Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/nb3eL2bZ2YUvZgvlVpLSX0BXWp8.roa
File: nb3eL2bZ2YUvZgvlVpLSX0BXWp8.roa (raw, json)
Hash identifier: GCYzGVfgouGiT0AoKyjm2EQIawUQzbCQFQ2L8GLgY+w=
Subject key identifier: 9D:BD:DE:2F:66:D9:D9:85:2F:66:0B:E5:56:92:D2:5F:40:57:5A:9F
Certificate issuer: /CN=4cb52d4a23e5e2821fa1915ec137d384fae1fd2e
Certificate serial: 9AA480
Authority key identifier: 4C:B5:2D:4A:23:E5:E2:82:1F:A1:91:5E:C1:37:D3:84:FA:E1:FD:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLUtSiPl4oIfoZFewTfThPrh_S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/nb3eL2bZ2YUvZgvlVpLSX0BXWp8.roa
Signing time: Sat 01 Jan 2022 02:53:39 +0000
ROA not before: Sat 01 Jan 2022 02:53:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 176.97.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10134656 (0x9aa480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb52d4a23e5e2821fa1915ec137d384fae1fd2e
Validity
Not Before: Jan 1 02:53:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9dbdde2f66d9d9852f660be55692d25f40575a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:62:91:2e:3a:a6:2c:90:c6:84:00:fe:df:
1f:82:8e:8a:a7:9e:57:d6:86:a8:c1:b5:d9:06:5f:
8f:01:b1:1c:3f:1a:07:d2:65:35:67:d5:a0:b1:dd:
59:67:b7:c4:c6:b4:84:40:b3:53:a8:a3:e4:e4:45:
59:f9:79:9c:11:61:ff:3f:18:d9:ea:97:e0:99:6c:
ad:d6:8f:69:0a:ea:78:7f:b4:dd:75:a0:5a:45:38:
cf:e2:be:00:51:ca:c5:75:5a:85:d2:43:36:3b:f1:
9a:c1:7f:54:24:73:81:84:6b:92:64:e0:98:46:ee:
5d:b5:5a:08:f6:55:57:c1:fa:05:ce:db:c1:f9:bf:
52:21:3c:28:fc:a5:2f:95:e6:3a:0d:76:59:04:27:
aa:04:a1:7b:30:d8:ef:a3:ee:fd:7d:85:2d:6d:62:
fd:af:83:7c:74:40:71:41:dd:e4:f0:ab:e6:79:40:
a0:46:ba:b3:80:36:df:0d:a8:14:e0:c7:b3:9a:1d:
41:70:40:e6:2f:41:b0:af:02:c9:80:d7:27:5a:02:
df:12:81:79:ee:69:11:bf:9d:c0:49:6b:59:3e:04:
2b:72:41:99:79:aa:b3:0f:8b:cc:c8:ff:af:e6:c6:
77:cf:46:a1:fe:1d:44:e9:ae:00:a3:33:eb:26:42:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BD:DE:2F:66:D9:D9:85:2F:66:0B:E5:56:92:D2:5F:40:57:5A:9F
X509v3 Authority Key Identifier:
keyid:4C:B5:2D:4A:23:E5:E2:82:1F:A1:91:5E:C1:37:D3:84:FA:E1:FD:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLUtSiPl4oIfoZFewTfThPrh_S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/nb3eL2bZ2YUvZgvlVpLSX0BXWp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/TLUtSiPl4oIfoZFewTfThPrh_S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.199.0/24
Signature Algorithm: sha256WithRSAEncryption
48:71:55:14:b8:95:c8:bf:17:00:cd:e5:fc:2c:84:e9:67:1e:
a8:bc:12:a4:77:d9:11:7d:f4:fc:60:5e:74:50:25:cf:4f:fd:
55:de:f8:d4:13:00:32:50:c3:0b:9e:32:4a:9b:4f:13:fb:49:
88:0a:fd:44:43:de:b3:95:83:95:22:85:4f:b1:22:4e:fa:8b:
62:35:c7:a7:37:65:c6:7a:34:e7:bd:43:01:c9:ed:ab:5d:7b:
08:c7:e3:b7:51:b0:d7:b4:12:77:bd:98:c8:6f:32:1b:2b:86:
55:fd:d3:e6:9a:6b:93:97:b8:97:16:a4:c4:c1:cf:f7:0b:44:
ab:3c:bf:a2:7c:08:38:b8:15:11:5d:03:68:0a:2e:14:b1:17:
e3:77:a1:65:37:67:68:44:8f:08:f7:69:4b:6b:a1:5f:b6:b6:
a2:81:49:05:1e:62:0e:e4:30:7d:26:f1:b9:ce:3a:fb:97:d9:
56:e2:e7:13:eb:e6:c6:44:f5:4f:5e:92:49:e9:e7:f0:ab:b7:
f0:1f:2d:98:04:a9:6f:8d:02:c4:64:75:34:4a:ff:e6:69:35:
f0:37:cc:46:f8:57:c2:7a:92:7f:dc:a1:c2:2f:fb:7b:76:59:
65:c9:cd:1f:ab:bc:a8:5b:6f:1a:32:b5:88:49:ac:1d:39:70:
0e:68:f2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:45 2024 by rpki-client on console-ams.rpki-client.org