Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/456c09-e007-4b01-ab85-fa2b3d77bc2c/1/fYxhUUI8G0Mh9bSXjAGIzrJn8NY.roa
File: fYxhUUI8G0Mh9bSXjAGIzrJn8NY.roa (raw, json)
Hash identifier: BvIPLKmEnm/IXaXJHZkCYvC6Pffl0ChCCVnayvKZWUM=
Subject key identifier: 7D:8C:61:51:42:3C:1B:43:21:F5:B4:97:8C:01:88:CE:B2:67:F0:D6
Certificate issuer: /CN=2c3464e7df0a916ef3432427c7d6922ebc49d179
Certificate serial: 01856F393130BEA40E9CAD3ABD25360A78D2
Authority key identifier: 2C:34:64:E7:DF:0A:91:6E:F3:43:24:27:C7:D6:92:2E:BC:49:D1:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDRk598KkW7zQyQnx9aSLrxJ0Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/456c09-e007-4b01-ab85-fa2b3d77bc2c/1/fYxhUUI8G0Mh9bSXjAGIzrJn8NY.roa
Signing time: Sun 01 Jan 2023 21:24:57 +0000
ROA not before: Sun 01 Jan 2023 21:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 176.97.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:31:30:be:a4:0e:9c:ad:3a:bd:25:36:0a:78:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3464e7df0a916ef3432427c7d6922ebc49d179
Validity
Not Before: Jan 1 21:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d8c6151423c1b4321f5b4978c0188ceb267f0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:6c:51:66:3d:d2:f1:b8:54:55:3e:23:b8:
25:b1:1e:9e:02:ef:da:ec:a3:0a:74:cd:2f:35:1c:
cf:fe:c7:0c:99:fb:da:f9:3d:56:74:c3:12:56:84:
54:e9:08:53:c9:aa:8d:13:6c:64:36:f3:27:30:63:
91:45:6b:9b:4d:af:c9:d6:9a:07:85:d6:23:50:dc:
ef:3c:55:b0:dd:08:62:18:71:82:d8:ab:47:e6:bf:
90:58:5f:f0:a1:6c:10:ad:a0:04:c1:8a:39:77:a9:
b0:1f:63:6a:e8:22:4f:c8:ae:d7:72:4f:0a:33:5a:
07:32:78:77:f2:a9:e0:d6:05:e0:89:da:06:cb:49:
05:35:e4:fc:17:94:10:0d:08:d9:22:85:42:3e:2e:
93:c9:c8:da:90:9e:53:25:a3:b8:dd:7d:5c:2d:0a:
28:4d:2f:16:70:b9:01:45:54:fd:09:fc:d1:7f:a3:
6f:40:c3:c7:e4:47:6f:41:d2:89:57:00:9a:44:6a:
55:57:d5:98:b0:b5:f6:b5:8d:0b:5b:65:0d:3d:6a:
20:c2:99:1c:77:c6:23:0f:d1:b6:8c:d1:90:f4:39:
8f:08:be:85:ec:35:37:88:b5:50:7a:64:b8:6d:32:
3f:d7:c4:c2:c9:0a:24:d1:d3:91:f6:b6:eb:9e:31:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8C:61:51:42:3C:1B:43:21:F5:B4:97:8C:01:88:CE:B2:67:F0:D6
X509v3 Authority Key Identifier:
keyid:2C:34:64:E7:DF:0A:91:6E:F3:43:24:27:C7:D6:92:2E:BC:49:D1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDRk598KkW7zQyQnx9aSLrxJ0Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/456c09-e007-4b01-ab85-fa2b3d77bc2c/1/fYxhUUI8G0Mh9bSXjAGIzrJn8NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/456c09-e007-4b01-ab85-fa2b3d77bc2c/1/LDRk598KkW7zQyQnx9aSLrxJ0Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.204.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e2:78:e9:29:18:d2:0a:63:c4:af:1d:9e:f2:21:a4:75:23:
b8:a2:c6:bf:17:66:31:fe:de:cb:ad:d6:f5:1d:05:c0:09:ed:
8e:4b:e7:31:90:91:f3:ef:db:c4:04:8f:4f:6d:b8:81:07:76:
61:5c:7b:43:60:bf:8e:96:47:a3:e7:04:0e:43:0b:3d:2e:76:
4c:64:e8:ea:d5:ef:a2:2a:05:13:0d:6f:c9:4d:89:c8:a3:48:
85:c0:eb:45:9f:d4:38:94:b9:3b:56:8d:38:25:2e:35:a5:ae:
18:3e:c0:1d:d1:cc:a6:86:84:d6:48:eb:cc:63:ea:25:1c:1a:
1b:54:a8:cc:d2:62:8d:67:be:e9:3b:cf:a7:95:46:6b:cb:3f:
5d:b2:3b:62:97:ee:fe:79:7e:d2:3d:01:ff:19:56:39:a3:64:
89:94:cd:13:dd:cf:4d:df:b7:37:c7:d1:ff:75:88:b2:8b:09:
76:2f:14:cb:bc:51:10:25:13:e9:7e:c1:4e:c7:ee:64:3e:7b:
5e:88:e9:80:d6:91:7d:cd:48:b3:3f:36:93:d4:38:c9:4c:0b:
7e:b5:a2:79:87:50:fe:67:21:37:a4:29:2b:30:92:67:ac:a0:
bc:95:d9:18:a6:0a:7f:44:69:6c:72:b0:e7:4c:e0:1a:e4:1d:
ab:6d:0c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:23 2024 by rpki-client on console-ams.rpki-client.org