Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/1k8gKLzjO0tQgNuu939KIZhcvrs.roa
File: 1k8gKLzjO0tQgNuu939KIZhcvrs.roa (raw, json)
Hash identifier: 55yj3F5bFZOu2R6Mi6V/qrtJKGPMZWrUmmWgGxcNXN4=
Subject key identifier: D6:4F:20:28:BC:E3:3B:4B:50:80:DB:AE:F7:7F:4A:21:98:5C:BE:BB
Certificate issuer: /CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Certificate serial: 014B67
Authority key identifier: 87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/1k8gKLzjO0tQgNuu939KIZhcvrs.roa
Signing time: Thu 03 Feb 2022 17:01:21 +0000
ROA not before: Thu 03 Feb 2022 17:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 176.53.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84839 (0x14b67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Validity
Not Before: Feb 3 17:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d64f2028bce33b4b5080dbaef77f4a21985cbebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:fa:74:54:ef:ba:38:70:f9:3b:b4:0c:d5:
d0:92:95:61:85:96:7f:81:dd:c0:cd:7e:3a:95:9b:
54:fc:54:e6:9c:90:ad:ca:b9:c6:c2:07:66:12:24:
e8:c4:4a:58:dc:34:74:a0:c0:79:05:d5:91:0a:e5:
ad:48:93:5a:06:f0:d6:a1:7f:1f:bc:b6:14:8f:db:
9b:f7:a8:05:d2:3d:19:1d:21:36:a7:56:52:e8:61:
13:1a:b5:6d:78:e2:13:9a:de:fd:25:64:6d:ef:7b:
d2:a8:15:79:3b:f0:cf:64:9f:82:3b:81:4c:aa:7d:
2f:a1:51:8a:38:a2:2d:ef:2a:d6:5a:04:ad:d2:81:
e8:56:3e:74:5d:52:7c:2a:54:a1:56:9c:ec:17:39:
71:8d:d9:49:e6:d6:96:35:8e:ab:b6:79:b3:00:1a:
cb:98:97:40:9c:7b:10:33:af:b1:84:3a:bb:1f:11:
1d:84:f7:51:19:ea:53:64:22:d7:74:d2:24:2d:c4:
3d:78:41:6d:6d:44:6f:c5:48:26:87:bb:b7:80:3f:
54:f0:6f:72:00:ca:ff:96:55:99:4a:86:cf:77:b7:
21:c5:3d:dc:f9:dd:84:88:49:2d:43:4d:38:cd:3f:
ee:f3:96:40:a6:22:3a:83:8d:87:68:1b:82:cb:0c:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:20:28:BC:E3:3B:4B:50:80:DB:AE:F7:7F:4A:21:98:5C:BE:BB
X509v3 Authority Key Identifier:
keyid:87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/1k8gKLzjO0tQgNuu939KIZhcvrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.147.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e0:2a:9f:ec:ea:ee:a7:47:07:7e:52:50:c6:1c:00:1f:3f:
6d:44:7f:9d:ba:f3:5f:3f:e2:ea:90:33:cf:7b:96:4b:b0:6d:
3e:8f:15:44:e0:d3:f7:fc:8c:05:cd:31:db:42:5a:8b:48:dc:
72:eb:45:65:ea:bb:22:5e:40:c0:b7:01:92:97:bd:fb:1f:f3:
ec:db:4c:fc:9a:6a:66:b6:1e:e6:7f:ff:e6:ea:e7:1a:df:07:
ec:52:1c:63:92:d6:82:36:f2:94:bf:20:38:5a:da:23:e6:a2:
0f:72:c0:56:ec:e3:7d:14:b1:f5:4d:c7:90:6a:56:d4:2c:03:
6b:e4:aa:48:b7:92:db:11:3f:2d:1c:8a:84:17:0d:11:74:44:
99:b0:d5:cd:cb:b5:30:09:0c:5e:d2:56:56:18:ae:78:b6:bb:
36:f3:97:17:5f:c4:39:ee:30:a5:a4:72:6e:56:12:74:8e:f6:
ca:87:c5:1f:41:a9:b9:04:95:06:fe:d9:43:47:47:41:8d:65:
e0:d0:b1:f1:b2:07:e0:91:af:d1:b5:fb:eb:7c:e5:cb:b5:76:
aa:d8:5b:f7:d5:5c:5c:0f:06:d6:90:c1:63:27:ab:8a:d7:d9:
31:69:70:35:49:84:e1:a2:49:04:6f:18:8e:fc:b2:e3:6a:a8:
d9:77:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:48 2024 by rpki-client on console-ams.rpki-client.org