Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/r1wlp8an6vZz2bkskKOp12U2zBA.roa
File: r1wlp8an6vZz2bkskKOp12U2zBA.roa (raw, json)
Hash identifier: BoNX/VNr8UvYY0HonDnm6q6HFVljJZ3P9Som50qSI7k=
Subject key identifier: AF:5C:25:A7:C6:A7:EA:F6:73:D9:B9:2C:90:A3:A9:D7:65:36:CC:10
Certificate issuer: /CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Certificate serial: 01857227E5E827534B6EB3E06BAC638B970C
Authority key identifier: 87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/r1wlp8an6vZz2bkskKOp12U2zBA.roa
Signing time: Mon 02 Jan 2023 11:04:55 +0000
ROA not before: Mon 02 Jan 2023 11:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42233
IP address blocks: 176.53.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:e5:e8:27:53:4b:6e:b3:e0:6b:ac:63:8b:97:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Validity
Not Before: Jan 2 11:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af5c25a7c6a7eaf673d9b92c90a3a9d76536cc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:55:14:d2:cc:9f:96:50:71:97:ad:4b:93:
f2:f7:d0:98:90:37:a4:d6:ce:af:72:61:6e:22:70:
ae:07:db:e2:7e:83:27:a0:78:82:6a:ee:80:64:0d:
cb:e0:e5:34:f6:82:ab:f7:d0:f6:64:9d:db:81:71:
d8:d2:2a:4a:fc:3a:25:c0:d4:e5:89:31:6f:26:36:
95:0e:63:92:1c:1b:9a:b8:dd:b3:a3:61:84:68:0a:
8f:0b:1c:6a:c4:86:21:80:71:5e:6b:19:33:60:68:
d1:eb:21:05:82:4e:df:bd:14:2a:55:39:24:54:d2:
4f:1f:ce:c5:1a:61:53:95:9a:35:03:13:69:84:43:
bf:85:12:a3:82:08:f5:01:21:03:b3:f1:e4:5b:a9:
a6:a3:62:e8:e2:f5:93:d3:76:3b:57:e9:5b:92:20:
41:62:f9:7a:71:94:21:27:5f:15:66:b4:d7:1a:81:
e4:31:fd:ae:99:82:4d:eb:2c:e5:79:63:d2:6b:0c:
65:4f:e1:42:22:0b:9e:be:c2:38:f0:92:e8:d7:8a:
db:f4:7e:46:e1:f1:8d:83:31:9e:7b:9e:89:c3:84:
d4:15:6c:fa:c9:1d:b8:ef:c8:35:9c:54:06:35:35:
90:24:7f:fa:1a:d2:d4:7a:c1:e3:a7:61:98:9f:14:
47:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5C:25:A7:C6:A7:EA:F6:73:D9:B9:2C:90:A3:A9:D7:65:36:CC:10
X509v3 Authority Key Identifier:
keyid:87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/r1wlp8an6vZz2bkskKOp12U2zBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.147.0/24
Signature Algorithm: sha256WithRSAEncryption
87:43:fe:aa:64:1c:06:5c:fc:92:50:80:d2:c0:a2:ea:cd:a8:
f1:6b:2f:6d:ad:22:9a:3d:3b:9a:d8:96:71:99:58:70:77:fb:
47:a2:1e:af:25:ab:1d:62:27:02:0d:3d:01:e5:b7:c2:cc:36:
42:cb:26:2d:50:a6:0b:44:26:39:87:61:5e:c5:8b:61:d5:d7:
eb:56:02:9f:67:cb:1a:81:3e:31:36:83:36:03:9c:97:0a:96:
4d:14:05:b9:85:5f:79:a4:3c:8b:76:ee:1f:7b:eb:de:44:c7:
7a:08:30:83:f7:4a:74:8d:9f:66:6e:97:3a:62:51:59:b1:0f:
13:b0:29:d9:3f:3b:25:ad:ac:1b:f4:e0:f0:39:77:01:ee:bb:
c5:9f:d5:26:5c:bd:b4:12:bf:e7:72:93:2e:83:e6:e3:81:df:
6e:4f:8c:c5:a5:9b:05:8b:97:88:f2:43:51:a3:61:c7:1d:80:
0b:4e:82:8f:50:ed:9c:44:d1:ff:e2:22:bc:dd:06:4f:31:92:
76:ed:3a:27:82:5a:71:ad:ce:56:9c:95:81:6a:33:06:81:fa:
7c:f8:b6:70:2c:ae:a2:92:3e:ef:04:20:fe:33:0c:fa:2b:17:
e4:e6:cf:a6:5b:19:13:3a:52:c3:30:98:af:a2:91:0c:76:e7:
54:18:41:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyJ+XoJ1NLbrPga6xji5cMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3M2VjMTViOThlMjZlOGIyOWJiN2RjZjRhNjA1MmNhY2U2
ZDI2ODMwHhcNMjMwMTAyMTEwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjVjMjVhN2M2YTdlYWY2NzNkOWI5MmM5MGEzYTlkNzY1MzZjYzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JVVFNLMn5ZQcZetS5Py99CYkDek
1s6vcmFuInCuB9vifoMnoHiCau6AZA3L4OU09oKr99D2ZJ3bgXHY0ipK/DolwNTl
iTFvJjaVDmOSHBuauN2zo2GEaAqPCxxqxIYhgHFeaxkzYGjR6yEFgk7fvRQqVTkk
VNJPH87FGmFTlZo1AxNphEO/hRKjggj1ASEDs/HkW6mmo2Lo4vWT03Y7V+lbkiBB
Yvl6cZQhJ18VZrTXGoHkMf2umYJN6yzleWPSawxlT+FCIguevsI48JLo14rb9H5G
4fGNgzGee56Jw4TUFWz6yR2478g1nFQGNTWQJH/6GtLUesHjp2GYnxRHmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK9cJafGp+r2c9m5LJCjqddlNswQMB8GA1UdIwQY
MBaAFIc+wVuY4m6LKbt9z0pgUsrObSaDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHo3Qlc1amlib3NwdTMzUFNtQlN5czV0Sm9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZWM1OWUtZWE4NS00MGNiLWEyODUt
MDdkZWQyMGUzYzYzLzEvcjF3bHA4YW42dlp6MmJrc2tLT3AxMlUyekJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zZWM1OWUtZWE4NS00MGNiLWEyODUtMDdkZWQyMGUzYzYz
LzEvaHo3Qlc1amlib3NwdTMzUFNtQlN5czV0Sm9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDWTMA0G
CSqGSIb3DQEBCwUAA4IBAQCHQ/6qZBwGXPySUIDSwKLqzajxay9trSKaPTua2JZx
mVhwd/tHoh6vJasdYicCDT0B5bfCzDZCyyYtUKYLRCY5h2FexYth1dfrVgKfZ8sa
gT4xNoM2A5yXCpZNFAW5hV95pDyLdu4fe+veRMd6CDCD90p0jZ9mbpc6YlFZsQ8T
sCnZPzslrawb9ODwOXcB7rvFn9UmXL20Er/ncpMug+bjgd9uT4zFpZsFi5eI8kNR
o2HHHYALToKPUO2cRNH/4iK83QZPMZJ27Tonglpxrc5WnJWBajMGgfp8+LZwLK6i
kj7vBCD+Mwz6Kxfk5s+mWxkTOlLDMJivopEMdudUGEH+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:58 2024 by rpki-client on console-fra.rpki-client.org