Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a0b9a9-afa9-4104-9fc6-e26de5753795/1/AqsBlitsGapKyavQFB7a7qgPi6g.roa
File: AqsBlitsGapKyavQFB7a7qgPi6g.roa (raw, json)
Hash identifier: KpSudNLTQDUqdkrjRD3EnEkOknHrjvVI6XaiLjCwWN8=
Subject key identifier: 02:AB:01:96:2B:6C:19:AA:4A:C9:AB:D0:14:1E:DA:EE:A8:0F:8B:A8
Certificate issuer: /CN=f1893e72d835c080ab4959af5e509d79a5fc39e5
Certificate serial: 01821778B67E9C408AC0BDA8F76AB17C859E
Authority key identifier: F1:89:3E:72:D8:35:C0:80:AB:49:59:AF:5E:50:9D:79:A5:FC:39:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Yk-ctg1wICrSVmvXlCdeaX8OeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a0b9a9-afa9-4104-9fc6-e26de5753795/1/AqsBlitsGapKyavQFB7a7qgPi6g.roa
Signing time: Tue 19 Jul 2022 17:19:23 +0000
ROA not before: Tue 19 Jul 2022 17:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 176.53.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:17:78:b6:7e:9c:40:8a:c0:bd:a8:f7:6a:b1:7c:85:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1893e72d835c080ab4959af5e509d79a5fc39e5
Validity
Not Before: Jul 19 17:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02ab01962b6c19aa4ac9abd0141edaeea80f8ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6b:43:2f:ff:8f:73:44:68:ee:46:39:0c:b0:
02:94:3a:07:dc:e2:71:ec:20:78:af:d1:ac:f9:e4:
45:f1:61:27:18:74:b0:5a:80:d0:01:df:94:ee:df:
3d:e4:66:62:e4:70:81:ca:b5:d1:81:00:41:3b:74:
63:c8:7a:2f:e1:be:24:f1:28:1a:11:b9:5d:cb:38:
94:62:56:14:b8:36:c5:8f:8c:11:35:c8:53:fc:3a:
67:a6:3c:1e:78:11:36:e7:4a:bd:46:17:1e:47:ed:
42:b9:30:eb:b0:a7:10:ba:1f:1c:3a:fe:8f:ef:9f:
c6:26:56:e4:bc:34:c9:c7:28:8d:57:a6:c4:b7:49:
f3:43:0b:90:5e:5f:f0:66:d1:7c:52:ce:15:d4:00:
6a:bc:54:a5:25:df:84:0d:4a:46:ad:fe:33:be:ae:
f3:ac:b8:4c:bb:9d:27:16:ca:27:ab:f2:f3:13:a7:
10:70:bf:31:fb:a1:ff:88:c9:e0:8a:7a:64:8c:1a:
c4:36:0d:30:6f:a3:14:4b:7c:4f:35:f4:1d:83:df:
33:61:c6:c7:5a:e7:7e:9a:3a:99:a0:c7:95:86:a6:
aa:78:f6:a8:77:3e:44:53:50:5f:f5:44:21:78:bd:
96:b3:42:db:53:02:dd:4a:01:ec:18:be:da:16:03:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AB:01:96:2B:6C:19:AA:4A:C9:AB:D0:14:1E:DA:EE:A8:0F:8B:A8
X509v3 Authority Key Identifier:
keyid:F1:89:3E:72:D8:35:C0:80:AB:49:59:AF:5E:50:9D:79:A5:FC:39:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Yk-ctg1wICrSVmvXlCdeaX8OeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a0b9a9-afa9-4104-9fc6-e26de5753795/1/AqsBlitsGapKyavQFB7a7qgPi6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a0b9a9-afa9-4104-9fc6-e26de5753795/1/8Yk-ctg1wICrSVmvXlCdeaX8OeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.168.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:43:35:d3:04:11:4b:f5:03:95:60:fa:2c:0a:75:8b:42:72:
66:ee:e3:4c:52:47:73:65:02:c9:ab:d1:9f:23:c6:31:fa:18:
1e:fb:61:ab:c7:58:fc:e5:6b:e1:18:ff:7d:0d:f3:c4:7a:f7:
e0:72:56:f6:45:96:f8:2b:fb:1a:7f:93:6a:cd:95:97:69:ef:
c5:80:59:a8:7b:41:3d:82:44:db:ef:21:43:b7:65:a3:a9:50:
09:73:9d:6d:77:2d:26:d6:bf:c7:d9:da:3f:39:4f:e0:60:2c:
54:29:a5:ba:44:0e:f7:fe:0a:57:76:e7:16:74:26:e1:c1:0d:
2a:85:65:07:7e:99:f9:7d:bb:1d:e8:2b:cd:b1:5b:01:1a:f9:
5f:68:43:f9:d9:83:f9:28:03:76:87:10:1a:63:4f:38:58:b4:
9b:44:67:c9:be:0f:96:ee:41:11:a2:86:c7:d0:63:ad:fc:fa:
88:f9:50:ae:dc:b3:b0:4e:3d:ba:02:3c:5e:d6:8e:b2:ea:c9:
38:e2:8f:59:d3:8d:44:ee:3f:9e:6f:5f:d3:76:1e:82:f5:9a:
9d:4f:4a:26:82:be:fc:46:5c:30:93:03:8f:bf:ec:b6:7e:1b:
81:15:af:cf:bd:c5:25:2f:f2:f5:8a:5e:48:30:83:78:02:85:
a6:90:be:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:15 2024 by rpki-client on console-fra.rpki-client.org