Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/8fd238-3ad6-448b-b902-caae24fa1d00/1/ColwGvAQAYLZ-sU-RVRpM2k0VyM.roa
File: ColwGvAQAYLZ-sU-RVRpM2k0VyM.roa (raw, json)
Hash identifier: YqV6Im0R37kWif6kiihe3Dyz0uPN3c8Fy+PZg1O4OG8=
Subject key identifier: 0A:89:70:1A:F0:10:01:82:D9:FA:C5:3E:45:54:69:33:69:34:57:23
Certificate issuer: /CN=b279dab9151c29c2cf39c3059e7af48a413a72e6
Certificate serial: 0187CBE2A7A1B9AA09C2F25D63E24DB532D5
Authority key identifier: B2:79:DA:B9:15:1C:29:C2:CF:39:C3:05:9E:7A:F4:8A:41:3A:72:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snnauRUcKcLPOcMFnnr0ikE6cuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/8fd238-3ad6-448b-b902-caae24fa1d00/1/ColwGvAQAYLZ-sU-RVRpM2k0VyM.roa
Signing time: Sat 29 Apr 2023 07:20:41 +0000
ROA not before: Sat 29 Apr 2023 07:20:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 176.97.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cb:e2:a7:a1:b9:aa:09:c2:f2:5d:63:e2:4d:b5:32:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b279dab9151c29c2cf39c3059e7af48a413a72e6
Validity
Not Before: Apr 29 07:20:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a89701af0100182d9fac53e4554693369345723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:e3:e7:66:35:c3:f9:8e:db:58:c1:53:e7:
92:16:ff:8b:49:bb:d0:84:27:97:16:41:d5:ce:f0:
7d:a1:b6:9d:36:05:b4:02:21:b1:d7:6e:a9:09:ed:
09:f8:90:a7:c0:76:7c:17:93:50:d1:b6:e0:b8:ff:
85:66:ac:06:0d:31:ea:df:f1:d7:a9:20:1d:48:f7:
ea:1c:ff:f5:a8:db:85:ce:7f:ae:82:3f:60:52:2f:
34:55:29:d1:aa:79:45:9a:45:e7:48:4e:bb:dd:7f:
b3:e4:0a:97:05:21:24:34:57:49:79:6b:68:8d:8d:
84:f1:53:27:db:15:e8:32:6c:7f:a3:44:5e:4e:22:
4a:e5:67:a0:f1:26:d4:3b:02:3f:81:54:24:eb:5e:
f2:66:90:56:40:6b:03:26:c7:c7:a1:dc:fb:9e:05:
bc:17:93:a9:96:ec:20:f4:6a:2f:36:d1:21:b7:4f:
0c:5c:4e:ba:4b:ac:7a:45:ad:a4:07:e5:61:71:4f:
be:eb:b7:02:0e:03:1c:41:a8:1b:2f:5a:09:4c:17:
a1:33:32:18:2f:b1:7e:e7:82:5e:b9:25:06:f6:b1:
83:6c:45:f2:17:d6:5b:ab:c0:fd:8c:91:37:85:93:
5d:34:0f:b5:76:a8:40:07:a5:db:da:7b:04:84:be:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:89:70:1A:F0:10:01:82:D9:FA:C5:3E:45:54:69:33:69:34:57:23
X509v3 Authority Key Identifier:
keyid:B2:79:DA:B9:15:1C:29:C2:CF:39:C3:05:9E:7A:F4:8A:41:3A:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snnauRUcKcLPOcMFnnr0ikE6cuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/8fd238-3ad6-448b-b902-caae24fa1d00/1/ColwGvAQAYLZ-sU-RVRpM2k0VyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/8fd238-3ad6-448b-b902-caae24fa1d00/1/snnauRUcKcLPOcMFnnr0ikE6cuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.220.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:64:5b:84:c6:c2:b7:eb:96:b8:4a:c0:91:90:f1:73:7d:5d:
