1:1b:16:84:a6:10:c7:26:da:7e:53:62:60:6b:c2:
16:b8:76:25:a1:91:0c:42:a6:ca:6a:ab:95:53:5d:
39:64:41:36:f3:33:90:53:5a:01:96:fe:31:2d:ae:
ca:8f:54:0b:2f:bf:92:e5:6c:cd:03:c9:4f:3a:04:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:04:29:E4:4C:31:2C:90:70:7F:26:B5:57:BE:F5:7B:4E:70:EF:8E
X509v3 Authority Key Identifier:
keyid:17:80:21:33:D9:8B:65:5A:9F:54:11:B7:00:EC:79:34:7E:1E:B4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4AhM9mLZVqfVBG3AOx5NH4etJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/mgQp5EwxLJBwfya1V771e05w744.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/F4AhM9mLZVqfVBG3AOx5NH4etJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.194.0/24
Signature Algorithm: sha256WithRSAEncryption
29:9e:bd:57:55:a4:4b:f6:62:da:a1:a3:00:d7:8b:6b:d1:d0:
4e:06:6f:c7:06:e2:d9:f5:ec:6c:2f:4d:f4:68:46:53:73:b7:
2d:1c:ad:67:4d:46:09:ea:f6:3c:87:ba:75:03:3b:3d:b4:70:
8f:d5:d3:46:fe:7d:dc:5d:b0:6d:9f:2e:d2:da:c0:32:a0:06:
d9:13:00:29:6c:4e:20:35:34:78:da:f7:ae:c4:76:06:56:3e:
7c:07:fb:39:9b:6c:40:4c:b6:dc:79:cb:61:60:af:d0:20:51:
b9:96:aa:a9:89:b8:67:09:ea:26:13:d1:c8:82:e5:22:04:f0:
e2:bb:cf:a5:35:c9:2d:a7:81:da:12:47:15:8c:8b:e8:15:5b:
83:be:e7:7f:cb:62:b9:73:50:f6:cf:18:64:25:fa:e6:c2:4a:
1e:50:bb:b3:56:c4:6f:96:02:da:6a:3c:86:a0:8a:d2:36:33:
f2:22:00:8a:93:b9:e5:e2:4b:df:a5:bd:db:9a:35:b8:91:ba:
af:4a:69:20:96:88:c8:03:14:f4:c7:c3:65:52:8a:94:95:8e:
8b:2c:5d:93:20:bd:44:03:49:1e:b6:cc:b4:1e:2f:32:2e:e6:
69:79:d8:e7:67:f3:64:90:fc:6e:66:43:46:05:3b:62:71:62:
63:56:f4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 14:22:46 2023 by rpki-client on console-fra.rpki-client.org