Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/lEGs9K64Iw-EnKqM58rGkjVkBaA.roa
File: lEGs9K64Iw-EnKqM58rGkjVkBaA.roa (raw, json)
Hash identifier: ImfjWxHAtxD+NwX2bb9p7uccgNnW+dBLEd/o3tbONCs=
Subject key identifier: 94:41:AC:F4:AE:B8:23:0F:84:9C:AA:8C:E7:CA:C6:92:35:64:05:A0
Certificate issuer: /CN=96b897d64d9f3ddf6859bf623ac5161a5f19214c
Certificate serial: 9F886F
Authority key identifier: 96:B8:97:D6:4D:9F:3D:DF:68:59:BF:62:3A:C5:16:1A:5F:19:21:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lriX1k2fPd9oWb9iOsUWGl8ZIUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/lEGs9K64Iw-EnKqM58rGkjVkBaA.roa
Signing time: Sat 01 Jan 2022 03:54:29 +0000
ROA not before: Sat 01 Jan 2022 03:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 176.97.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10455151 (0x9f886f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b897d64d9f3ddf6859bf623ac5161a5f19214c
Validity
Not Before: Jan 1 03:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9441acf4aeb8230f849caa8ce7cac692356405a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c3:df:84:3b:fc:30:3b:84:96:33:c1:79:59:
61:5b:8e:55:d5:19:d3:b2:fb:48:2d:48:65:ab:66:
58:e5:9c:54:73:46:fd:d7:7f:f1:c9:e8:d6:86:bd:
cb:8e:c4:7d:27:79:0c:65:78:2c:0b:ef:f0:f8:8f:
4f:be:12:62:48:35:c5:22:ec:e3:8f:91:5d:71:79:
3b:af:75:8c:93:5b:ec:ba:78:55:bb:84:43:95:a0:
d0:21:3e:8f:1f:9c:ab:5f:73:9a:72:35:14:fc:06:
1e:48:5c:dd:c9:fa:ca:1c:d4:cb:b2:8a:70:43:9a:
2c:d5:74:7e:e0:53:2f:a5:90:dc:0b:5a:73:5b:7a:
18:1b:5f:bc:0c:bc:74:b9:f4:65:d2:4d:9b:7a:88:
90:e0:10:4b:57:d2:9e:b9:b5:ac:0d:d2:77:6d:38:
ed:56:30:50:4f:0f:cb:09:af:ec:a5:b5:ea:bb:7b:
39:87:cb:2a:6a:0e:ff:57:71:11:ac:1c:bf:94:3d:
c2:f1:51:c2:fe:1b:88:4b:23:28:a4:82:bf:33:21:
ab:25:f8:83:31:25:ca:ba:63:46:fd:47:0f:08:ea:
91:72:eb:5d:57:24:cc:87:e4:b2:24:79:0c:36:e0:
f3:f8:1e:03:d4:fd:be:54:e3:99:ab:b9:fe:6e:54:
7f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:41:AC:F4:AE:B8:23:0F:84:9C:AA:8C:E7:CA:C6:92:35:64:05:A0
X509v3 Authority Key Identifier:
keyid:96:B8:97:D6:4D:9F:3D:DF:68:59:BF:62:3A:C5:16:1A:5F:19:21:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lriX1k2fPd9oWb9iOsUWGl8ZIUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/lEGs9K64Iw-EnKqM58rGkjVkBaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/lriX1k2fPd9oWb9iOsUWGl8ZIUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b1:5b:ea:42:88:93:0e:53:cb:c5:71:55:8d:13:38:e5:04:
19:5f:3c:92:29:5f:c7:65:c1:a9:3e:a9:82:64:2c:28:9d:78:
43:68:13:70:9b:95:ae:b1:c2:fd:5a:56:84:ee:15:31:69:15:
83:5a:65:1e:52:98:9e:52:02:53:07:28:26:9f:e1:bd:cf:4c:
eb:29:07:33:41:86:cb:34:e3:f6:25:15:34:5d:f5:f2:cc:b4:
8c:12:47:e7:99:80:6a:5e:d8:0c:7b:e6:32:b9:f5:5d:7c:d4:
77:52:52:46:6e:62:34:96:88:ce:d1:5d:c7:91:f3:f2:57:f1:
d4:a4:a5:de:c6:16:d8:91:d2:6a:f3:8f:b0:41:be:e0:b0:47:
c1:4c:3f:89:aa:52:e7:d1:e7:6b:a4:f9:66:90:bf:df:c0:3e:
84:5a:ee:7f:c6:e9:cb:a5:d6:0a:8c:0d:3c:b9:01:6e:6d:0f:
a4:5f:0c:c7:b2:49:00:c1:ad:1c:65:3b:7f:06:f2:8c:11:ec:
81:a9:55:d8:d7:24:14:f6:da:f4:7c:df:a7:ce:e5:57:26:63:
c3:d0:6e:0f:7f:64:91:06:4e:3f:3c:4b:6c:9d:fb:3b:e0:3e:
fb:5d:d0:b7:74:4d:d7:09:d2:61:6b:23:a3:5c:2f:7d:bb:9a:
c1:d1:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org