Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/92aa15-eb62-4f4a-b0d7-24e22482aee6/1/WyRGYT9yAZfTbJifGYQHg2GPskg.roa
File: WyRGYT9yAZfTbJifGYQHg2GPskg.roa (raw, json)
Hash identifier: ppdPhzeRp/kaBs6Yos6J3eTkyqLKPCUCf84SmI0NTFc=
Subject key identifier: 5B:24:46:61:3F:72:01:97:D3:6C:98:9F:19:84:07:83:61:8F:B2:48
Certificate issuer: /CN=214826963868b2651cf0bd944538514a1200f285
Certificate serial: 018CC2DAC0409DC47CBA068B0D819D795B50
Authority key identifier: 21:48:26:96:38:68:B2:65:1C:F0:BD:94:45:38:51:4A:12:00:F2:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUgmljhosmUc8L2URThRShIA8oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/92aa15-eb62-4f4a-b0d7-24e22482aee6/1/WyRGYT9yAZfTbJifGYQHg2GPskg.roa
Signing time: Mon 01 Jan 2024 02:29:25 +0000
ROA not before: Mon 01 Jan 2024 02:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204561
IP address blocks: 178.211.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c0:40:9d:c4:7c:ba:06:8b:0d:81:9d:79:5b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=214826963868b2651cf0bd944538514a1200f285
Validity
Not Before: Jan 1 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b2446613f720197d36c989f19840783618fb248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:02:d6:10:00:e1:45:e2:a1:37:16:e8:00:
b6:53:03:69:8f:b2:f3:8a:f3:b3:9b:63:f5:6c:78:
88:70:14:aa:e1:38:de:a7:fa:f3:b5:7e:0a:a2:f7:
d8:5c:63:02:e4:0f:46:2f:fd:7e:c0:b9:c4:6d:67:
e4:9b:76:b6:0f:16:a9:48:f9:65:1c:9d:f5:2b:f4:
0f:65:7a:56:55:29:86:37:37:25:30:03:20:c5:51:
0f:7f:47:93:c2:6d:ee:44:b5:bd:2b:07:9e:4c:4a:
ef:7d:31:a3:de:bc:d2:85:fe:b9:32:7f:30:f9:2f:
ad:7b:8a:bb:47:91:6c:fa:18:2f:3f:7d:e0:c0:40:
d3:9d:e3:ee:15:3f:eb:9d:dc:c7:a8:67:cc:75:d3:
0e:e0:cc:18:b3:d0:f9:79:b5:ab:f7:f1:6b:48:c5:
19:d6:65:53:0d:2d:f7:2d:b3:0c:c4:9b:08:2a:e6:
17:4b:64:13:1c:1f:09:59:32:93:2e:bd:a4:d7:6e:
bc:a0:13:c5:2a:25:dd:e9:cb:17:75:1a:ff:ac:1e:
88:2b:8c:2c:16:8f:24:b4:76:00:22:71:89:14:54:
bc:d7:2d:a2:28:64:3c:9b:95:6a:5d:43:94:d6:2b:
84:c9:f2:0e:b1:17:e7:9d:79:14:8c:68:55:58:25:
83:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:24:46:61:3F:72:01:97:D3:6C:98:9F:19:84:07:83:61:8F:B2:48
X509v3 Authority Key Identifier:
keyid:21:48:26:96:38:68:B2:65:1C:F0:BD:94:45:38:51:4A:12:00:F2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUgmljhosmUc8L2URThRShIA8oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/92aa15-eb62-4f4a-b0d7-24e22482aee6/1/WyRGYT9yAZfTbJifGYQHg2GPskg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/92aa15-eb62-4f4a-b0d7-24e22482aee6/1/IUgmljhosmUc8L2URThRShIA8oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.131.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ec:c6:e2:07:1e:03:cb:ce:17:13:d1:9d:2b:b8:bc:a4:ff:
