Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/mjtofP8VWC5ExBLlIFXt1YU-x_I.roa
File: mjtofP8VWC5ExBLlIFXt1YU-x_I.roa (raw, json)
Hash identifier: 3QsTsFYdg4N8xI3Xvoz8XpEzNqFSJiwfIi1RBjPweOs=
Subject key identifier: 9A:3B:68:7C:FF:15:58:2E:44:C4:12:E5:20:55:ED:D5:85:3E:C7:F2
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 396CE340
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/mjtofP8VWC5ExBLlIFXt1YU-x_I.roa
Signing time: Wed 18 May 2022 06:43:29 +0000
ROA not before: Wed 18 May 2022 06:43:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211279
IP address blocks: 178.175.178.0/23 maxlen: 24
178.175.176.0/23 maxlen: 24
178.175.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963437376 (0x396ce340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: May 18 06:43:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a3b687cff15582e44c412e52055edd5853ec7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:73:1a:81:06:de:fc:e0:9b:f8:76:6f:09:
f0:8e:2f:c2:92:da:1f:f5:c8:45:7c:54:ed:e2:71:
9b:49:99:e0:9e:e4:36:c9:30:14:de:d7:50:81:e9:
0a:d7:51:b5:eb:71:70:5b:8d:f2:39:f3:ff:2d:5b:
d7:06:c7:5d:c7:a4:73:24:96:d8:d6:93:3d:34:90:
9e:0a:d5:82:71:b5:cd:b0:8c:23:63:79:cd:cb:a6:
fc:e6:aa:51:0b:d6:c8:b0:f4:ff:41:fb:99:5d:2d:
ef:47:9d:ea:85:36:70:3c:fc:0c:e4:72:52:78:c7:
e8:ea:ca:0c:0a:5a:32:b8:86:9f:bf:58:ef:ca:80:
1e:f0:27:a9:8e:3b:a3:c5:8a:7e:dd:8f:d1:ed:fd:
e7:75:36:97:a8:8b:30:a2:d7:e6:9d:dc:7c:42:cc:
20:c3:01:ca:ba:3a:a7:26:11:2a:06:28:35:18:63:
01:f9:fa:d4:3e:aa:5c:5d:31:3a:37:9e:18:51:5b:
7c:fe:21:48:76:fb:69:b4:0c:00:1c:96:1c:6b:70:
9d:f0:5e:c5:c3:24:c0:3e:03:2b:54:86:c9:91:54:
f9:65:10:40:37:b4:fc:d5:ab:2d:e8:4f:f0:73:f0:
c8:8d:f9:c2:46:53:a6:77:f4:c5:8f:2c:dd:78:eb:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3B:68:7C:FF:15:58:2E:44:C4:12:E5:20:55:ED:D5:85:3E:C7:F2
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/mjtofP8VWC5ExBLlIFXt1YU-x_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.174.0-178.175.179.255
Signature Algorithm: sha256WithRSAEncryption
a9:28:ca:3b:22:92:eb:09:61:93:a5:42:af:94:f6:65:a2:fc:
2e:14:d2:13:4e:4d:11:9e:a6:5a:06:ab:73:d4:12:5e:0e:00:
01:47:e5:2a:28:94:15:ad:94:aa:fd:66:6d:ce:9b:a5:c8:ab:
7c:24:bb:c8:82:50:1f:19:be:dc:7a:d7:32:6d:1c:68:b1:6e:
45:85:47:2f:c7:71:48:97:6c:5e:cf:d0:04:87:61:12:4c:7e:
48:6b:75:4d:64:55:20:15:fe:c7:83:6c:c8:ac:5e:9d:be:53:
a3:68:6c:46:f8:9f:2d:05:f3:19:54:dc:d6:d7:fc:21:11:61:
20:a0:02:ae:5b:22:01:a4:dc:a5:41:eb:ed:b9:77:86:c1:21:
9d:84:e5:51:a0:91:f8:ff:a4:f3:b6:4c:cd:ff:08:76:ca:80:
57:a1:78:63:7b:1a:99:85:cc:53:b1:7e:cb:71:2a:b2:9b:b7:
1e:40:f5:20:ec:41:42:ef:a2:92:46:45:84:f7:26:e7:81:af:
e5:f7:b2:b1:b4:69:12:83:4f:7b:8e:e5:e5:b7:ad:8e:b9:ea:
ad:f8:d7:23:49:32:1c:0f:7a:0e:fd:44:d8:68:2d:9d:fa:4d:
25:19:d3:2e:58:13:3a:11:0b:3b:15:c1:b7:8c:da:b1:33:74:
c5:b6:f0:1a
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEOWzjQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTFiOTE1MDQ5ODMwOTE1MDZhMWE5NDQ0NTdhNDU1OGI5NGRhYjdmMB4XDTIyMDUx
ODA2NDMyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWEzYjY4N2NmZjE1
NTgyZTQ0YzQxMmU1MjA1NWVkZDU4NTNlYzdmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANXicxqBBt784Jv4dm8J8I4vwpLaH/XIRXxU7eJxm0mZ4J7k
NskwFN7XUIHpCtdRtetxcFuN8jnz/y1b1wbHXcekcySW2NaTPTSQngrVgnG1zbCM
I2N5zcum/OaqUQvWyLD0/0H7mV0t70ed6oU2cDz8DORyUnjH6OrKDApaMriGn79Y
78qAHvAnqY47o8WKft2P0e3953U2l6iLMKLX5p3cfELMIMMByro6pyYRKgYoNRhj
Afn61D6qXF0xOjeeGFFbfP4hSHb7abQMAByWHGtwnfBexcMkwD4DK1SGyZFU+WUQ
QDe0/NWrLehP8HPwyI35wkZTpnf0xY8s3XjrOvECAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBSaO2h8/xVYLkTEEuUgVe3VhT7H8jAfBgNVHSMEGDAWgBS5G5FQSYMJFQah
qURFekVYuU2rfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VSdVJVRW1EQ1JVR29hbEVSWHBGV0xsTnEzOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzRlMTdmLWY5ZjQtNDc4OS05MmI3LTlkZDZlODhmY2M4ZC8x
L21qdG9mUDhWV0M1RXhCTGxJRlh0MVlVLXhfSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzRlMTdmLWY5ZjQtNDc4OS05MmI3LTlkZDZlODhmY2M4ZC8xL3VSdVJVRW1EQ1JV
R29hbEVSWHBGV0xsTnEzOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQBsq+uAwQCsq+wMA0GCSqGSIb3
DQEBCwUAA4IBAQCpKMo7IpLrCWGTpUKvlPZlovwuFNITTk0RnqZaBqtz1BJeDgAB
R+UqKJQVrZSq/WZtzpulyKt8JLvIglAfGb7cetcybRxosW5FhUcvx3FIl2xez9AE
h2ESTH5Ia3VNZFUgFf7Hg2zIrF6dvlOjaGxG+J8tBfMZVNzW1/whEWEgoAKuWyIB
pNylQevtuXeGwSGdhOVRoJH4/6TztkzN/wh2yoBXoXhjexqZhcxTsX7LcSqym7ce
QPUg7EFC76KSRkWE9ybnga/l97KxtGkSg097juXlt62Oueqt+NcjSTIcD3oO/UTY
aC2d+k0lGdMuWBM6EQs7FcG3jNqxM3TFtvAa
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:39 2025 by rpki-client