Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/c7oZz-TYop-CTLTfHOtroRmgXMM.roa
File: c7oZz-TYop-CTLTfHOtroRmgXMM.roa (raw, json)
Hash identifier: IvdWhGSzE2D8+EIm9ZrCT3PuwWn7aLk3uDlti5zRVSI=
Subject key identifier: 73:BA:19:CF:E4:D8:A2:9F:82:4C:B4:DF:1C:EB:6B:A1:19:A0:5C:C3
Certificate issuer: /CN=4cb52d4a23e5e2821fa1915ec137d384fae1fd2e
Certificate serial: 01856BDC7F8720107FC6738D5312ADF53799
Authority key identifier: 4C:B5:2D:4A:23:E5:E2:82:1F:A1:91:5E:C1:37:D3:84:FA:E1:FD:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLUtSiPl4oIfoZFewTfThPrh_S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/c7oZz-TYop-CTLTfHOtroRmgXMM.roa
Signing time: Sun 01 Jan 2023 05:44:50 +0000
ROA not before: Sun 01 Jan 2023 05:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 176.97.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:7f:87:20:10:7f:c6:73:8d:53:12:ad:f5:37:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb52d4a23e5e2821fa1915ec137d384fae1fd2e
Validity
Not Before: Jan 1 05:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73ba19cfe4d8a29f824cb4df1ceb6ba119a05cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:ac:26:ab:f4:9a:18:48:bd:4f:38:73:0e:
a9:f4:3c:2b:54:63:83:62:31:cc:48:78:19:27:8b:
f8:56:4a:49:46:1d:fb:9b:a5:86:6a:f9:8d:e1:ab:
12:14:43:fd:a3:a9:d7:8e:19:0f:07:32:d8:9d:4d:
60:49:50:83:80:57:50:fe:03:e6:7f:7e:a5:2c:54:
52:79:a1:d0:9e:e2:eb:2c:30:40:55:f0:14:d9:cf:
bf:e5:7e:02:22:a8:8b:c3:a5:8a:01:a8:f8:bc:22:
44:e7:42:f5:6c:f5:12:29:3a:4c:83:b6:bf:af:62:
e5:67:b8:c6:b7:40:06:51:04:a0:b3:41:b8:ba:f6:
5e:9a:9d:bd:c3:98:9c:6d:7d:7b:f2:89:8a:68:91:
0e:6b:f6:ea:32:d5:79:cd:df:d9:db:b1:20:67:27:
a6:3a:ea:d9:65:25:8d:bb:bd:0d:fc:92:0d:4c:21:
84:6f:e6:50:88:c4:47:64:d5:90:29:27:de:80:c1:
aa:fa:50:05:0d:51:cd:a5:ca:78:f5:56:b7:16:8d:
16:5d:e8:55:83:ce:ba:95:ca:ba:01:e9:40:b5:3f:
5f:0e:9d:5a:65:3e:71:74:cf:d5:8d:7c:8e:b2:48:
aa:8b:25:8d:cc:b7:16:dd:01:09:f0:71:9f:2c:30:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BA:19:CF:E4:D8:A2:9F:82:4C:B4:DF:1C:EB:6B:A1:19:A0:5C:C3
X509v3 Authority Key Identifier:
keyid:4C:B5:2D:4A:23:E5:E2:82:1F:A1:91:5E:C1:37:D3:84:FA:E1:FD:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLUtSiPl4oIfoZFewTfThPrh_S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/c7oZz-TYop-CTLTfHOtroRmgXMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/TLUtSiPl4oIfoZFewTfThPrh_S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3f:c4:42:14:ed:10:5f:58:7f:55:72:32:44:4f:f7:af:21:
68:15:80:4b:0b:f6:72:71:9c:11:c8:e5:48:f8:a2:a9:de:d5:
9d:6f:33:d4:eb:62:85:22:b3:4a:5c:60:71:63:ca:9e:a7:74:
e8:51:bb:e6:82:a0:44:0e:11:50:35:de:71:06:18:fc:1f:ae:
33:7b:cd:e2:a5:09:ea:9f:b3:8b:41:1d:d4:d9:1c:d5:14:59:
54:68:67:ff:73:41:e6:12:5c:73:12:ce:00:83:e6:42:cf:af:
e3:17:1c:1a:cc:57:4c:24:3c:a4:0f:bb:e2:98:55:92:65:77:
25:f0:bc:48:04:ec:ad:6a:e6:f3:59:86:d6:f2:1d:2d:40:58:
bd:4f:5e:9f:6b:ad:db:71:70:7a:9d:67:7b:59:49:7f:a0:32:
70:e7:e4:47:6d:fe:71:c7:c6:69:7d:96:37:a2:cc:4a:35:a1:
63:be:69:84:c0:2d:71:84:f8:78:57:fd:06:51:95:4f:65:c3:
38:a4:a8:07:11:cb:e3:0c:b8:6c:e6:c5:f8:d7:2a:13:1f:af:
8f:50:92:d9:0f:67:05:b3:90:fa:69:6f:5b:df:84:ef:8f:a7:
60:5b:84:da:15:5e:1b:3e:8c:09:58:a1:39:e6:e2:da:9d:c0:
4e:70:6f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:45 2024 by rpki-client on console-ams.rpki-client.org