Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/pVDswIaeQoUNlSy9cNtqXjgNeZ8.roa
File: pVDswIaeQoUNlSy9cNtqXjgNeZ8.roa (raw, json)
Hash identifier: Ez1l6KK16ELi8S35F030TUkQyF5LDJhGSj/SUaPZcDA=
Subject key identifier: A5:50:EC:C0:86:9E:42:85:0D:95:2C:BD:70:DB:6A:5E:38:0D:79:9F
Certificate issuer: /CN=c40939a28c4b00489a92b42161aa82366acdc453
Certificate serial: 1B75B6
Authority key identifier: C4:09:39:A2:8C:4B:00:48:9A:92:B4:21:61:AA:82:36:6A:CD:C4:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAk5ooxLAEiakrQhYaqCNmrNxFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/pVDswIaeQoUNlSy9cNtqXjgNeZ8.roa
Signing time: Sat 01 Jan 2022 01:03:20 +0000
ROA not before: Sat 01 Jan 2022 01:03:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57271
IP address blocks: 178.212.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1799606 (0x1b75b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40939a28c4b00489a92b42161aa82366acdc453
Validity
Not Before: Jan 1 01:03:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a550ecc0869e42850d952cbd70db6a5e380d799f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:8b:9a:6e:63:7e:db:bd:44:7e:82:ab:8c:
09:2a:b8:f0:8c:d0:48:f1:fb:0c:69:69:49:07:a5:
27:d8:1f:84:97:91:ea:9e:79:07:4a:07:df:98:51:
a9:f5:b2:f2:a9:2e:79:fc:45:47:ac:c4:e0:98:86:
2e:77:a7:a6:db:b4:88:e4:fb:fe:58:8b:0e:5f:4c:
cf:9a:58:98:86:87:b0:14:e1:d1:f1:2f:86:53:5d:
a5:d3:9a:ca:21:c8:05:2a:dd:93:e7:32:8f:58:07:
4c:56:72:2f:52:4a:e3:bc:fc:b9:26:0a:c0:56:5f:
8a:de:54:55:ba:fc:1c:f6:e8:e3:4b:65:fc:42:5b:
82:46:8e:76:d2:d0:bd:da:59:19:d0:8d:e8:d7:3d:
eb:e8:e9:fb:7d:db:d6:3c:52:6d:f3:30:e6:86:97:
04:c3:fc:d8:e4:e7:d1:75:71:c9:59:f8:79:15:f7:
6b:15:90:3f:91:90:ee:41:c3:aa:fc:e8:9d:a7:bc:
91:29:df:9b:f4:21:20:89:33:35:1b:d4:d2:e5:9f:
d3:b9:f6:8f:5e:0b:56:71:09:30:4b:f6:de:74:22:
be:aa:e2:29:79:69:5e:76:9e:22:49:1f:9e:d1:55:
b6:19:e6:d9:95:f0:8b:23:33:7e:7f:fd:81:f5:7e:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:50:EC:C0:86:9E:42:85:0D:95:2C:BD:70:DB:6A:5E:38:0D:79:9F
X509v3 Authority Key Identifier:
keyid:C4:09:39:A2:8C:4B:00:48:9A:92:B4:21:61:AA:82:36:6A:CD:C4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAk5ooxLAEiakrQhYaqCNmrNxFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/pVDswIaeQoUNlSy9cNtqXjgNeZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/xAk5ooxLAEiakrQhYaqCNmrNxFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.138.0/24
Signature Algorithm: sha256WithRSAEncryption
27:5f:e9:1a:0a:b8:f1:94:1f:d4:4d:64:45:bd:49:14:9a:c9:
5d:8c:0d:9b:ff:bd:94:ac:71:ce:97:e4:b2:65:bc:4b:9d:38:
f0:00:6e:2b:a9:5f:c3:94:aa:71:5b:0d:fc:83:a3:1f:73:48:
f6:11:2a:cc:2e:bb:96:87:1b:aa:59:c9:89:70:43:ad:86:5d:
16:4c:a5:d6:1c:f1:3d:9b:19:18:2a:eb:71:37:12:9f:d2:5d:
f0:a0:77:c1:52:ec:d1:18:33:3e:96:61:ac:00:4c:bc:7d:7e:
38:e9:ba:a5:15:c8:d1:b9:99:ad:db:58:c8:d9:0b:c8:ce:e7:
15:7f:f9:e9:01:48:51:6b:1c:7e:8b:1a:ac:70:c2:74:d1:79:
c9:1f:99:90:55:37:f2:8e:7e:13:d2:50:98:e8:da:ac:04:30:
91:7d:b5:26:77:a8:fc:e8:8e:90:a9:35:4a:0c:b9:82:b1:96:
a0:9f:df:c4:a2:20:0a:69:f1:70:98:62:42:00:a0:f2:76:8c:
ea:23:27:2e:94:e3:dd:a3:46:67:18:47:3f:29:4f:ef:43:d5:
bd:7c:4a:cd:69:5e:0e:2a:0c:34:75:77:da:bb:96:b8:ac:d7:
f4:4c:d3:5b:49:29:c8:eb:0d:9e:26:8e:5f:e5:24:93:83:4c:
c1:f0:ce:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:24 2025 by rpki-client