Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/scFGXW1vrAqTIxKBdNigh6tUR5I.roa
File: scFGXW1vrAqTIxKBdNigh6tUR5I.roa (raw, json)
Hash identifier: sjnu4T3yiC+C0OK3FP63qAhjvrPKosUqUn/p8cNd86U=
Subject key identifier: B1:C1:46:5D:6D:6F:AC:0A:93:23:12:81:74:D8:A0:87:AB:54:47:92
Certificate issuer: /CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Certificate serial: 018920033CEDA7DBDCFE291BF1C7E2EADAA6
Authority key identifier: 87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/scFGXW1vrAqTIxKBdNigh6tUR5I.roa
Signing time: Tue 04 Jul 2023 08:27:10 +0000
ROA not before: Tue 04 Jul 2023 08:27:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201224
IP address blocks: 176.53.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:03:3c:ed:a7:db:dc:fe:29:1b:f1:c7:e2:ea:da:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Validity
Not Before: Jul 4 08:27:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1c1465d6d6fac0a9323128174d8a087ab544792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:11:d2:ff:03:26:43:31:bd:44:42:7f:e4:59:
ea:37:e8:a5:af:10:60:5b:fa:d7:dd:16:f6:fa:e6:
c6:b2:88:55:92:76:0d:47:7b:79:f3:cd:7d:2f:34:
3a:32:d3:d9:bc:db:aa:63:25:be:4d:a6:ff:f2:08:
22:d0:97:fa:65:4e:c2:29:2c:51:bf:a2:fa:89:70:
84:c4:d2:78:92:ce:40:71:86:3c:31:2f:38:d3:17:
69:c9:05:83:8a:27:6c:d5:3c:f6:01:98:40:5d:3f:
80:67:42:67:b7:90:6a:92:d6:9a:42:7a:9d:21:94:
17:36:b8:7a:14:aa:67:fd:b1:32:b6:8e:56:ca:e9:
1d:7b:7b:7e:7f:46:9e:1c:88:20:31:02:29:ca:12:
55:d8:41:8c:45:18:6f:bb:32:d4:1b:29:a7:17:a2:
b3:05:75:b2:59:21:f3:0e:79:08:cf:af:ca:a0:5d:
8c:a7:9e:aa:9d:54:8b:f9:1c:9e:9c:6a:79:ed:bd:
af:35:12:25:34:d5:31:a0:76:6c:c3:93:41:6e:74:
d4:b8:63:3b:bd:97:a1:ed:bf:f8:3c:dd:48:de:42:
8e:99:f0:cb:1f:82:c7:92:55:c0:fe:02:21:10:7a:
df:61:c2:04:52:93:5a:e5:ea:20:e2:33:ea:c6:c9:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C1:46:5D:6D:6F:AC:0A:93:23:12:81:74:D8:A0:87:AB:54:47:92
X509v3 Authority Key Identifier:
keyid:87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/scFGXW1vrAqTIxKBdNigh6tUR5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.147.0/24
Signature Algorithm: sha256WithRSAEncryption
78:67:13:a9:07:81:1d:7d:f8:aa:bb:8e:a7:44:fe:75:b6:2f:
fb:e4:d7:bb:a3:62:d5:32:b4:51:30:22:3b:92:25:da:61:8f:
e3:54:d7:ef:aa:05:ee:fe:0a:a6:dc:b3:9e:bd:4b:6f:d9:72:
d3:6b:2a:89:b6:9e:11:35:31:3b:54:d7:df:af:29:18:75:d4:
93:d6:f0:c3:6d:61:ae:06:c4:39:39:63:ef:73:19:ee:64:9d:
e4:a7:b2:39:89:0d:cc:ca:2c:55:09:28:6c:a0:f9:d8:b3:23:
30:94:64:ff:fe:e8:79:7b:a9:e8:1c:40:41:62:ce:0a:b0:a2:
14:30:39:68:49:8e:b1:e3:d7:fa:c4:25:84:d5:8c:77:34:b3:
fe:3d:c2:54:2a:54:e5:b7:cb:1f:90:5d:1d:57:e5:93:5d:7c:
1a:d2:19:92:49:88:f1:95:fc:6a:67:89:4c:9b:5c:91:94:7a:
9c:4a:b8:67:ec:4b:57:64:9c:fd:40:f4:01:20:2a:10:15:36:
70:d0:41:97:77:53:3e:40:99:a3:35:50:7c:51:93:33:29:e1:
96:39:77:07:65:f5:e4:6e:24:95:c5:17:e5:71:b1:cc:0c:95:
e2:41:bc:39:98:49:c2:52:0d:67:40:8f:0a:75:d3:e1:5a:59:
da:2b:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:58 2024 by rpki-client on console-fra.rpki-client.org