Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/RjtcPY5CzfLmpbB718vDvz1zuLk.roa
File: RjtcPY5CzfLmpbB718vDvz1zuLk.roa (raw, json)
Hash identifier: 56eEwwDbSiXuHaXFXY51UUzNb8GxdgrSg+Gf4qc/YwE=
Subject key identifier: 46:3B:5C:3D:8E:42:CD:F2:E6:A5:B0:7B:D7:CB:C3:BF:3D:73:B8:B9
Certificate issuer: /CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Certificate serial: 01864BC905C28CAC4665A56F72EA7C343BD5
Authority key identifier: 87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/RjtcPY5CzfLmpbB718vDvz1zuLk.roa
Signing time: Mon 13 Feb 2023 17:18:30 +0000
ROA not before: Mon 13 Feb 2023 17:18:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 176.53.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4b:c9:05:c2:8c:ac:46:65:a5:6f:72:ea:7c:34:3b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Validity
Not Before: Feb 13 17:18:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=463b5c3d8e42cdf2e6a5b07bd7cbc3bf3d73b8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0f:f9:e0:fa:2c:5f:7b:f0:51:1c:b8:83:25:
9d:be:33:fb:5e:8c:fa:f7:9e:b0:da:ab:f7:e8:1c:
0c:bd:6d:2e:36:91:5a:b3:d7:a6:72:72:18:1d:76:
fe:30:42:78:30:ab:e5:57:86:09:01:22:0c:86:4d:
f1:53:2d:51:3c:99:74:df:23:76:98:e2:5b:1b:75:
8e:de:e6:4d:67:6e:ae:82:47:dc:7b:20:b6:30:41:
f6:f9:f6:69:d0:ed:65:18:65:8e:f2:f4:9d:5c:7f:
c6:d6:4d:16:df:25:3d:b1:81:f7:14:fe:af:27:58:
42:d1:dd:3c:7b:a5:3c:a1:80:01:d7:cb:82:ca:01:
c6:51:ef:f7:4c:6d:28:3d:96:d9:e2:0b:d5:65:4d:
3e:9e:ce:21:91:5e:f3:0b:4a:c3:c8:fc:90:4a:0e:
f9:8a:03:ef:41:2f:82:ef:2a:92:92:3e:61:f7:fc:
7f:16:0d:70:ca:e2:26:04:1e:78:a5:f1:22:4f:e6:
89:da:30:0f:5f:51:6e:24:ee:07:42:6c:24:da:26:
d5:5f:75:46:e5:94:66:e3:dc:66:17:83:cb:a4:a1:
39:aa:96:16:88:fe:0d:75:9e:df:f6:d2:63:fb:6e:
26:0b:70:75:ad:ba:22:71:db:96:62:f3:0b:46:2b:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3B:5C:3D:8E:42:CD:F2:E6:A5:B0:7B:D7:CB:C3:BF:3D:73:B8:B9
X509v3 Authority Key Identifier:
keyid:87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/RjtcPY5CzfLmpbB718vDvz1zuLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.147.0/24
Signature Algorithm: sha256WithRSAEncryption
67:3d:32:02:88:7f:20:3c:c6:30:cb:39:36:8f:d4:ae:6c:ae:
ba:9c:a5:e0:35:d8:2e:15:72:91:f2:cf:d0:10:83:ce:ab:43:
f9:92:1f:cc:47:81:83:c6:63:0f:60:02:f8:ab:00:9a:ef:1e:
47:24:d6:ca:9c:cd:93:3c:ab:a2:af:30:3d:0d:79:26:21:a0:
f9:2b:15:2c:5e:68:31:f1:79:b1:98:7e:4a:2f:e3:be:2b:29:
e5:af:97:05:3c:37:90:88:57:14:6c:2f:c0:44:22:26:b7:80:
9d:3f:ab:78:d2:01:68:e3:8d:da:1a:dd:4d:0a:a9:23:1c:1b:
ca:5f:95:64:f5:ba:16:59:26:28:55:3c:0a:5f:2e:06:3b:01:
e4:49:c6:54:e1:a4:79:a8:27:f7:7f:a6:aa:c3:ee:e5:13:47:
61:54:a2:a7:00:14:b4:43:3f:87:5e:52:e0:d5:cd:30:76:bf:
b0:e4:73:5a:b7:70:b0:d6:6d:b5:e5:ac:35:82:89:b4:99:7f:
75:2a:84:60:34:c5:4e:e8:a2:cb:b3:c1:52:00:50:82:b2:ce:
b9:30:cf:7e:12:0b:a7:16:5a:e6:09:e0:a9:d1:87:7b:7b:a8:
fd:55:e4:cf:86:4e:f0:28:d6:7a:8b:7c:17:40:92:20:69:33:
3a:69:75:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:48 2024 by rpki-client on console-ams.rpki-client.org