71:cf:14:f5:bb:55:07:7e:21:45:34:df:c6:aa:64:b0:19:28:
9b:90:3f:90:36:a4:16:f4:ed:04:ff:a0:0f:9d:38:4c:0c:12:
65:9d:c1:16:1c:ad:35:7f:32:5f:a1:29:27:f8:52:7f:ac:04:
65:3b:4d:7f:9d:d2:b7:9b:67:1a:ae:8c:dd:ea:60:cd:49:37:
df:cf:2a:26:f9:b5:1d:29:50:24:13:d8:49:7f:14:c9:ac:f6:
b0:0b:af:ca:56:01:c3:ae:1f:5e:01:dc:28:78:ec:44:6d:57:
7f:38:1b:5c:e3:d8:1a:6a:b3:d1:70:36:e9:e8:01:2c:32:bf:
2a:4d:0f:56:9a:22:0e:3d:53:aa:ee:33:fc:98:7e:27:c9:d7:
e2:7e:88:b5:0d:c6:ae:73:a6:07:0a:f4:2f:aa:d3:28:59:a8:
93:24:a7:e4:b4:56:37:73:05:c4:70:cb:19:f7:5d:61:b2:ae:
07:6c:d5:45:49:25:db:6f:0e:57:4c:54:7b:de:b6:2a:3e:f5:
15:77:eb:83:3a:9c:1b:8d:98:e3:7b:7d:ea:04:cf:f8:fe:b9:
d7:57:a0:37:24:e6:4f:f7:8d:fe:d6:89:ad:df:e3:ed:fa:4b:
10:d9:1f:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2sBAncR8ugaLDYGdeVtQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDgyNjk2Mzg2OGIyNjUxY2YwYmQ5NDQ1Mzg1MTRhMTIw
MGYyODUwHhcNMjQwMTAxMDIyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjI0NDY2MTNmNzIwMTk3ZDM2Yzk4OWYxOTg0MDc4MzYxOGZiMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcgC1hAA4UXioTcW6AC2UwNpj7Lz
ivOzm2P1bHiIcBSq4Tjep/rztX4KovfYXGMC5A9GL/1+wLnEbWfkm3a2DxapSPll
HJ31K/QPZXpWVSmGNzclMAMgxVEPf0eTwm3uRLW9KweeTErvfTGj3rzShf65Mn8w
+S+te4q7R5Fs+hgvP33gwEDTnePuFT/rndzHqGfMddMO4MwYs9D5ebWr9/FrSMUZ
1mVTDS33LbMMxJsIKuYXS2QTHB8JWTKTLr2k1268oBPFKiXd6csXdRr/rB6IK4ws
Fo8ktHYAInGJFFS81y2iKGQ8m5VqXUOU1iuEyfIOsRfnnXkUjGhVWCWDPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFskRmE/cgGX02yYnxmEB4Nhj7JIMB8GA1UdIwQY
MBaAFCFIJpY4aLJlHPC9lEU4UUoSAPKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVnbWxqaG9zbVVjOEwyVVJUaFJTaElBOG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MmFhMTUtZWI2Mi00ZjRhLWIwZDct
MjRlMjI0ODJhZWU2LzEvV3lSR1lUOXlBWmZUYkppZkdZUUhnMkdQc2tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC85MmFhMTUtZWI2Mi00ZjRhLWIwZDctMjRlMjI0ODJhZWU2
LzEvSVVnbWxqaG9zbVVjOEwyVVJUaFJTaElBOG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstODMA0G
CSqGSIb3DQEBCwUAA4IBAQBn7MbiBx4Dy84XE9GdK7i8pP9xzxT1u1UHfiFFNN/G
qmSwGSibkD+QNqQW9O0E/6APnThMDBJlncEWHK01fzJfoSkn+FJ/rARlO01/ndK3
m2carozd6mDNSTffzyom+bUdKVAkE9hJfxTJrPawC6/KVgHDrh9eAdwoeOxEbVd/
OBtc49gaarPRcDbp6AEsMr8qTQ9WmiIOPVOq7jP8mH4nydfifoi1Dcauc6YHCvQv
qtMoWaiTJKfktFY3cwXEcMsZ911hsq4HbNVFSSXbbw5XTFR73rYqPvUVd+uDOpwb
jZjje33qBM/4/rnXV6A3JOZP943+1omt3+Pt+ksQ2R9E
-----END CERTIFICATE-----
Generated at Wed Jan 31 12:07:42 2024 by rpki-client on console-fra.rpki-client.org