Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/YpgUkQ4FuNdS4UldXvrWJ5k0-GA.roa
File: YpgUkQ4FuNdS4UldXvrWJ5k0-GA.roa (raw, json)
Hash identifier: pPFmLm5FM8GWNyj04AGdlvdj/EJ8FWQh6J3jdutuU/A=
Subject key identifier: 62:98:14:91:0E:05:B8:D7:52:E1:49:5D:5E:FA:D6:27:99:34:F8:60
Certificate issuer: /CN=d173b28579634dd908c4ef216e05ceb6bdf99f77
Certificate serial: A354EC
Authority key identifier: D1:73:B2:85:79:63:4D:D9:08:C4:EF:21:6E:05:CE:B6:BD:F9:9F:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XOyhXljTdkIxO8hbgXOtr35n3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/YpgUkQ4FuNdS4UldXvrWJ5k0-GA.roa
Signing time: Sat 01 Jan 2022 03:59:23 +0000
ROA not before: Sat 01 Jan 2022 03:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 176.97.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10704108 (0xa354ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d173b28579634dd908c4ef216e05ceb6bdf99f77
Validity
Not Before: Jan 1 03:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=629814910e05b8d752e1495d5efad6279934f860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:5f:b4:8d:f7:f5:15:8b:a1:39:df:13:92:
97:49:65:59:e0:c3:92:5b:89:e2:92:ec:c7:96:7e:
eb:c6:cf:6c:e9:55:33:0c:2f:c9:d9:04:c5:bc:58:
72:4d:8f:aa:f1:86:7f:9a:97:95:31:f4:8d:55:f4:
a9:8f:10:8a:fe:3b:65:18:fd:94:be:3c:78:63:aa:
9f:33:bd:f7:e1:07:c8:c2:20:08:a1:6f:fa:f3:d1:
fc:50:10:15:ba:6f:f8:52:05:3c:ef:1b:8e:60:d2:
1a:fc:9a:1e:fa:7c:dc:0b:38:67:f3:32:3e:2a:c6:
27:c4:d1:93:fc:2d:89:e4:9b:dc:81:6e:1d:ea:24:
6f:0e:5f:06:7a:c1:5b:9d:64:66:f8:79:42:03:aa:
b9:f8:49:eb:14:0b:c6:39:bb:58:e1:ea:3a:b8:86:
13:64:cd:9f:03:40:ce:33:d7:b8:df:8d:6b:05:2a:
3a:6a:fe:df:fa:d8:aa:6e:78:3c:2d:2c:16:5a:9d:
69:95:67:fc:24:55:46:6f:78:2e:df:c3:df:e8:00:
37:b3:0e:31:12:ea:bc:df:31:d2:7f:b9:67:6b:8b:
7a:2d:16:c2:2e:9b:13:b2:7e:5d:da:8d:e9:f9:6d:
d4:8f:86:10:bd:d2:20:ab:77:86:78:d2:53:95:97:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:98:14:91:0E:05:B8:D7:52:E1:49:5D:5E:FA:D6:27:99:34:F8:60
X509v3 Authority Key Identifier:
keyid:D1:73:B2:85:79:63:4D:D9:08:C4:EF:21:6E:05:CE:B6:BD:F9:9F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XOyhXljTdkIxO8hbgXOtr35n3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/YpgUkQ4FuNdS4UldXvrWJ5k0-GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/0XOyhXljTdkIxO8hbgXOtr35n3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.219.0/24
Signature Algorithm: sha256WithRSAEncryption
62:84:13:27:7c:c0:a1:87:c8:a4:34:69:d6:7e:e9:fc:47:1d:
cf:e3:3a:d4:bb:1e:ff:6f:ac:9c:a8:e0:71:4f:42:2f:b9:17:
c3:13:ee:e1:fb:c6:2b:0d:d0:62:cc:83:22:23:57:71:32:cd:
df:c3:25:7f:82:3e:67:7a:6f:82:0f:5a:d1:4c:f4:a6:09:58:
7c:2e:dd:2e:9a:d7:67:83:d0:ba:95:a6:e8:8f:b3:91:b4:52:
e0:63:dc:33:15:ba:78:21:37:e1:c4:63:fa:ce:8f:35:cc:a5:
d3:e6:fa:dd:a6:eb:b0:08:b4:0a:a1:2e:cb:68:fc:e4:1e:5e:
af:2d:d4:2d:30:b3:aa:46:d8:69:4f:8e:ff:f9:db:f8:d4:bc:
aa:50:cd:4d:10:9b:db:c8:0f:3d:07:e9:8f:1c:80:39:62:26:
da:e1:57:0b:5c:d0:a3:73:2c:9f:be:56:07:48:2e:8d:28:d6:
15:98:68:5d:2c:0c:d8:f6:02:a9:a4:6e:df:ef:c8:0d:36:0c:
94:5c:ec:d5:8f:5a:9b:72:0a:f4:ae:03:fc:00:ee:41:8f:21:
ac:89:08:d0:6d:b7:02:7f:a0:cd:e5:f1:f7:78:56:d5:f2:35:
20:b0:50:8a:bd:b1:00:fd:ad:32:6c:95:d5:77:f1:a2:1d:f0:
3e:90:b7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:59 2024 by rpki-client on console-ams.rpki-client.org