Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/pjOZgG1gocD-Sl6JTL6CCuaOBl8.roa
File: pjOZgG1gocD-Sl6JTL6CCuaOBl8.roa (raw, json)
Hash identifier: +TINkXRrVIsEOe7LpSh3ARcWzmulAeP2/C1E7wCC+gI=
Subject key identifier: A6:33:99:80:6D:60:A1:C0:FE:4A:5E:89:4C:BE:82:0A:E6:8E:06:5F
Certificate issuer: /CN=aa424a763a879b1e5d418d24cdfb3670db9c9702
Certificate serial: 0799DC
Authority key identifier: AA:42:4A:76:3A:87:9B:1E:5D:41:8D:24:CD:FB:36:70:DB:9C:97:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkJKdjqHmx5dQY0kzfs2cNuclwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/pjOZgG1gocD-Sl6JTL6CCuaOBl8.roa
Signing time: Sat 01 Jan 2022 00:53:24 +0000
ROA not before: Sat 01 Jan 2022 00:53:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210204
IP address blocks: 176.97.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498140 (0x799dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa424a763a879b1e5d418d24cdfb3670db9c9702
Validity
Not Before: Jan 1 00:53:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a63399806d60a1c0fe4a5e894cbe820ae68e065f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:46:80:ce:9d:2d:55:30:a6:d3:3a:ff:7c:
5d:d4:1b:8b:87:c3:9c:46:b2:b2:84:77:ba:89:c5:
d1:15:f4:79:a4:6c:fa:62:f0:ef:9d:bc:76:e3:ae:
b1:b6:15:84:70:5a:ee:06:dd:7e:f7:74:ac:11:c0:
d6:4d:94:d5:dd:62:73:00:d1:0f:a3:02:f5:eb:44:
c4:a7:87:f3:91:57:59:0c:ac:0b:e8:3a:03:2f:70:
cc:89:97:6c:e1:bc:d0:a3:6b:74:29:38:49:f7:39:
86:79:d7:4c:9c:e6:5e:28:2d:41:f2:e1:22:ea:49:
58:62:76:92:ba:46:8b:30:0d:4b:ba:7a:7f:21:83:
2b:d4:2e:da:f1:3f:31:9d:8a:62:63:49:74:bd:75:
d2:71:38:1a:bb:09:05:07:4c:f8:90:c7:6a:81:23:
2b:27:55:db:86:87:dc:80:fa:1e:ee:b2:a5:8a:d9:
1d:d1:6b:fe:55:16:f7:02:c7:aa:d3:a0:5c:9c:dd:
3b:b7:ca:a8:07:53:1c:b3:29:41:59:f6:d0:00:1e:
b9:f3:df:cf:ea:ec:33:00:ff:93:86:eb:47:a2:2c:
ff:d5:04:cb:8c:d2:8a:f2:cb:35:50:9e:10:a2:14:
ff:3f:db:82:0a:b7:16:95:4d:8e:36:84:64:58:56:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:33:99:80:6D:60:A1:C0:FE:4A:5E:89:4C:BE:82:0A:E6:8E:06:5F
X509v3 Authority Key Identifier:
keyid:AA:42:4A:76:3A:87:9B:1E:5D:41:8D:24:CD:FB:36:70:DB:9C:97:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkJKdjqHmx5dQY0kzfs2cNuclwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/pjOZgG1gocD-Sl6JTL6CCuaOBl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/qkJKdjqHmx5dQY0kzfs2cNuclwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.196.0/24
Signature Algorithm: sha256WithRSAEncryption
00:4c:79:07:09:3b:4d:98:2e:56:23:77:4f:df:3b:ec:7a:59:
ac:49:d2:1c:d0:2f:3c:46:db:5a:80:1f:1d:48:d4:b7:a3:4b:
38:eb:87:cf:5c:4a:09:17:8c:42:cd:3e:49:d4:31:cf:b7:b6:
dc:00:ac:50:4a:02:e4:11:24:fa:1c:3e:65:f0:56:00:b2:56:
e1:d5:ba:51:e0:00:20:0f:dd:02:e5:95:dd:30:39:ee:8e:94:
1c:17:dc:ab:e3:30:28:b5:1a:f6:44:97:6a:6b:c6:cb:4b:ac:
53:72:93:37:06:52:85:d7:ca:1a:b5:67:e8:50:1d:30:d5:4e:
41:b0:8e:73:ad:43:8f:d2:f0:98:37:7f:2b:f8:eb:52:ab:8d:
cc:71:91:30:e6:34:f5:a8:50:2f:2c:cc:89:9c:8b:c4:f1:24:
da:32:05:a5:a2:88:b8:b3:7d:bb:0d:8b:ca:92:5e:9e:79:75:
69:fb:2b:64:d2:1c:c0:0c:76:86:e0:e6:15:3d:c0:15:ae:e9:
22:51:2f:96:82:80:6c:23:98:d5:e2:a9:2a:a6:97:f6:45:75:
2c:72:91:25:46:38:bf:6c:40:c2:0e:38:8e:3b:4c:1d:1e:9a:
b5:c9:4e:fe:63:ec:95:5a:61:55:f5:ed:c1:63:4a:09:dc:eb:
b9:cd:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:23 2024 by rpki-client on console-fra.rpki-client.org