Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/BsG5O0KGJuQRKaVHWM_r7eR3rmg.roa
File: BsG5O0KGJuQRKaVHWM_r7eR3rmg.roa (raw, json)
Hash identifier: 50xupZs98LjOLCY95ZjBHwrazSWMAo+XPKes5ND/MFM=
Subject key identifier: 06:C1:B9:3B:42:86:26:E4:11:29:A5:47:58:CF:EB:ED:E4:77:AE:68
Certificate issuer: /CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Certificate serial: 018A45044FB324340860434F9CDEBC584629
Authority key identifier: 87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/BsG5O0KGJuQRKaVHWM_r7eR3rmg.roa
Signing time: Wed 30 Aug 2023 05:57:04 +0000
ROA not before: Wed 30 Aug 2023 05:57:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198369
IP address blocks: 176.53.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:04:4f:b3:24:34:08:60:43:4f:9c:de:bc:58:46:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Validity
Not Before: Aug 30 05:57:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06c1b93b428626e41129a54758cfebede477ae68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:9a:95:ed:28:6a:c0:06:fe:68:7a:45:3a:
c0:74:77:31:75:4c:a0:bc:0a:4f:57:b3:8d:e9:d4:
4d:1e:27:bf:6c:0e:98:a0:ae:e7:89:6b:10:11:d6:
f8:e7:d7:a1:e6:e2:db:24:c8:cb:2c:b0:49:b7:a0:
45:aa:93:5c:6e:29:8d:d2:02:9e:0c:87:67:ca:ef:
4b:be:05:7e:1f:29:aa:de:89:20:db:8e:31:8b:b7:
43:10:63:b8:05:50:89:06:fe:08:12:8e:34:ed:1c:
4b:f4:eb:0d:f5:43:b4:e9:02:67:7c:41:0a:90:5f:
e7:63:31:54:7c:f3:68:21:bf:58:fe:58:45:bd:c1:
e5:18:65:d9:5a:42:49:dc:db:8d:db:80:b7:f6:2d:
e7:2b:d1:a4:f5:31:66:97:30:4d:22:db:86:99:b4:
aa:a5:41:2f:de:60:8c:7e:5f:87:56:d8:a8:07:41:
31:c1:9a:8a:cc:91:36:12:8b:b4:be:d8:09:c7:a3:
3e:61:96:c4:67:3e:a4:d3:e4:3c:7c:4f:03:0c:a3:
e7:b1:c9:13:27:aa:d7:d7:91:5a:e6:c2:72:36:f4:
d8:74:93:cd:0c:ed:7c:f8:1d:b4:79:95:9d:ef:6e:
62:cd:58:c6:f8:26:53:ec:2f:ea:e8:35:37:2a:a5:
54:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C1:B9:3B:42:86:26:E4:11:29:A5:47:58:CF:EB:ED:E4:77:AE:68
X509v3 Authority Key Identifier:
keyid:87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/BsG5O0KGJuQRKaVHWM_r7eR3rmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.147.0/24
Signature Algorithm: sha256WithRSAEncryption
86:08:ef:5d:a1:89:b4:91:e9:07:9c:66:c7:e0:8c:97:62:0e:
f0:f1:c0:5d:a9:02:68:28:06:7a:bb:42:14:49:d4:61:82:74:
fd:e7:c1:c9:8d:de:98:ff:ba:a4:20:28:c1:31:cc:c1:94:a6:
a8:cd:75:94:2b:25:8c:86:ed:1a:ed:7f:b9:bc:10:c7:7b:f4:
27:6f:61:ac:1f:7d:6a:ff:d4:73:8c:ea:15:ea:b1:d9:67:46:
a9:41:86:a4:0c:91:f6:e1:26:44:03:f0:0c:1d:a7:9c:00:be:
17:bb:a9:2b:69:38:ed:e0:1d:0e:1e:b0:39:82:99:98:35:f9:
27:4b:a9:ff:d2:99:1c:97:af:f3:23:57:27:81:d1:0a:94:48:
aa:b3:a4:bb:4c:ce:4d:78:aa:38:f5:7e:5c:1c:7d:93:fb:bf:
95:d8:a9:9f:c2:81:68:59:60:97:8c:2e:60:ca:d8:4a:ab:32:
0b:a0:75:f7:9a:45:a0:e6:7a:9a:be:b5:fb:cf:38:9a:f2:b9:
e8:5d:df:8b:c3:09:14:64:22:2e:ac:d3:89:30:b9:a0:97:2f:
ac:c9:c3:de:74:fc:a4:36:45:bc:a2:fb:c6:ed:6f:0c:84:a2:
d0:25:07:e6:5b:a4:95:df:ed:7c:d0:f4:2c:8a:ed:89:1c:d4:
cd:77:ba:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpFBE+zJDQIYENPnN68WEYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3M2VjMTViOThlMjZlOGIyOWJiN2RjZjRhNjA1MmNhY2U2
ZDI2ODMwHhcNMjMwODMwMDU1NzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmMxYjkzYjQyODYyNmU0MTEyOWE1NDc1OGNmZWJlZGU0NzdhZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLaale0oasAG/mh6RTrAdHcxdUyg
vApPV7ON6dRNHie/bA6YoK7niWsQEdb459eh5uLbJMjLLLBJt6BFqpNcbimN0gKe
DIdnyu9LvgV+Hymq3okg244xi7dDEGO4BVCJBv4IEo407RxL9OsN9UO06QJnfEEK
kF/nYzFUfPNoIb9Y/lhFvcHlGGXZWkJJ3NuN24C39i3nK9Gk9TFmlzBNItuGmbSq
pUEv3mCMfl+HVtioB0ExwZqKzJE2Eou0vtgJx6M+YZbEZz6k0+Q8fE8DDKPnsckT
J6rX15Fa5sJyNvTYdJPNDO18+B20eZWd725izVjG+CZT7C/q6DU3KqVUowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAbBuTtChibkESmlR1jP6+3kd65oMB8GA1UdIwQY
MBaAFIc+wVuY4m6LKbt9z0pgUsrObSaDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHo3Qlc1amlib3NwdTMzUFNtQlN5czV0Sm9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZWM1OWUtZWE4NS00MGNiLWEyODUt
MDdkZWQyMGUzYzYzLzEvQnNHNU8wS0dKdVFSS2FWSFdNX3I3ZVIzcm1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zZWM1OWUtZWE4NS00MGNiLWEyODUtMDdkZWQyMGUzYzYz
LzEvaHo3Qlc1amlib3NwdTMzUFNtQlN5czV0Sm9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDWTMA0G
CSqGSIb3DQEBCwUAA4IBAQCGCO9doYm0kekHnGbH4IyXYg7w8cBdqQJoKAZ6u0IU
SdRhgnT958HJjd6Y/7qkICjBMczBlKaozXWUKyWMhu0a7X+5vBDHe/Qnb2GsH31q
/9RzjOoV6rHZZ0apQYakDJH24SZEA/AMHaecAL4Xu6kraTjt4B0OHrA5gpmYNfkn
S6n/0pkcl6/zI1cngdEKlEiqs6S7TM5NeKo49X5cHH2T+7+V2KmfwoFoWWCXjC5g
ythKqzILoHX3mkWg5nqavrX7zzia8rnoXd+LwwkUZCIurNOJMLmgly+sycPedPyk
NkW8ovvG7W8MhKLQJQfmW6SV3+180PQsiu2JHNTNd7rx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:48 2024 by rpki-client on console-ams.rpki-client.org