Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/88adb9-3b5e-4a26-90c8-0dcbb8bc8f25/1/R3UbHtVXZFHzxK7YC1YofBk-okI.roa
File: R3UbHtVXZFHzxK7YC1YofBk-okI.roa (raw, json)
Hash identifier: Zhh+K7h4AqLReerYYABFg438r+q7KWf7lGkZ0bnvQWw=
Subject key identifier: 47:75:1B:1E:D5:57:64:51:F3:C4:AE:D8:0B:56:28:7C:19:3E:A2:42
Certificate issuer: /CN=22aae18b4ab57ae012b2e4143501883f53e48a7b
Certificate serial: 0183F645340C936E1F5105AD90985758C665
Authority key identifier: 22:AA:E1:8B:4A:B5:7A:E0:12:B2:E4:14:35:01:88:3F:53:E4:8A:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqrhi0q1euASsuQUNQGIP1Pkins.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/88adb9-3b5e-4a26-90c8-0dcbb8bc8f25/1/R3UbHtVXZFHzxK7YC1YofBk-okI.roa
Signing time: Thu 20 Oct 2022 16:41:13 +0000
ROA not before: Thu 20 Oct 2022 16:41:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 176.53.158.0/23 maxlen: 23
176.53.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:45:34:0c:93:6e:1f:51:05:ad:90:98:57:58:c6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22aae18b4ab57ae012b2e4143501883f53e48a7b
Validity
Not Before: Oct 20 16:41:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47751b1ed5576451f3c4aed80b56287c193ea242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:d9:6f:c5:db:d3:b1:5a:95:0a:17:ca:64:
92:18:cb:22:20:84:5c:2b:76:66:63:e3:de:e3:9d:
6c:07:64:74:b8:ef:58:3a:63:81:de:c4:19:05:99:
60:2b:6d:19:44:14:bc:1a:3c:59:74:51:9c:95:c8:
41:12:98:95:d1:d4:56:6a:d4:4e:39:da:a1:51:9e:
16:0a:09:27:c6:57:ec:ab:81:29:7b:e3:5e:04:56:
c5:75:f9:84:39:cb:11:ed:a3:8e:27:99:2f:88:9c:
ac:2c:e6:46:43:20:d2:99:17:2f:b3:44:26:2e:2a:
79:22:91:75:e7:e2:8c:f9:bc:c5:21:2f:fb:e7:f8:
22:ff:6a:da:78:6b:ec:d5:38:2c:32:82:26:88:45:
35:79:a4:70:96:3e:f6:36:11:60:36:7a:a5:dd:7d:
be:b7:3c:4f:9e:46:e0:c7:65:77:e7:e1:e6:c9:f6:
98:36:bd:99:07:73:9a:bb:80:27:6c:df:b9:17:ee:
62:6c:86:3f:1d:06:f3:7e:c2:cc:ed:f1:02:19:5c:
2b:6c:86:b0:62:e1:39:d1:53:9c:ac:75:74:27:82:
36:59:c2:33:4d:6f:b0:9c:0d:0a:0c:68:d2:ae:c9:
37:f5:1f:86:1a:b6:ab:fc:e4:7f:7c:05:cc:31:93:
7f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:75:1B:1E:D5:57:64:51:F3:C4:AE:D8:0B:56:28:7C:19:3E:A2:42
X509v3 Authority Key Identifier:
keyid:22:AA:E1:8B:4A:B5:7A:E0:12:B2:E4:14:35:01:88:3F:53:E4:8A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqrhi0q1euASsuQUNQGIP1Pkins.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/88adb9-3b5e-4a26-90c8-0dcbb8bc8f25/1/R3UbHtVXZFHzxK7YC1YofBk-okI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/88adb9-3b5e-4a26-90c8-0dcbb8bc8f25/1/Iqrhi0q1euASsuQUNQGIP1Pkins.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.156.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:d8:9f:59:6d:da:3e:85:7e:47:4f:fe:ba:44:70:2d:4e:28:
2c:34:13:2c:3f:e4:dd:93:57:97:88:da:2a:bc:e9:25:09:94:
21:9c:af:c3:a6:6a:21:6e:52:6e:f4:24:40:c6:9e:b8:72:d8:
61:4f:3c:5f:de:4a:94:80:40:b6:dc:f4:db:04:8f:42:4a:07:
89:c8:b4:5b:a9:5d:6a:74:dd:7f:75:69:08:5e:6c:e2:fe:6b:
20:d7:18:c1:9d:30:1c:06:55:ad:99:fc:af:33:d5:54:c2:4f:
69:fa:b8:bb:05:0b:0a:0d:ec:2c:00:44:cb:85:36:c1:14:44:
fc:88:d9:f3:f0:d1:18:f9:c1:3b:87:da:c6:6c:31:92:cf:58:
23:40:54:1b:81:07:a7:a6:45:3e:8f:8e:f0:f1:82:2e:4d:37:
2d:e9:9b:77:dc:0f:4d:0d:22:81:ca:22:35:70:b8:29:ae:23:
56:d6:dc:84:bf:e2:30:fc:76:3f:00:4e:73:3a:e2:bf:5d:8f:
38:a6:28:60:35:4b:61:c8:4a:0e:f9:59:3d:2d:84:bd:39:46:
e6:12:3a:4a:a1:8b:f6:20:4c:56:65:b3:d4:4d:57:6c:dc:43:
79:69:94:b7:e5:ff:2f:ea:12:ae:eb:4f:78:8c:f3:29:8e:bd:
e5:a5:cb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org