Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/xAzpU1yrHnIwQRMs6oebb46nba8.roa
File: xAzpU1yrHnIwQRMs6oebb46nba8.roa (raw, json)
Hash identifier: zgzEjHzYbQsy1xXrPsB0d6eTHkgO/I0x1eUAmQcGI5k=
Subject key identifier: C4:0C:E9:53:5C:AB:1E:72:30:41:13:2C:EA:87:9B:6F:8E:A7:6D:AF
Certificate issuer: /CN=5788ab5be2a42aed6c6e7b5efa249291e7c8a883
Certificate serial: 01856FF016032A25CE93260C0C32279FCCEB
Authority key identifier: 57:88:AB:5B:E2:A4:2A:ED:6C:6E:7B:5E:FA:24:92:91:E7:C8:A8:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4irW-KkKu1sbnte-iSSkefIqIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/xAzpU1yrHnIwQRMs6oebb46nba8.roa
Signing time: Mon 02 Jan 2023 00:44:43 +0000
ROA not before: Mon 02 Jan 2023 00:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 176.97.210.0/24 maxlen: 24
2a12:b200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:16:03:2a:25:ce:93:26:0c:0c:32:27:9f:cc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5788ab5be2a42aed6c6e7b5efa249291e7c8a883
Validity
Not Before: Jan 2 00:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c40ce9535cab1e723041132cea879b6f8ea76daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:51:bd:df:4e:05:15:89:66:a7:a7:93:33:
8a:6b:0b:d9:e0:be:13:a7:31:ff:36:9f:49:bd:0e:
8a:91:95:4a:79:87:43:d8:e3:15:86:14:94:ff:44:
aa:a7:15:14:8d:1f:42:8a:42:4d:17:10:e2:a7:c4:
c2:2d:e4:5e:26:61:aa:1d:34:0f:17:48:a4:36:06:
13:96:fd:6a:88:6c:14:38:51:47:96:b6:0c:86:69:
0f:71:05:70:a2:1f:0e:d6:4e:0b:3c:97:e6:e3:12:
a3:a1:2a:3f:82:f2:80:9d:ee:fb:c1:d8:ad:51:76:
7a:36:a2:d3:d2:6a:4e:48:25:76:42:36:b5:53:52:
6d:a8:fe:cf:e3:26:7c:90:08:63:53:3f:c7:0e:bd:
66:13:7c:7e:76:31:11:fe:97:fd:9b:7a:77:22:d0:
8d:03:98:22:b9:95:4b:10:a6:2e:b8:d7:6e:7f:48:
22:35:32:cc:99:f0:7c:04:75:c7:10:cf:59:a8:d2:
e8:af:db:11:57:99:de:70:da:5e:ed:38:80:ac:e1:
72:eb:4c:df:e9:96:01:a1:f7:f9:83:3b:34:56:96:
f1:36:bc:fd:21:b6:ce:96:a8:23:1e:70:f3:cc:44:
c5:c2:7a:97:97:1a:45:47:05:89:f8:07:94:90:af:
37:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:E9:53:5C:AB:1E:72:30:41:13:2C:EA:87:9B:6F:8E:A7:6D:AF
X509v3 Authority Key Identifier:
keyid:57:88:AB:5B:E2:A4:2A:ED:6C:6E:7B:5E:FA:24:92:91:E7:C8:A8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4irW-KkKu1sbnte-iSSkefIqIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/xAzpU1yrHnIwQRMs6oebb46nba8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/V4irW-KkKu1sbnte-iSSkefIqIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.210.0/24
IPv6:
2a12:b200::/29
Signature Algorithm: sha256WithRSAEncryption
56:21:c3:ab:25:bb:88:4d:d2:3b:fc:17:6a:93:e8:90:51:3b:
e3:38:e8:78:ea:3a:b8:d9:78:76:21:fb:d1:0c:c0:79:e4:3f:
41:0d:c3:82:35:98:0b:4f:7d:7a:56:ad:bc:67:cf:45:1b:26:
55:97:ab:5f:6f:10:82:37:76:ad:f8:51:1e:69:5f:a9:a8:02:
c5:24:9f:3a:05:e5:7b:18:f8:cc:31:3b:12:0f:7a:90:76:d2:
23:85:72:25:24:dc:d2:16:f2:fc:c9:01:13:3e:3c:3b:57:a8:
03:ba:7f:c3:f4:6b:b8:bb:ae:c7:27:c1:93:b4:87:38:e6:26:
73:15:6c:76:42:e3:a1:55:62:a1:60:c7:6d:86:d7:27:17:47:
41:08:e4:79:bc:25:c8:fc:cd:0b:f8:ea:bf:a4:59:c4:dd:62:
9c:77:32:8a:63:54:d0:82:db:fe:21:e3:b8:83:89:f8:84:84:
3c:f3:7c:39:49:43:d1:16:eb:bf:50:f0:5f:61:33:15:4c:af:
37:e5:65:02:71:75:40:bf:b1:40:9e:1a:2c:e1:ea:8f:b6:29:
14:69:76:25:70:c7:1e:52:06:b8:2f:0d:a5:17:22:86:b1:11:
41:1c:ac:b7:9d:8c:1b:b0:6d:fd:ad:f1:be:47:ee:48:51:76:
56:6c:3a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org