Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/fJYcMKXhIxFgLjwjbyP4vs5DnMs.roa
File: fJYcMKXhIxFgLjwjbyP4vs5DnMs.roa (raw, json)
Hash identifier: GMi+EHIS++fqjaplorAXyDyPTsmA6VbpD8IR1wctTIc=
Subject key identifier: 7C:96:1C:30:A5:E1:23:11:60:2E:3C:23:6F:23:F8:BE:CE:43:9C:CB
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 0192AA7C7852B7679E3ABABA10C3A4FAD8B2
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/fJYcMKXhIxFgLjwjbyP4vs5DnMs.roa
Signing time: Sun 20 Oct 2024 15:12:16 +0000
ROA not before: Sun 20 Oct 2024 15:12:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 178.21.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:aa:7c:78:52:b7:67:9e:3a:ba:ba:10:c3:a4:fa:d8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Oct 20 15:12:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c961c30a5e12311602e3c236f23f8bece439ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:b0:03:fb:45:c9:d7:97:7c:d9:00:c5:b8:
f4:8d:9c:b6:3e:3a:d0:a8:47:27:ab:8a:a5:38:d6:
fb:bc:ea:7c:0f:97:15:f1:a8:b3:90:c9:0f:15:5a:
20:ec:29:3d:35:e2:c2:1f:5e:78:44:d8:f5:d5:ee:
91:e9:07:48:9c:9a:c3:aa:24:18:b5:17:35:1a:68:
10:a3:77:5b:b4:83:aa:d5:d9:2b:46:c0:0b:3e:cb:
7d:a9:b0:e4:b4:77:9f:17:7a:d9:a8:f6:1b:be:31:
a2:e9:48:9e:11:58:09:5a:70:59:3c:38:68:e7:10:
b0:4a:7c:12:b8:85:b9:83:a7:58:6b:70:b4:48:31:
ec:ae:6c:0e:b5:e8:4f:15:87:62:6b:90:b2:1e:e7:
4e:ab:0e:48:b1:22:51:0a:f9:9d:a6:b4:7a:d2:af:
8e:82:26:2f:85:d4:7f:29:62:a8:8d:a7:0f:ce:da:
fc:87:99:34:49:3b:09:8a:41:b8:87:a9:f5:66:68:
96:4a:22:b6:dd:bf:b5:2d:7e:b9:1b:a3:ec:5a:d3:
93:d2:6d:5c:d7:e5:0b:22:b6:86:f1:75:46:dc:60:
76:98:05:84:ca:7f:59:67:54:69:40:ed:7b:b6:12:
d9:0c:36:57:b6:ed:55:4a:52:ba:a4:6b:10:be:13:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:96:1C:30:A5:E1:23:11:60:2E:3C:23:6F:23:F8:BE:CE:43:9C:CB
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/fJYcMKXhIxFgLjwjbyP4vs5DnMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.148.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:49:c9:b8:7e:ac:a8:65:6e:c7:30:ea:e8:e4:82:a2:b9:85:
dd:4c:7b:5c:a2:47:10:be:f9:de:15:7c:c0:a4:4a:52:7f:02:
15:76:1c:2e:48:a2:d4:72:90:4d:ad:d5:80:8b:e3:b9:84:66:
75:e8:78:0a:f7:4b:d6:7e:1e:48:79:88:e5:0e:79:55:19:6e:
5d:f0:47:e8:82:bd:39:7b:d0:45:6d:4f:c8:c2:a7:28:d1:79:
40:1c:4e:b6:5c:3e:9f:a4:18:8a:27:a3:6f:03:19:e1:5c:4c:
bf:be:32:08:20:45:6c:9f:c5:5b:1c:1d:a5:9b:85:e8:88:4a:
8c:e9:43:49:ec:c8:e7:fc:12:60:69:ce:63:d0:74:1e:4b:4f:
a0:10:4d:9e:17:18:72:9a:16:2b:bc:4f:da:37:f9:df:50:f0:
74:92:c0:28:d4:a9:05:53:a1:3d:f2:25:c7:50:07:3e:84:a0:
8e:ba:09:1a:ab:a8:c2:97:fd:9f:8d:ae:93:ac:f7:be:3f:47:
2a:8a:dd:0f:bf:d5:03:d2:46:0b:86:59:c1:84:19:6d:69:59:
c7:28:90:51:cc:eb:24:3e:9f:2c:5b:d2:c6:9b:3e:d8:ce:cf:
0b:2b:5a:e8:45:6f:84:48:20:78:7a:6e:f9:d4:60:16:a6:ae:
89:7a:14:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKqfHhSt2eeOrq6EMOk+tiyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZTE1N2IyOTE4Y2FkY2E4YTVhOWZiYzY2ZTk3NzYwOGE2
ZGY1ZTEwHhcNMjQxMDIwMTUxMjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yzk2MWMzMGE1ZTEyMzExNjAyZTNjMjM2ZjIzZjhiZWNlNDM5Y2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9ywA/tFydeXfNkAxbj0jZy2PjrQ
qEcnq4qlONb7vOp8D5cV8aizkMkPFVog7Ck9NeLCH154RNj11e6R6QdInJrDqiQY
tRc1GmgQo3dbtIOq1dkrRsALPst9qbDktHefF3rZqPYbvjGi6UieEVgJWnBZPDho
5xCwSnwSuIW5g6dYa3C0SDHsrmwOtehPFYdia5CyHudOqw5IsSJRCvmdprR60q+O
giYvhdR/KWKojacPztr8h5k0STsJikG4h6n1ZmiWSiK23b+1LX65G6PsWtOT0m1c
1+ULIraG8XVG3GB2mAWEyn9ZZ1RpQO17thLZDDZXtu1VSlK6pGsQvhO2tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHyWHDCl4SMRYC48I28j+L7OQ5zLMB8GA1UdIwQY
MBaAFHPhV7KRjK3KilqfvGbpd2CKbfXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAt
MDBhMTU0YjhlY2IxLzEvZkpZY01LWGhJeEZnTGp3amJ5UDR2czVEbk1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAtMDBhMTU0YjhlY2Ix
LzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshWUMA0G
CSqGSIb3DQEBCwUAA4IBAQAOScm4fqyoZW7HMOro5IKiuYXdTHtcokcQvvneFXzA
pEpSfwIVdhwuSKLUcpBNrdWAi+O5hGZ16HgK90vWfh5IeYjlDnlVGW5d8Efogr05
e9BFbU/Iwqco0XlAHE62XD6fpBiKJ6NvAxnhXEy/vjIIIEVsn8VbHB2lm4XoiEqM
6UNJ7Mjn/BJgac5j0HQeS0+gEE2eFxhymhYrvE/aN/nfUPB0ksAo1KkFU6E98iXH
UAc+hKCOugkaq6jCl/2fja6TrPe+P0cqit0Pv9UD0kYLhlnBhBltaVnHKJBRzOsk
Pp8sW9LGmz7Yzs8LK1roRW+ESCB4em751GAWpq6JehTH
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:20:51 2025 by rpki-client