Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5fbe06-9cba-4e6f-9e2e-1d2df95b7b14/1/uCWPYE-g37dEB-1PWFriFvoRY3w.roa
File: uCWPYE-g37dEB-1PWFriFvoRY3w.roa (raw, json)
Hash identifier: zsX1RFSdavKlMCGoiK6ljYBYdA14ptqRMo0TWYFLcIc=
Subject key identifier: B8:25:8F:60:4F:A0:DF:B7:44:07:ED:4F:58:5A:E2:16:FA:11:63:7C
Certificate issuer: /CN=fd64b6e517e76edf05f49d1f812dfad622d44287
Certificate serial: 0188303D772BAEDCB416BE7D3D582DACB403
Authority key identifier: FD:64:B6:E5:17:E7:6E:DF:05:F4:9D:1F:81:2D:FA:D6:22:D4:42:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WS25Rfnbt8F9J0fgS361iLUQoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5fbe06-9cba-4e6f-9e2e-1d2df95b7b14/1/uCWPYE-g37dEB-1PWFriFvoRY3w.roa
Signing time: Thu 18 May 2023 19:01:54 +0000
ROA not before: Thu 18 May 2023 19:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 176.116.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:3d:77:2b:ae:dc:b4:16:be:7d:3d:58:2d:ac:b4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd64b6e517e76edf05f49d1f812dfad622d44287
Validity
Not Before: May 18 19:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8258f604fa0dfb74407ed4f585ae216fa11637c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:22:ca:39:ef:ea:5a:bd:4e:12:e5:34:60:4f:
90:1f:4a:ef:aa:56:ef:12:68:51:17:e1:c1:a9:fc:
4b:d4:e8:2e:7e:40:5b:3a:60:a8:5a:3b:62:c3:3b:
d1:99:da:0a:5c:f1:02:a1:76:3f:fc:13:a3:e1:18:
82:3b:01:6d:08:aa:c9:a8:0b:40:65:f2:52:8e:5f:
c7:96:28:43:f7:54:0c:df:00:bd:70:db:f2:68:c5:
5b:b1:cc:71:af:1b:3f:05:22:50:2e:f5:11:31:f0:
12:75:03:2b:83:29:de:6d:fc:28:dd:f5:79:39:65:
b4:6c:6b:ed:95:f1:aa:da:89:3c:55:4c:4f:91:bd:
9d:e2:78:83:9f:0d:0b:bb:7d:b5:a0:bf:4a:93:c2:
73:3d:b2:8a:4c:4f:a7:b8:da:2e:b2:44:d3:e9:8e:
cb:9e:a7:c8:f4:75:92:72:80:45:f3:57:12:fd:06:
1d:3e:de:31:a3:07:c0:59:6b:c4:17:2c:4b:63:05:
0f:86:fe:58:28:cc:93:11:5d:0f:ed:ae:f3:8c:90:
7c:0d:3b:8b:eb:8d:44:aa:33:97:f2:45:d6:94:47:
22:dd:57:01:29:26:27:6b:6f:c5:ce:38:93:12:21:
aa:6d:eb:51:e9:57:4f:63:45:29:90:e1:8a:f1:08:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:8F:60:4F:A0:DF:B7:44:07:ED:4F:58:5A:E2:16:FA:11:63:7C
X509v3 Authority Key Identifier:
keyid:FD:64:B6:E5:17:E7:6E:DF:05:F4:9D:1F:81:2D:FA:D6:22:D4:42:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WS25Rfnbt8F9J0fgS361iLUQoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5fbe06-9cba-4e6f-9e2e-1d2df95b7b14/1/uCWPYE-g37dEB-1PWFriFvoRY3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5fbe06-9cba-4e6f-9e2e-1d2df95b7b14/1/_WS25Rfnbt8F9J0fgS361iLUQoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.23.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4e:7a:a2:0b:68:0c:95:51:79:9e:1f:f7:19:14:65:6a:0a:
11:4d:0b:9a:f2:52:42:33:ca:c4:9a:70:20:ab:a2:87:91:8e:
1f:43:cb:a4:69:7b:c5:cb:0d:f9:dc:47:3f:2f:7c:9b:30:e3:
15:86:d6:f4:06:de:e3:8a:73:f5:03:d7:96:15:05:a7:3a:ce:
6c:83:cc:80:a7:b3:6a:56:fb:3f:80:2e:83:e5:50:c1:84:da:
c7:3e:2c:ab:56:58:ca:5c:63:4e:56:25:c8:28:85:47:55:73:
3e:1e:b6:22:82:da:90:1a:97:97:8f:d0:21:6e:14:aa:54:e7:
31:64:54:d6:bd:1a:75:d1:ac:e8:80:3b:14:23:fd:a3:60:c6:
00:a6:ad:3b:8e:f4:50:63:0c:14:92:de:4e:35:0a:7b:29:80:
31:4e:9b:5d:f7:04:ef:15:d5:5a:4a:d1:3d:62:c9:5e:1f:c8:
97:65:6c:16:e9:00:1e:dd:04:2e:e0:a1:fd:bc:2b:d0:c2:1a:
8e:b9:db:b4:8e:54:eb:3b:29:e1:e6:e8:c9:66:13:b0:6a:11:
c8:91:d9:53:6d:76:32:c8:06:1c:1f:7f:55:17:54:9c:54:ac:
af:3c:39:4e:51:ab:70:c1:b8:e3:e8:5c:88:f2:4a:7e:04:d7:
2d:cc:61:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:45 2024 by rpki-client on console-ams.rpki-client.org