Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/8fd238-3ad6-448b-b902-caae24fa1d00/1/oARn17WsOZiyM3exl7e-MzQnwfU.roa
File: oARn17WsOZiyM3exl7e-MzQnwfU.roa (raw, json)
Hash identifier: DA/BZPxPAAw9cpvmhFIk7260M5GI7DBpCQPpEng0C3g=
Subject key identifier: A0:04:67:D7:B5:AC:39:98:B2:33:77:B1:97:B7:BE:33:34:27:C1:F5
Certificate issuer: /CN=b279dab9151c29c2cf39c3059e7af48a413a72e6
Certificate serial: 0186E0B1B1F7B0A02AC6F23AB5BFC07EFFBA
Authority key identifier: B2:79:DA:B9:15:1C:29:C2:CF:39:C3:05:9E:7A:F4:8A:41:3A:72:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snnauRUcKcLPOcMFnnr0ikE6cuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/8fd238-3ad6-448b-b902-caae24fa1d00/1/oARn17WsOZiyM3exl7e-MzQnwfU.roa
Signing time: Tue 14 Mar 2023 15:16:27 +0000
ROA not before: Tue 14 Mar 2023 15:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48011
IP address blocks: 176.97.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:b1:b1:f7:b0:a0:2a:c6:f2:3a:b5:bf:c0:7e:ff:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b279dab9151c29c2cf39c3059e7af48a413a72e6
Validity
Not Before: Mar 14 15:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a00467d7b5ac3998b23377b197b7be333427c1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:77:44:2d:1a:7f:5c:09:85:7c:90:cc:53:
1b:22:41:77:86:e3:ad:7f:95:ed:62:f7:02:d7:24:
66:a2:2a:09:24:b1:f5:1f:72:c7:c1:28:ad:e1:21:
c7:17:f6:48:5e:c9:a8:1d:2a:d5:78:7f:7a:a7:99:
3f:fa:e0:a9:66:b6:1a:ed:62:8c:28:33:24:cd:93:
15:49:75:a5:b0:33:e7:e8:fc:81:5e:9f:b7:9f:ba:
73:18:fa:3d:74:e7:5d:6a:27:58:08:f5:2a:56:e3:
17:d7:63:af:59:13:d3:83:ee:16:9b:1a:f9:0d:07:
b6:9b:d0:91:08:13:a2:4d:96:86:d7:dc:7d:6e:ab:
b0:07:4f:fb:57:95:09:20:12:cc:c4:76:e9:eb:3d:
d3:ee:90:ff:95:b1:13:98:38:32:9c:8c:4e:34:5b:
9b:16:f1:17:d9:39:0f:9f:6f:f0:00:99:52:d9:ac:
db:30:de:0b:eb:c4:f0:ef:94:5d:21:02:d8:19:53:
85:08:69:fd:4c:f0:a3:43:8b:a2:e3:d1:be:dd:fe:
15:81:be:3c:c0:26:df:93:e7:1f:9d:af:fc:eb:55:
3d:a7:de:20:6a:8b:cc:6d:84:9b:b5:5a:09:86:d5:
44:d5:13:b4:25:da:fe:b3:05:56:63:41:64:54:f6:
e1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:67:D7:B5:AC:39:98:B2:33:77:B1:97:B7:BE:33:34:27:C1:F5
X509v3 Authority Key Identifier:
keyid:B2:79:DA:B9:15:1C:29:C2:CF:39:C3:05:9E:7A:F4:8A:41:3A:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snnauRUcKcLPOcMFnnr0ikE6cuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/8fd238-3ad6-448b-b902-caae24fa1d00/1/oARn17WsOZiyM3exl7e-MzQnwfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/8fd238-3ad6-448b-b902-caae24fa1d00/1/snnauRUcKcLPOcMFnnr0ikE6cuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.220.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5b:ee:3d:14:b8:23:d4:d1:4e:ba:e8:02:0f:94:64:35:07:
a0:89:62:b8:ce:a7:4b:c8:ec:4e:82:67:fd:7e:6a:94:b8:f9:
c0:63:f9:2e:47:36:f3:14:ca:0d:1f:cb:78:c5:74:a2:a0:39:
16:6f:ed:c6:6a:28:d6:ca:36:c2:b4:32:a2:74:93:e6:64:40:
65:b3:70:03:1e:91:78:72:c7:d7:07:bc:57:17:88:f3:56:51:
02:10:5c:d5:80:14:f6:1d:76:d5:3a:2a:2f:79:bd:d3:12:e8:
e3:2f:cb:0b:cd:1e:7f:5f:63:1f:bf:f8:0e:c1:b2:5b:d7:3d:
50:6d:9f:c6:45:e9:60:a9:b6:34:1f:dd:aa:fe:be:16:ec:89:
91:35:16:5d:9a:7e:0e:c2:60:7b:be:66:23:e8:7d:40:03:1f:
03:af:31:39:43:cd:8a:85:38:c9:07:5c:a2:72:03:ec:3b:b8:
78:85:ed:b5:22:81:f6:73:81:af:f2:0e:30:4c:a7:a1:d7:ed:
f2:89:09:99:f7:f1:e5:f0:9c:b2:a7:9f:91:bb:68:45:ee:20:
d8:4e:c5:55:a7:69:b6:39:8b:8f:d7:d1:4a:1f:5a:46:4c:33:
ec:5b:2b:7a:92:34:eb:76:41:78:f4:a5:a2:95:ff:b1:20:5e:
28:55:4a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:09 2024 by rpki-client on console-ams.rpki-client.org