Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/RM8XI7vpMPUUW0BbBUTG9d0TmlY.roa
File: RM8XI7vpMPUUW0BbBUTG9d0TmlY.roa (raw, json)
Hash identifier: MVjEjLNH0nwv4NWGLY5hdwwGSkU+FtPFP8HXKf3k/kU=
Subject key identifier: 44:CF:17:23:BB:E9:30:F5:14:5B:40:5B:05:44:C6:F5:DD:13:9A:56
Certificate issuer: /CN=4e259d806139f953e47c350904aaceec6cc39a1f
Certificate serial: 018AF9F8F8948A1E36A7E08B172F1E301730
Authority key identifier: 4E:25:9D:80:61:39:F9:53:E4:7C:35:09:04:AA:CE:EC:6C:C3:9A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiWdgGE5-VPkfDUJBKrO7GzDmh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/RM8XI7vpMPUUW0BbBUTG9d0TmlY.roa
Signing time: Wed 04 Oct 2023 09:15:57 +0000
ROA not before: Wed 04 Oct 2023 09:15:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 178.255.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f9:f8:f8:94:8a:1e:36:a7:e0:8b:17:2f:1e:30:17:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e259d806139f953e47c350904aaceec6cc39a1f
Validity
Not Before: Oct 4 09:15:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44cf1723bbe930f5145b405b0544c6f5dd139a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:c9:ce:df:da:25:93:c9:cc:bb:9e:88:8e:
73:57:8e:44:2f:ef:98:93:f0:24:bb:ec:9f:3f:9a:
b9:da:8c:02:b5:cf:fa:b1:5b:45:6a:cd:38:88:39:
91:f4:98:1b:e4:3a:01:38:a1:a1:49:be:51:58:d2:
94:e9:53:51:de:d2:0b:26:70:26:e1:08:02:7b:f5:
5f:b3:35:63:b9:e0:bf:93:71:36:3c:ac:1f:39:0b:
fc:04:27:28:7c:8d:e5:7f:3f:b4:5c:af:47:59:25:
6c:99:c1:83:0c:21:69:8e:df:dd:fa:56:ba:f6:8d:
fd:24:5d:6d:76:7b:0d:23:34:c2:a0:3d:e7:45:92:
1b:3a:29:ff:2d:ea:e7:22:d4:ea:d3:75:ff:6e:24:
46:e0:9c:3f:64:8a:34:d3:8d:7e:ab:13:a9:d2:48:
06:1c:c1:d0:6b:35:c5:61:39:e8:a4:92:21:de:3c:
f5:34:0b:31:23:66:54:62:89:62:57:ea:13:1d:f6:
31:d6:27:47:37:73:c0:c5:8e:d6:21:6b:b6:0a:9f:
3c:20:e0:ea:f0:19:94:33:f8:92:d9:a1:82:a9:4a:
d7:2d:ca:34:ec:2b:11:75:94:bc:cf:f6:0d:ab:1c:
c4:f7:f4:3c:9a:0d:55:34:09:13:7e:28:47:53:96:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CF:17:23:BB:E9:30:F5:14:5B:40:5B:05:44:C6:F5:DD:13:9A:56
X509v3 Authority Key Identifier:
keyid:4E:25:9D:80:61:39:F9:53:E4:7C:35:09:04:AA:CE:EC:6C:C3:9A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiWdgGE5-VPkfDUJBKrO7GzDmh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/RM8XI7vpMPUUW0BbBUTG9d0TmlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/TiWdgGE5-VPkfDUJBKrO7GzDmh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a1:40:d9:de:53:73:85:6e:20:f5:5f:c5:a3:d5:17:c2:f4:
ae:96:1d:10:e4:9b:39:69:98:09:bb:29:44:40:71:34:ac:21:
00:83:14:a1:2b:16:97:05:1c:37:c3:f5:90:0f:7c:aa:4e:06:
b2:06:44:00:5b:27:27:db:8d:63:bd:1a:a0:3c:40:b1:e9:80:
7a:93:94:f6:58:93:61:b2:40:6c:e7:ca:87:65:9d:4e:62:81:
02:65:ab:b1:1d:0b:1a:11:a8:b7:7d:b5:6b:d4:38:18:48:de:
e6:bc:74:a3:84:6d:58:86:9b:00:07:2d:41:20:68:fd:0b:c5:
c3:34:f1:66:76:c6:82:dd:38:02:c4:6b:ba:73:05:fa:a1:17:
f2:fa:eb:a2:1f:8b:bc:d0:10:f7:47:47:3a:6b:95:56:75:71:
3c:7c:bb:9b:2f:62:70:71:c2:6a:be:b6:78:61:89:93:5c:e7:
36:4b:10:1d:f0:71:1c:00:74:08:70:a8:cb:74:66:ef:2b:96:
1d:52:4e:e3:48:69:48:1b:f3:7d:a4:a3:e8:c6:38:14:7a:d2:
0a:c9:20:4f:41:87:59:07:7c:f6:83:a6:bc:bc:58:c0:36:b0:
c3:be:e4:b2:ce:7f:11:6e:27:e1:62:8c:70:cf:ca:89:1f:2c:
79:46:ca:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:36 2025 by rpki-client