Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/RgNPS39kDHl40_gpxXHZUe_Zugk.roa
File: RgNPS39kDHl40_gpxXHZUe_Zugk.roa (raw, json)
Hash identifier: R9a0peRhhIDOeNUCA+vM8bhMn4CfYZOghrUNbHHrdns=
Subject key identifier: 46:03:4F:4B:7F:64:0C:79:78:D3:F8:29:C5:71:D9:51:EF:D9:BA:09
Certificate issuer: /CN=2d824469fdc857c1e5bb1f532ce3c34d3b96f361
Certificate serial: 0182D09C883C8DEB9D7D604A68BC1D85DF54
Authority key identifier: 2D:82:44:69:FD:C8:57:C1:E5:BB:1F:53:2C:E3:C3:4D:3B:96:F3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYJEaf3IV8Hlux9TLOPDTTuW82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/RgNPS39kDHl40_gpxXHZUe_Zugk.roa
Signing time: Wed 24 Aug 2022 16:08:15 +0000
ROA not before: Wed 24 Aug 2022 16:08:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 178.23.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:9c:88:3c:8d:eb:9d:7d:60:4a:68:bc:1d:85:df:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d824469fdc857c1e5bb1f532ce3c34d3b96f361
Validity
Not Before: Aug 24 16:08:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46034f4b7f640c7978d3f829c571d951efd9ba09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:4d:e5:55:fb:6b:37:07:eb:b4:87:a1:1a:
57:6b:e3:32:3e:80:8b:d9:17:1a:1b:0f:7c:07:22:
18:03:86:48:cf:2b:49:ca:e5:eb:4c:fd:5d:01:29:
74:d0:71:35:dd:e5:c0:7d:f1:2a:f1:23:b1:c6:65:
37:3d:bc:6a:27:7c:be:5a:df:2c:9d:ce:d3:b0:58:
d0:6c:30:c1:11:82:da:d7:d7:0e:54:48:3b:1e:f6:
0b:bc:cb:41:ec:c5:9c:c9:ab:40:af:8d:0d:fe:73:
8d:44:ec:f1:c0:96:e4:8f:00:60:09:7d:14:39:d3:
14:96:a4:81:02:20:12:b1:bb:ff:90:ce:9e:24:8d:
00:51:36:57:82:d4:d1:36:1f:88:af:01:96:44:8a:
f1:fb:4d:b1:a2:92:f2:53:07:c6:16:57:6a:42:07:
52:85:a2:fb:4d:1f:97:84:56:0d:9d:2e:82:e2:96:
b2:c1:9a:63:53:ed:c1:1b:3d:bc:79:13:0b:c5:ec:
3c:36:30:21:16:4f:91:fe:69:1e:86:49:34:34:f5:
4f:75:78:9b:09:0c:9b:58:7c:a6:44:63:db:fb:d0:
78:f3:40:86:90:5a:19:82:d6:55:29:07:d0:7b:3d:
6e:8f:bc:12:55:e1:de:98:b2:12:67:19:a3:65:9d:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:03:4F:4B:7F:64:0C:79:78:D3:F8:29:C5:71:D9:51:EF:D9:BA:09
X509v3 Authority Key Identifier:
keyid:2D:82:44:69:FD:C8:57:C1:E5:BB:1F:53:2C:E3:C3:4D:3B:96:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYJEaf3IV8Hlux9TLOPDTTuW82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/RgNPS39kDHl40_gpxXHZUe_Zugk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/LYJEaf3IV8Hlux9TLOPDTTuW82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.190.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c6:ba:65:18:c4:fe:21:ac:4a:aa:30:3e:38:e0:ab:40:a8:
