Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/BKu0wnguyoxLLXp7aVDlUhNYP2w.roa
File: BKu0wnguyoxLLXp7aVDlUhNYP2w.roa (raw, json)
Hash identifier: Azh8IBV0/sEoQ++dz+AAx6MsOAenEc3Ilmiw00cmWzs=
Subject key identifier: 04:AB:B4:C2:78:2E:CA:8C:4B:2D:7A:7B:69:50:E5:52:13:58:3F:6C
Certificate issuer: /CN=aa424a763a879b1e5d418d24cdfb3670db9c9702
Certificate serial: 0185711E7DD876606669D393B67EB1EC996F
Authority key identifier: AA:42:4A:76:3A:87:9B:1E:5D:41:8D:24:CD:FB:36:70:DB:9C:97:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkJKdjqHmx5dQY0kzfs2cNuclwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/BKu0wnguyoxLLXp7aVDlUhNYP2w.roa
Signing time: Mon 02 Jan 2023 06:15:01 +0000
ROA not before: Mon 02 Jan 2023 06:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210204
IP address blocks: 176.97.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:7d:d8:76:60:66:69:d3:93:b6:7e:b1:ec:99:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa424a763a879b1e5d418d24cdfb3670db9c9702
Validity
Not Before: Jan 2 06:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04abb4c2782eca8c4b2d7a7b6950e55213583f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:85:25:0c:c7:a1:10:c2:d5:1c:3e:63:b1:
57:6b:16:64:c2:37:21:5f:7b:a6:75:b0:77:fd:25:
3b:c3:b3:a9:2c:3b:cf:4a:c2:43:2a:b4:b4:83:f7:
ef:ce:3a:f9:df:44:5c:b7:ea:ca:91:90:cc:37:ca:
20:8c:c1:c2:d1:55:cb:9b:7d:2d:9a:b8:74:4d:4a:
98:dc:e7:d5:2b:79:43:2c:71:49:0f:33:23:da:08:
42:45:c4:64:91:8f:3d:e2:3d:71:b3:93:5e:87:e3:
9e:8f:96:9d:3d:58:a7:7a:9d:62:a7:67:28:a3:29:
6f:f5:05:b3:8a:ad:55:82:77:49:b4:19:01:56:cf:
ec:cc:2a:9d:b3:17:69:97:ac:92:1e:d6:90:08:60:
9b:e4:29:90:91:a3:d5:ad:1d:2d:57:01:fe:fb:0b:
11:c6:69:69:d5:c9:52:91:19:21:e2:ef:83:1b:3b:
bf:bb:5e:23:9a:27:91:88:c0:53:fe:b6:93:a0:c0:
78:1d:c1:a2:32:b1:57:9e:cc:43:0f:f8:e0:e4:57:
db:4f:f4:40:0f:44:0c:1c:36:a1:5b:71:9c:ed:c9:
7f:84:84:e2:d1:8f:ba:f0:00:11:3a:85:9b:c1:c0:
e3:18:c7:b4:22:72:c5:2e:3e:a8:c2:13:b1:09:21:
be:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AB:B4:C2:78:2E:CA:8C:4B:2D:7A:7B:69:50:E5:52:13:58:3F:6C
X509v3 Authority Key Identifier:
keyid:AA:42:4A:76:3A:87:9B:1E:5D:41:8D:24:CD:FB:36:70:DB:9C:97:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkJKdjqHmx5dQY0kzfs2cNuclwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/BKu0wnguyoxLLXp7aVDlUhNYP2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/qkJKdjqHmx5dQY0kzfs2cNuclwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.196.0/24
Signature Algorithm: sha256WithRSAEncryption
46:33:a4:7c:e4:5d:51:22:91:98:f1:d5:8c:d4:63:82:9e:0a:
ee:70:72:60:03:0f:6f:70:df:9b:76:3e:32:f6:38:36:76:7e:
3b:b4:bc:69:ea:4b:e0:fb:dd:51:01:fb:98:a8:a2:73:93:d0:
95:58:e2:c3:ee:2f:39:70:43:ac:99:c4:4a:7f:35:2b:8a:2d:
b2:aa:a9:b5:e0:09:30:c9:b9:59:d4:2d:26:c2:75:6c:bc:db:
47:2e:3f:f0:9a:0a:d1:34:f2:39:df:34:cb:b6:39:e2:10:b8:
8e:89:3d:b2:a3:f7:46:27:51:b2:8f:64:1a:25:ed:7b:f5:e6:
89:f6:76:7b:6d:1e:7d:8a:db:db:34:46:68:95:8b:91:3b:c5:
53:ed:1c:89:4e:cc:33:f3:6a:21:22:58:b5:b5:08:8a:08:89:
0b:a9:7b:ff:8c:b4:2f:e8:de:e4:2b:7a:81:6f:b4:42:55:32:
79:89:39:51:46:23:89:72:f7:59:6c:57:92:f6:a6:8f:27:24:
89:14:78:57:0c:4f:b9:e6:67:4e:72:28:c8:68:23:db:eb:40:
80:e4:d3:d8:8c:a1:91:20:bb:a9:e2:b6:ed:d2:4d:2f:f2:1c:
4a:05:78:19:d0:69:81:a0:f1:63:ae:ec:ae:5d:14:5e:0e:ff:
5e:2f:5b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:23 2024 by rpki-client on console-fra.rpki-client.org