Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f01432-6718-4cb8-acb4-60abc45277c5/1/ns0BevYgWQFowGDnk0VEfIFFM_k.roa
File: ns0BevYgWQFowGDnk0VEfIFFM_k.roa (raw, json)
Hash identifier: F+oh03PGAZ+vnJpy6G7kTCfODSRmZH1EJtkLIJFkZjs=
Subject key identifier: 9E:CD:01:7A:F6:20:59:01:68:C0:60:E7:93:45:44:7C:81:45:33:F9
Certificate issuer: /CN=05655ac2275e6b8a0286022037c7f8594af58b84
Certificate serial: 01882086797D45A2C6AA0039FD521940EE6E
Authority key identifier: 05:65:5A:C2:27:5E:6B:8A:02:86:02:20:37:C7:F8:59:4A:F5:8B:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWVawidea4oChgIgN8f4WUr1i4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f01432-6718-4cb8-acb4-60abc45277c5/1/ns0BevYgWQFowGDnk0VEfIFFM_k.roa
Signing time: Mon 15 May 2023 17:47:43 +0000
ROA not before: Mon 15 May 2023 17:47:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 176.97.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:79:7d:45:a2:c6:aa:00:39:fd:52:19:40:ee:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05655ac2275e6b8a0286022037c7f8594af58b84
Validity
Not Before: May 15 17:47:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ecd017af620590168c060e79345447c814533f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0c:53:f9:b3:a5:1e:5c:bf:45:70:3b:fc:58:
db:d6:e1:4b:38:53:de:ba:d1:9f:0f:2b:bf:45:b4:
f3:34:a6:05:17:59:60:0b:f9:80:37:85:5c:f7:d8:
f7:58:69:cb:0b:ab:ba:62:18:68:10:ab:bf:e4:9e:
34:34:c3:22:2c:b4:ed:d8:6f:35:9a:c3:c8:d6:38:
7b:b4:34:21:4b:d6:9c:9a:fd:ca:05:a0:28:8b:3b:
2e:56:87:21:58:b3:f2:0a:e7:37:3c:83:bc:18:b3:
e0:06:25:b4:ca:60:55:9a:a0:d6:b8:7d:2e:44:fd:
7b:66:dd:59:1f:5d:33:21:0f:fd:b5:6d:dd:75:f7:
7f:84:ea:8f:8c:bb:fc:8a:9f:d8:ea:4a:bf:8c:1a:
4a:7f:2f:ec:18:a8:d2:64:46:91:9d:ae:c6:11:33:
43:ea:e2:5a:84:64:0f:0a:a3:fd:77:30:c5:d7:60:
a9:35:68:82:2c:82:44:cc:ba:b0:ec:98:9b:99:11:
2a:aa:31:c6:ef:7d:08:12:91:03:05:e7:3b:74:a2:
7a:40:a7:75:95:39:ca:80:53:a7:cd:fe:a2:d1:90:
12:50:32:a9:79:b1:ed:5e:f7:43:e4:e8:4e:35:a2:
bb:f2:7e:bf:b8:99:e4:1e:d6:34:0f:db:13:42:4f:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CD:01:7A:F6:20:59:01:68:C0:60:E7:93:45:44:7C:81:45:33:F9
X509v3 Authority Key Identifier:
keyid:05:65:5A:C2:27:5E:6B:8A:02:86:02:20:37:C7:F8:59:4A:F5:8B:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWVawidea4oChgIgN8f4WUr1i4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f01432-6718-4cb8-acb4-60abc45277c5/1/ns0BevYgWQFowGDnk0VEfIFFM_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f01432-6718-4cb8-acb4-60abc45277c5/1/BWVawidea4oChgIgN8f4WUr1i4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.200.0/24
Signature Algorithm: sha256WithRSAEncryption
33:54:10:68:3d:94:1f:bd:0f:0c:1d:63:02:69:be:3d:84:d9:
e9:4a:2d:5a:a3:f2:1d:85:c6:30:39:81:9b:a0:a7:10:f1:47:
93:e9:e6:4f:9f:d8:d0:e0:5d:46:8d:f3:3c:b3:38:c7:0f:48:
16:54:de:8f:36:55:1f:00:88:6f:f4:8e:24:7c:91:3f:c0:69:
17:9b:c0:15:cf:53:4f:31:7b:4b:eb:6e:c7:98:94:ce:bc:d8:
a0:fb:52:fd:c1:b8:76:88:0b:77:0a:5d:92:7a:d3:6e:4c:bd:
d9:3d:42:b5:d9:5d:af:0d:d8:c9:62:76:51:d8:0b:a9:bc:ae:
ab:29:1f:2d:58:cd:d4:9e:78:26:df:be:0d:bc:74:9e:5e:9e:
38:9e:a4:aa:86:28:8b:b2:4c:5e:e8:72:62:39:be:93:33:75:
ee:35:57:da:1c:55:05:30:41:e6:38:c2:34:02:4a:4a:58:77:
13:83:53:18:63:f5:7f:54:49:63:98:41:45:e0:e0:15:65:10:
dd:80:c4:f9:d1:ce:68:10:e0:f4:9d:8d:2b:22:d6:f2:7c:62:
89:87:68:b8:56:67:2d:b6:5d:d9:64:c6:bd:87:c5:56:d2:55:
ff:f6:f5:ef:9d:1d:88:02:aa:bc:d3:62:51:c0:7b:66:e8:bb:
0d:ad:45:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 15:22:21 2023 by rpki-client on console-fra.rpki-client.org