59:a2:02:33:54:b2:bb:07:5b:64:8e:7d:7c:ca:61:e8:2b:ad:
6a:44:c7:d6:cd:14:79:45:9f:9c:28:ac:69:14:4f:21:a1:7f:
31:78:d8:d5:c7:02:12:4e:3e:37:3b:de:95:d3:47:1d:fa:12:
29:28:ce:26:86:3b:54:f6:88:6e:e2:2f:06:dc:67:f6:68:0b:
d7:9b:43:9e:9c:71:36:95:a7:39:b6:a3:01:84:2c:d9:a4:3b:
40:1a:5f:2d:3d:bd:6e:88:6b:30:4a:ee:35:c5:c9:fd:8a:5c:
af:b8:d0:82:44:ba:f1:81:d0:fe:5f:1f:34:a5:9b:e4:03:8d:
d3:ea:8d:32:95:d1:05:ac:95:ad:03:1d:d3:d6:d8:53:f7:f9:
15:7d:47:e0:08:9d:5c:25:7d:28:8c:df:0e:3e:2f:bb:81:9e:
51:45:d8:c8:17:7b:d0:23:b8:a2:1f:64:39:a5:fd:17:02:77:
be:39:49:c2:ec:f4:43:4e:c8:e3:dd:69:11:5f:2b:98:d2:ca:
6d:11:b7:33:d8:3a:36:7d:39:24:0b:76:6e:3d:6f:49:d1:0f:
72:14:41:b9:44:79:ba:a4:d2:67:44:6b:56:45:32:16:4c:27:
ed:cb:17:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLQnIg8jeudfWBKaLwdhd9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkODI0NDY5ZmRjODU3YzFlNWJiMWY1MzJjZTNjMzRkM2I5
NmYzNjEwHhcNMjIwODI0MTYwODE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjAzNGY0YjdmNjQwYzc5NzhkM2Y4MjljNTcxZDk1MWVmZDliYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT5N5VX7azcH67SHoRpXa+MyPoCL
2RcaGw98ByIYA4ZIzytJyuXrTP1dASl00HE13eXAffEq8SOxxmU3PbxqJ3y+Wt8s
nc7TsFjQbDDBEYLa19cOVEg7HvYLvMtB7MWcyatAr40N/nONROzxwJbkjwBgCX0U
OdMUlqSBAiASsbv/kM6eJI0AUTZXgtTRNh+IrwGWRIrx+02xopLyUwfGFldqQgdS
haL7TR+XhFYNnS6C4paywZpjU+3BGz28eRMLxew8NjAhFk+R/mkehkk0NPVPdXib
CQybWHymRGPb+9B480CGkFoZgtZVKQfQez1uj7wSVeHemLISZxmjZZ0j+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEYDT0t/ZAx5eNP4KcVx2VHv2boJMB8GA1UdIwQY
MBaAFC2CRGn9yFfB5bsfUyzjw007lvNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFlKRWFmM0lWOEhsdXg5VExPUERUVHVXODJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xNzgwY2UtY2E4OC00YmY5LWFmYjkt
OGY5ODBmZWNlNTRlLzEvUmdOUFMzOWtESGw0MF9ncHhYSFpVZV9adWdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xNzgwY2UtY2E4OC00YmY5LWFmYjktOGY5ODBmZWNlNTRl
LzEvTFlKRWFmM0lWOEhsdXg5VExPUERUVHVXODJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshe+MA0G
CSqGSIb3DQEBCwUAA4IBAQA4xrplGMT+IaxKqjA+OOCrQKhZogIzVLK7B1tkjn18
ymHoK61qRMfWzRR5RZ+cKKxpFE8hoX8xeNjVxwISTj43O96V00cd+hIpKM4mhjtU
9ohu4i8G3Gf2aAvXm0OenHE2lac5tqMBhCzZpDtAGl8tPb1uiGswSu41xcn9ilyv
uNCCRLrxgdD+Xx80pZvkA43T6o0yldEFrJWtAx3T1thT9/kVfUfgCJ1cJX0ojN8O
Pi+7gZ5RRdjIF3vQI7iiH2Q5pf0XAne+OUnC7PRDTsjj3WkRXyuY0sptEbcz2Do2
fTkkC3ZuPW9J0Q9yFEG5RHm6pNJnRGtWRTIWTCftyxcy
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:03 2025 by rpki-client