da:4f:50:69:45:79:ed:8d:24:79:64:aa:2e:ab:1c:2b:7b:88:
93:8b:96:b3:f9:b0:52:ce:7e:1e:f6:34:8a:35:e1:f9:d5:a4:
13:91:71:ec:a9:0b:32:08:b0:a7:40:86:d4:17:67:33:c4:ca:
98:25:7c:1f:a0:3b:c2:46:ed:a0:24:45:00:9e:b9:12:e2:b7:
b9:54:27:cb:88:ac:0c:38:32:8e:37:ad:7d:4b:10:1e:67:1f:
f5:7e:1a:26:fc:de:33:8a:8a:27:62:66:54:b3:c0:90:f3:2b:
38:b6:3d:8d:ca:70:76:62:65:4c:a8:0c:9f:97:f2:83:17:5f:
cf:32:13:44:4a:f4:6e:c2:5c:95:c5:d3:fa:0f:7e:1d:04:41:
d2:5a:fc:40:f1:3b:e2:1e:42:ca:b3:e2:0b:5c:45:ca:a4:c3:
64:78:b7:03:86:68:a0:8e:c3:1e:a1:87:f5:ee:32:61:f2:8c:
36:52:4e:bc:5f:f3:f5:4a:5c:1e:aa:10:17:68:b3:20:09:15:
68:fa:9d:f1:da:5f:bf:bf:90:61:9f:14:30:02:c8:8d:65:3e:
91:f8:6d:4d:c4:1c:6a:9a:e7:06:b2:7f:49:e6:a2:19:48:ab:
d8:cb:c7:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfL4qehuaoJwvJdY+JNtTLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzlkYWI5MTUxYzI5YzJjZjM5YzMwNTllN2FmNDhhNDEz
YTcyZTYwHhcNMjMwNDI5MDcyMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTg5NzAxYWYwMTAwMTgyZDlmYWM1M2U0NTU0NjkzMzY5MzQ1NzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmjj52Y1w/mO21jBU+eSFv+LSbvQ
hCeXFkHVzvB9obadNgW0AiGx126pCe0J+JCnwHZ8F5NQ0bbguP+FZqwGDTHq3/HX
qSAdSPfqHP/1qNuFzn+ugj9gUi80VSnRqnlFmkXnSE673X+z5AqXBSEkNFdJeWto
jY2E8VMn2xXoMmx/o0ReTiJK5Weg8SbUOwI/gVQk617yZpBWQGsDJsfHodz7ngW8
F5Opluwg9GovNtEht08MXE66S6x6Ra2kB+VhcU++67cCDgMcQagbL1oJTBehMzIY
L7F+54JeuSUG9rGDbEXyF9Zbq8D9jJE3hZNdNA+1dqhAB6Xb2nsEhL54XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAqJcBrwEAGC2frFPkVUaTNpNFcjMB8GA1UdIwQY
MBaAFLJ52rkVHCnCzznDBZ569IpBOnLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25uYXVSVWNLY0xQT2NNRm5ucjBpa0U2Y3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84ZmQyMzgtM2FkNi00NDhiLWI5MDIt
Y2FhZTI0ZmExZDAwLzEvQ29sd0d2QVFBWUxaLXNVLVJWUnBNMmswVnlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84ZmQyMzgtM2FkNi00NDhiLWI5MDItY2FhZTI0ZmExZDAw
LzEvc25uYXVSVWNLY0xQT2NNRm5ucjBpa0U2Y3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGHcMA0G
CSqGSIb3DQEBCwUAA4IBAQCdZFuExsK365a4SsCRkPFzfV3aT1BpRXntjSR5ZKou
qxwre4iTi5az+bBSzn4e9jSKNeH51aQTkXHsqQsyCLCnQIbUF2czxMqYJXwfoDvC
Ru2gJEUAnrkS4re5VCfLiKwMODKON619SxAeZx/1fhom/N4zioonYmZUs8CQ8ys4
tj2NynB2YmVMqAyfl/KDF1/PMhNESvRuwlyVxdP6D34dBEHSWvxA8TviHkLKs+IL
XEXKpMNkeLcDhmigjsMeoYf17jJh8ow2Uk68X/P1SlweqhAXaLMgCRVo+p3x2l+/
v5BhnxQwAsiNZT6R+G1NxBxqmucGsn9J5qIZSKvYy8df
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:09 2024 by rpki-client on console-ams.rpki-client.org