Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/rUpbZiiraO9r_lzWaQtoSHJSiFw.roa
File: rUpbZiiraO9r_lzWaQtoSHJSiFw.roa (raw, json)
Hash identifier: fCpNNrbivfGDmmEMKu17Nkd7NUQYGLrgac0j5okHIYY=
Subject key identifier: AD:4A:5B:66:28:AB:68:EF:6B:FE:5C:D6:69:0B:68:48:72:52:88:5C
Certificate issuer: /CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Certificate serial: 018BC854B8CC964BF898445F7EB7BE3C7A61
Authority key identifier: 87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/rUpbZiiraO9r_lzWaQtoSHJSiFw.roa
Signing time: Mon 13 Nov 2023 10:57:57 +0000
ROA not before: Mon 13 Nov 2023 10:57:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 176.53.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:54:b8:cc:96:4b:f8:98:44:5f:7e:b7:be:3c:7a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Validity
Not Before: Nov 13 10:57:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad4a5b6628ab68ef6bfe5cd6690b68487252885c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:6e:50:b3:31:a0:fa:e9:64:a5:6e:b6:53:
56:41:6b:f3:67:fa:ca:40:0f:da:ed:5f:74:b5:26:
85:01:2f:58:d2:a9:a6:51:45:c7:d5:f0:69:b3:80:
54:09:b3:82:9e:ff:3e:55:8f:cd:3e:a8:c9:ec:4d:
b8:d0:14:f7:82:1c:35:65:4c:aa:0d:05:44:18:7e:
48:2b:36:d6:47:ce:72:1b:ef:00:9c:14:4b:28:1a:
f5:60:c7:7e:8b:fd:59:5b:e3:70:3e:6a:42:4c:5e:
e6:02:87:a4:91:03:8d:55:a7:c1:4e:e9:dc:55:72:
9b:98:92:11:0c:0e:05:88:09:3a:e7:4c:2e:98:95:
75:ea:30:b4:99:1d:5d:a9:1d:0f:a1:e7:7e:28:86:
9c:1e:d8:d5:8e:39:44:06:0e:48:a7:3f:a1:29:ec:
9f:9a:bf:73:f7:d4:bf:05:f3:d7:cd:57:ae:07:ac:
05:88:36:ea:45:79:1d:ef:8b:04:1c:df:b6:64:a5:
73:7a:36:8d:f7:04:f8:19:24:0d:43:5b:ce:09:9c:
70:3b:7b:14:54:5e:6d:4d:98:48:65:fc:0a:a2:25:
c9:77:73:32:5c:33:15:66:4a:ac:f8:a8:32:30:e9:
4b:41:34:df:9a:09:5f:5c:9e:50:b6:57:49:4e:e4:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4A:5B:66:28:AB:68:EF:6B:FE:5C:D6:69:0B:68:48:72:52:88:5C
X509v3 Authority Key Identifier:
keyid:87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/rUpbZiiraO9r_lzWaQtoSHJSiFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.147.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:1c:43:f2:77:c8:28:6c:06:14:1a:51:28:f0:42:bc:b5:7c:
ed:fb:02:69:dc:e0:a5:72:74:51:d0:12:93:88:c1:ea:a3:5d:
df:d6:6b:07:29:ed:37:62:7d:16:5d:dc:a9:95:a4:9a:45:0f:
93:03:f5:b5:6a:28:98:c0:58:9b:7c:38:49:8f:e5:eb:4c:89:
9e:27:e5:de:6b:6a:99:f9:83:86:a5:d8:3e:fd:2f:f7:4d:90:
c8:ef:36:77:6e:ed:bd:8b:1a:73:a7:41:c2:32:5a:75:30:a6:
e1:65:cf:c0:d1:d8:21:5f:fa:e3:f9:16:5b:24:bc:f2:59:65:
31:14:a2:36:76:70:5f:50:e5:01:c3:11:fa:73:cd:81:7a:fc:
bc:f4:d4:82:37:fb:33:ea:f0:45:0e:8a:b2:80:6a:d6:4b:43:
c0:26:82:2b:8c:d8:16:c1:81:8a:31:70:21:56:02:69:c8:35:
83:ee:ce:26:46:06:95:d3:67:00:e7:bc:30:48:79:35:aa:8f:
8c:64:cb:36:96:76:1b:ea:f1:47:43:86:fa:2c:ce:7a:22:78:
22:8b:34:6f:85:2a:d8:9c:1b:7c:0c:a5:f0:32:a9:d5:0b:7e:
36:d7:21:6b:5a:76:82:6f:b1:63:ff:1b:92:95:a8:45:5c:f8:
b3:e6:50:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvIVLjMlkv4mERffre+PHphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3M2VjMTViOThlMjZlOGIyOWJiN2RjZjRhNjA1MmNhY2U2
ZDI2ODMwHhcNMjMxMTEzMTA1NzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDRhNWI2NjI4YWI2OGVmNmJmZTVjZDY2OTBiNjg0ODcyNTI4ODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp1uULMxoPrpZKVutlNWQWvzZ/rK
QA/a7V90tSaFAS9Y0qmmUUXH1fBps4BUCbOCnv8+VY/NPqjJ7E240BT3ghw1ZUyq
DQVEGH5IKzbWR85yG+8AnBRLKBr1YMd+i/1ZW+NwPmpCTF7mAoekkQONVafBTunc
VXKbmJIRDA4FiAk650wumJV16jC0mR1dqR0Poed+KIacHtjVjjlEBg5Ipz+hKeyf
mr9z99S/BfPXzVeuB6wFiDbqRXkd74sEHN+2ZKVzejaN9wT4GSQNQ1vOCZxwO3sU
VF5tTZhIZfwKoiXJd3MyXDMVZkqs+KgyMOlLQTTfmglfXJ5QtldJTuQV2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK1KW2Yoq2jva/5c1mkLaEhyUohcMB8GA1UdIwQY
MBaAFIc+wVuY4m6LKbt9z0pgUsrObSaDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHo3Qlc1amlib3NwdTMzUFNtQlN5czV0Sm9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZWM1OWUtZWE4NS00MGNiLWEyODUt
MDdkZWQyMGUzYzYzLzEvclVwYlppaXJhTzlyX2x6V2FRdG9TSEpTaUZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zZWM1OWUtZWE4NS00MGNiLWEyODUtMDdkZWQyMGUzYzYz
LzEvaHo3Qlc1amlib3NwdTMzUFNtQlN5czV0Sm9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDWTMA0G
CSqGSIb3DQEBCwUAA4IBAQA8HEPyd8gobAYUGlEo8EK8tXzt+wJp3OClcnRR0BKT
iMHqo13f1msHKe03Yn0WXdyplaSaRQ+TA/W1aiiYwFibfDhJj+XrTImeJ+Xea2qZ
+YOGpdg+/S/3TZDI7zZ3bu29ixpzp0HCMlp1MKbhZc/A0dghX/rj+RZbJLzyWWUx
FKI2dnBfUOUBwxH6c82Bevy89NSCN/sz6vBFDoqygGrWS0PAJoIrjNgWwYGKMXAh
VgJpyDWD7s4mRgaV02cA57wwSHk1qo+MZMs2lnYb6vFHQ4b6LM56IngiizRvhSrY
nBt8DKXwMqnVC3421yFrWnaCb7Fj/xuSlahFXPiz5lDH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:58 2024 by rpki-client on console-fra.rpki-client.org