Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/2SZQsZ2ekOFmId4U85smvCR8c_E.roa
File: 2SZQsZ2ekOFmId4U85smvCR8c_E.roa (raw, json)
Hash identifier: q9DR7uPK1fCIfj/80ZRHdL/qK6XYuboWomZU3ov7+/w=
Subject key identifier: D9:26:50:B1:9D:9E:90:E1:66:21:DE:14:F3:9B:26:BC:24:7C:73:F1
Certificate issuer: /CN=d173b28579634dd908c4ef216e05ceb6bdf99f77
Certificate serial: A3BD6B
Authority key identifier: D1:73:B2:85:79:63:4D:D9:08:C4:EF:21:6E:05:CE:B6:BD:F9:9F:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XOyhXljTdkIxO8hbgXOtr35n3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/2SZQsZ2ekOFmId4U85smvCR8c_E.roa
Signing time: Sat 01 Jan 2022 03:59:23 +0000
ROA not before: Sat 01 Jan 2022 03:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 176.97.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10730859 (0xa3bd6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d173b28579634dd908c4ef216e05ceb6bdf99f77
Validity
Not Before: Jan 1 03:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d92650b19d9e90e16621de14f39b26bc247c73f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:d1:20:c0:6c:38:3f:dc:b4:6e:c4:6c:c9:
3a:27:6a:27:ea:d4:98:fe:8a:76:56:40:3f:be:7f:
9e:26:d1:87:8d:39:85:e2:19:37:44:55:a7:71:e9:
23:e4:10:8d:81:d7:85:3b:8d:e2:fc:3d:da:3d:c2:
69:4b:aa:2e:3a:43:02:72:01:94:03:2f:12:0d:0f:
a5:ab:b9:40:00:3a:b4:a1:37:92:8e:c8:cc:89:e6:
3c:ed:0a:67:b5:31:00:8e:c7:0a:34:cc:c2:7a:a3:
92:39:12:46:9f:c8:11:f2:51:50:99:05:0d:f4:e2:
c9:f5:01:1e:61:9d:cf:a7:e2:0d:cc:1e:0f:67:90:
15:df:34:0d:5c:b1:6e:ab:21:00:b7:8d:3d:b1:cb:
8b:c9:5c:71:f4:41:5e:fc:6e:aa:35:30:24:bc:b6:
54:6c:2d:d3:96:c9:72:96:78:c7:22:4b:96:5f:79:
a4:7d:7b:6f:b7:11:e8:8d:03:84:be:93:56:95:5a:
bc:47:6f:f9:fc:a7:0e:9e:1d:e0:b4:19:91:a1:cf:
18:7d:62:29:32:e0:1e:2d:5d:de:1e:7c:af:4a:c9:
4f:04:c6:fe:2c:c8:01:8c:33:39:0a:e3:73:b3:32:
6f:46:69:e6:73:5f:50:ee:6d:15:8d:7b:a7:41:b2:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:26:50:B1:9D:9E:90:E1:66:21:DE:14:F3:9B:26:BC:24:7C:73:F1
X509v3 Authority Key Identifier:
keyid:D1:73:B2:85:79:63:4D:D9:08:C4:EF:21:6E:05:CE:B6:BD:F9:9F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XOyhXljTdkIxO8hbgXOtr35n3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/2SZQsZ2ekOFmId4U85smvCR8c_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/0XOyhXljTdkIxO8hbgXOtr35n3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.219.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:bd:bc:4d:59:77:d6:ee:30:d6:a8:e9:d3:2d:d7:36:3b:ec:
94:ea:a1:04:45:8b:cd:e8:a6:37:37:b8:b7:36:3f:45:f4:7d:
df:af:f7:44:b0:e8:96:b3:08:f9:a8:66:e9:40:c0:3a:93:76:
7e:18:03:e8:62:74:34:12:85:7f:1b:0d:b8:9c:b9:46:26:a5:
2f:d3:0d:81:28:8a:a2:a2:66:57:c1:6b:92:05:55:31:f5:85:
dc:35:c5:72:e7:5d:e4:4d:69:22:9c:d8:49:e5:af:c3:41:64:
89:f0:d7:c0:20:95:35:71:47:c9:44:14:3e:71:33:dd:8c:1f:
86:5a:91:4d:09:fd:09:6b:50:50:45:5c:3b:69:12:4f:24:c6:
b3:e4:46:2c:a6:f7:5f:62:b7:16:6f:0e:08:f2:01:3d:28:42:
81:8f:e8:5b:d9:7f:51:1e:17:8b:ac:c0:f5:11:ea:66:d3:b8:
f1:dd:76:26:70:03:ac:1f:09:b7:72:27:89:ee:66:fc:e8:f0:
53:16:a3:4d:53:cd:2a:be:a6:04:e2:21:4f:d0:17:69:7b:8e:
bc:d2:62:7c:dc:1f:37:0a:25:1e:76:7f:ad:e3:44:f9:b4:78:
0e:e5:d0:97:84:cf:43:23:5d:25:10:6d:1f:c8:3d:b7:a9:b8:
6d:d6:5f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:59 2024 by rpki-client on console-ams.rpki-client.org