Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/B9ZtEAf-FqshEp2j_7Wd09JcKdU.roa
File: B9ZtEAf-FqshEp2j_7Wd09JcKdU.roa (raw, json)
Hash identifier: E3fZJNAg2+uLu6Oh1B/bZX7ZORaje26DewCc721zN6s=
Subject key identifier: 07:D6:6D:10:07:FE:16:AB:21:12:9D:A3:FF:B5:9D:D3:D2:5C:29:D5
Certificate issuer: /CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Certificate serial: 0186705BB4B324B4A34D50F130A4AD5C27BE
Authority key identifier: 87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/B9ZtEAf-FqshEp2j_7Wd09JcKdU.roa
Signing time: Mon 20 Feb 2023 19:45:03 +0000
ROA not before: Mon 20 Feb 2023 19:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 176.53.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:70:5b:b4:b3:24:b4:a3:4d:50:f1:30:a4:ad:5c:27:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Validity
Not Before: Feb 20 19:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07d66d1007fe16ab21129da3ffb59dd3d25c29d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:ea:74:eb:7a:8b:1c:78:d1:c7:67:60:0f:
e2:9f:ed:10:ce:19:33:00:e8:45:59:1e:ca:cd:f1:
b0:50:ae:89:e1:9a:fa:44:ad:41:96:5e:97:86:f9:
f9:17:36:1e:a6:82:6b:95:f6:e8:01:05:cf:f5:87:
f3:62:5a:00:f6:0f:7b:64:49:97:4e:34:65:a2:c5:
e2:6d:3a:78:ac:90:33:ca:bd:8a:f6:a7:06:01:b8:
de:5d:39:32:07:2d:8f:a4:a0:b3:59:65:f5:0d:6a:
c2:fc:de:92:47:fb:fc:1f:14:d9:e9:21:bb:03:7e:
2f:15:21:b5:d4:79:b4:74:43:15:70:c1:b6:a4:12:
5e:b5:e5:7c:a8:85:f8:a9:89:aa:b2:3f:ee:28:c6:
8e:3d:6d:c1:7c:83:32:61:bd:54:95:ae:4e:1f:df:
da:71:22:b3:19:29:87:41:94:38:d0:73:eb:80:82:
72:c0:e4:e8:ff:7d:96:e1:8c:18:ac:99:ae:9e:ee:
4a:c2:41:45:00:43:e8:93:ca:d2:a3:46:3a:f9:fd:
b8:ab:d7:52:61:16:51:84:e2:53:90:1a:3b:02:fd:
95:d0:e4:e8:a6:38:31:35:cb:21:f4:fa:5e:c6:42:
93:a2:20:4d:a5:bb:0f:3d:1c:83:d8:67:3e:36:3b:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D6:6D:10:07:FE:16:AB:21:12:9D:A3:FF:B5:9D:D3:D2:5C:29:D5
X509v3 Authority Key Identifier:
keyid:87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/B9ZtEAf-FqshEp2j_7Wd09JcKdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.147.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b5:e3:93:5e:c5:66:74:5f:de:9e:61:e8:03:db:0a:55:4b:
09:4a:8d:6b:d4:44:2a:d9:df:5e:f5:40:28:f5:e2:5e:0c:1c:
f1:36:40:73:0e:2f:03:c4:d4:9c:45:0a:24:4e:ff:d6:da:a4:
73:43:67:f8:99:86:82:bb:af:d3:ce:57:b3:92:2f:22:dd:62:
ed:1a:63:fe:bf:b7:2d:38:ac:8f:23:ce:52:90:ed:5f:8a:c1:
4a:c8:23:8f:17:60:8e:b4:54:40:4f:98:4e:a7:14:b2:5e:96:
2a:61:42:1e:03:9f:81:02:71:21:7e:67:4e:b3:81:49:24:a8:
2b:6a:a9:03:f9:64:5d:10:6b:54:b8:c3:c1:6d:95:ae:4c:3a:
c1:48:65:1e:23:d8:b6:1a:fd:dc:9f:34:b8:63:03:b5:0f:65:
dc:24:60:77:ce:ff:66:e0:3a:91:d4:cf:a8:ff:bb:79:3e:10:
40:e8:84:ef:76:0f:82:18:91:21:41:9b:c8:21:d2:2f:ed:04:
75:e3:02:ea:e0:69:e8:b2:6c:ea:e1:2b:e3:b1:c3:e8:3e:99:
85:0a:b3:bc:df:47:f9:8c:b9:16:ea:39:24:11:bd:de:f8:e9:
37:f4:65:82:e4:db:b8:2a:d5:2f:54:cd:1c:07:00:c2:2d:c9:
6c:35:d0:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZwW7SzJLSjTVDxMKStXCe+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3M2VjMTViOThlMjZlOGIyOWJiN2RjZjRhNjA1MmNhY2U2
ZDI2ODMwHhcNMjMwMjIwMTk0NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2Q2NmQxMDA3ZmUxNmFiMjExMjlkYTNmZmI1OWRkM2QyNWMyOWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdLqdOt6ixx40cdnYA/in+0Qzhkz
AOhFWR7KzfGwUK6J4Zr6RK1Bll6Xhvn5FzYepoJrlfboAQXP9YfzYloA9g97ZEmX
TjRlosXibTp4rJAzyr2K9qcGAbjeXTkyBy2PpKCzWWX1DWrC/N6SR/v8HxTZ6SG7
A34vFSG11Hm0dEMVcMG2pBJeteV8qIX4qYmqsj/uKMaOPW3BfIMyYb1Ula5OH9/a
cSKzGSmHQZQ40HPrgIJywOTo/32W4YwYrJmunu5KwkFFAEPok8rSo0Y6+f24q9dS
YRZRhOJTkBo7Av2V0OTopjgxNcsh9PpexkKToiBNpbsPPRyD2Gc+NjsMEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAfWbRAH/harIRKdo/+1ndPSXCnVMB8GA1UdIwQY
MBaAFIc+wVuY4m6LKbt9z0pgUsrObSaDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHo3Qlc1amlib3NwdTMzUFNtQlN5czV0Sm9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZWM1OWUtZWE4NS00MGNiLWEyODUt
MDdkZWQyMGUzYzYzLzEvQjladEVBZi1GcXNoRXAyal83V2QwOUpjS2RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zZWM1OWUtZWE4NS00MGNiLWEyODUtMDdkZWQyMGUzYzYz
LzEvaHo3Qlc1amlib3NwdTMzUFNtQlN5czV0Sm9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDWTMA0G
CSqGSIb3DQEBCwUAA4IBAQBeteOTXsVmdF/enmHoA9sKVUsJSo1r1EQq2d9e9UAo
9eJeDBzxNkBzDi8DxNScRQokTv/W2qRzQ2f4mYaCu6/Tzlezki8i3WLtGmP+v7ct
OKyPI85SkO1fisFKyCOPF2COtFRAT5hOpxSyXpYqYUIeA5+BAnEhfmdOs4FJJKgr
aqkD+WRdEGtUuMPBbZWuTDrBSGUeI9i2Gv3cnzS4YwO1D2XcJGB3zv9m4DqR1M+o
/7t5PhBA6ITvdg+CGJEhQZvIIdIv7QR14wLq4Gnosmzq4SvjscPoPpmFCrO830f5
jLkW6jkkEb3e+Ok39GWC5Nu4KtUvVM0cBwDCLclsNdDM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:58 2024 by rpki-client on console-fra.rpki-client.org