Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/3PM2h7oA5li7EvLnzbJUv6zO9N8.roa
File: 3PM2h7oA5li7EvLnzbJUv6zO9N8.roa (raw, json)
Hash identifier: FvmFWVeBL3ciB8lPKn1g9WwYSnUIgZH9N/jDKVLgpoU=
Subject key identifier: DC:F3:36:87:BA:00:E6:58:BB:12:F2:E7:CD:B2:54:BF:AC:CE:F4:DF
Certificate issuer: /CN=d251a73c2a9bb6f9d5c88e0b39888c8a95c57f82
Certificate serial: 018619D1DD69466539A748EB8FEB6C11E61B
Authority key identifier: D2:51:A7:3C:2A:9B:B6:F9:D5:C8:8E:0B:39:88:8C:8A:95:C5:7F:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lGnPCqbtvnVyI4LOYiMipXFf4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/3PM2h7oA5li7EvLnzbJUv6zO9N8.roa
Signing time: Sat 04 Feb 2023 00:27:09 +0000
ROA not before: Sat 04 Feb 2023 00:27:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 178.23.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:19:d1:dd:69:46:65:39:a7:48:eb:8f:eb:6c:11:e6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251a73c2a9bb6f9d5c88e0b39888c8a95c57f82
Validity
Not Before: Feb 4 00:27:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcf33687ba00e658bb12f2e7cdb254bfaccef4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1e:e6:63:f4:65:53:ab:50:76:03:f1:76:41:
bf:83:33:2e:bb:dd:63:8c:95:7f:74:94:7f:a8:8b:
05:6d:1e:1d:14:95:39:de:a6:43:30:44:5c:b5:a4:
f6:5e:f8:87:7d:b7:6a:c4:fb:69:d9:c2:87:a9:63:
d5:d0:f1:86:bf:ee:19:a9:35:17:20:10:56:aa:bb:
54:95:6e:36:39:47:1b:d3:2b:c9:46:50:41:6a:75:
14:e3:b2:c6:bd:64:1b:e7:14:8e:ce:64:d3:69:14:
98:a3:ce:96:96:ff:a7:8f:25:29:de:48:b8:21:84:
f8:4c:b1:97:0f:8e:40:c4:ab:c3:10:c3:b0:4d:c1:
a1:2d:4d:92:fa:51:a1:30:b3:b5:84:f5:3c:d3:93:
62:21:b7:b1:26:87:39:b8:1a:5c:34:60:22:61:1c:
95:a7:45:b9:09:3a:2e:1e:7b:56:39:49:bf:1f:6b:
77:b3:f3:96:8f:26:b6:5c:72:3b:c3:26:d5:41:74:
e9:8a:d7:83:ed:fe:a5:88:e5:4c:3c:98:d0:76:ac:
fe:2e:50:75:c9:75:65:b3:6e:30:8f:d6:90:96:71:
86:ea:73:0d:ca:25:c6:73:26:52:a9:7f:04:99:3d:
58:0a:fb:db:0a:42:63:5f:e6:7f:81:41:ac:61:fe:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F3:36:87:BA:00:E6:58:BB:12:F2:E7:CD:B2:54:BF:AC:CE:F4:DF
X509v3 Authority Key Identifier:
keyid:D2:51:A7:3C:2A:9B:B6:F9:D5:C8:8E:0B:39:88:8C:8A:95:C5:7F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lGnPCqbtvnVyI4LOYiMipXFf4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/3PM2h7oA5li7EvLnzbJUv6zO9N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/0lGnPCqbtvnVyI4LOYiMipXFf4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.188.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c8:b6:ca:71:59:f5:a0:a9:01:b9:c5:e6:80:83:3b:64:dd:
2c:8a:15:43:49:4b:89:6b:01:bb:e8:be:7f:b2:9c:d2:9f:7d:
f2:50:dc:c4:b4:8e:cf:84:5e:46:46:fd:ef:2e:ba:6f:b6:67:
83:ae:6c:c0:a3:b8:7b:2f:f8:5a:98:5a:84:5b:86:1e:63:3f:
88:24:30:af:c4:ef:d5:07:c6:e5:83:cc:f0:92:e8:23:db:8f:
e4:63:f5:be:00:15:e5:d0:3a:b8:81:e7:e2:8b:8c:c4:8b:e8:
11:0b:dc:da:e1:3a:47:c6:10:7e:0b:04:d7:5b:c8:6c:4e:e0:
ca:96:34:47:d3:c5:c5:51:45:77:bc:d1:ec:5e:20:af:65:6a:
55:07:d5:90:72:32:6f:eb:5a:55:d9:ac:b2:24:a4:6e:e5:95:
03:7c:0c:78:57:3b:c6:bf:66:38:40:8b:d1:9d:55:a2:9c:04:
7a:dd:80:40:14:cc:6d:8d:76:88:db:03:1c:f3:fb:12:e2:ed:
8a:96:04:90:35:50:85:ac:4c:e1:8d:52:1a:ce:db:2d:42:e1:
f1:25:f0:50:fc:4f:78:26:17:99:2e:19:cd:1e:0d:a2:56:26:
59:80:bc:50:b1:b2:f9:ec:05:ff:23:9c:0b:c0:06:bc:ef:ea:
37:69:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:33 2025 by rpki-client