Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/d4OF3UVXLwExKcD5YBtgfZW5NNQ.roa
File: d4OF3UVXLwExKcD5YBtgfZW5NNQ.roa (raw, json)
Hash identifier: d2Qx1jTVBk9LzwgwIrjGgYD6/0rNWzwT1DI64NFkJmE=
Subject key identifier: 77:83:85:DD:45:57:2F:01:31:29:C0:F9:60:1B:60:7D:95:B9:34:D4
Certificate issuer: /CN=fc4d168cf9fa66d4a2c921dc2b54a3c77efbed61
Certificate serial: 01856C53C90625D75EEA16042F4B331B2009
Authority key identifier: FC:4D:16:8C:F9:FA:66:D4:A2:C9:21:DC:2B:54:A3:C7:7E:FB:ED:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0WjPn6ZtSiySHcK1Sjx3777WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/d4OF3UVXLwExKcD5YBtgfZW5NNQ.roa
Signing time: Sun 01 Jan 2023 07:55:08 +0000
ROA not before: Sun 01 Jan 2023 07:55:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 178.211.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:c9:06:25:d7:5e:ea:16:04:2f:4b:33:1b:20:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d168cf9fa66d4a2c921dc2b54a3c77efbed61
Validity
Not Before: Jan 1 07:55:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=778385dd45572f013129c0f9601b607d95b934d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1c:c7:00:c7:69:f9:1b:75:40:89:91:3d:61:
99:5b:a2:89:40:2a:46:2d:13:5b:8f:82:71:16:13:
a4:83:4d:2d:6f:6f:dc:86:37:ca:e1:69:15:b7:7c:
a4:b8:5f:4f:f2:b9:88:fe:87:b8:c7:b9:6e:c3:16:
b2:fa:d0:df:62:b9:b1:f2:ee:46:20:db:98:d7:b6:
e7:d3:1b:bb:2a:5d:50:99:59:e4:0e:4d:f8:bd:52:
4a:ad:8a:09:67:c1:ff:0e:aa:8f:32:c6:a4:fa:3d:
13:cf:1b:0d:52:8f:cf:75:e5:c6:44:c4:37:6b:48:
48:bc:ec:9d:95:57:b4:92:47:ed:f9:a5:eb:e0:0e:
1d:c9:6d:19:82:6e:cc:00:ee:59:d1:15:de:65:33:
93:89:74:31:f7:d3:6b:66:31:e1:76:e7:79:dd:89:
3d:17:a2:7a:8c:c0:ea:15:31:fc:16:e8:7b:9d:58:
96:c7:62:19:f1:07:ec:57:e5:89:80:4d:0c:13:ad:
08:8c:e4:cc:d3:b0:39:b5:92:e7:23:38:61:02:82:
51:bc:b5:78:12:df:9b:1e:fb:c9:aa:bb:55:6d:3e:
09:4f:7c:25:27:67:b4:6f:e4:d3:47:c7:02:a9:0b:
b3:22:c6:89:33:72:bf:f3:e0:9f:9b:1b:fb:80:74:
be:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:83:85:DD:45:57:2F:01:31:29:C0:F9:60:1B:60:7D:95:B9:34:D4
X509v3 Authority Key Identifier:
keyid:FC:4D:16:8C:F9:FA:66:D4:A2:C9:21:DC:2B:54:A3:C7:7E:FB:ED:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0WjPn6ZtSiySHcK1Sjx3777WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/d4OF3UVXLwExKcD5YBtgfZW5NNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/_E0WjPn6ZtSiySHcK1Sjx3777WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.159.0/24
Signature Algorithm: sha256WithRSAEncryption
88:36:e1:ad:dd:5f:b4:00:e5:80:39:6a:1b:90:58:64:18:72:
68:58:3c:81:b5:78:9b:7f:d5:42:f7:1e:d1:37:71:13:cf:b8:
26:db:e2:71:90:13:bd:25:99:04:d3:3b:6f:2d:00:ca:06:75:
05:92:56:00:35:7f:e3:2f:4e:1a:a8:85:f3:29:21:21:22:fa:
2d:a3:8f:27:56:ce:76:c7:b3:04:df:50:62:2c:62:f5:3b:f9:
d2:0e:f8:a4:39:7a:2d:ba:33:19:cb:3e:4b:87:d9:19:a8:69:
92:7c:67:b1:30:a6:29:98:70:97:b9:32:ee:f1:04:91:b1:54:
8d:fd:19:18:d5:29:b5:ec:b4:7e:04:67:f6:45:45:6d:bb:c6:
58:0b:98:de:87:6d:96:12:7c:da:cb:94:69:35:3a:bd:18:8f:
20:a6:39:a9:fc:b0:9a:21:61:59:a0:b6:d0:b8:63:23:a3:46:
6e:10:73:34:44:96:09:80:3a:5d:25:91:4f:c6:5b:de:5a:7b:
31:a0:b1:63:d5:0e:74:42:e5:c3:fe:a9:3f:18:ac:96:14:72:
ec:50:2b:bf:34:86:b1:43:30:c0:08:ff:f0:20:79:a9:c2:d5:
69:18:71:fb:7b:87:87:e0:fc:19:12:2e:21:1e:01:46:29:d2:
fa:48:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:04 2024 by rpki-client on console-fra.rpki-client.org