Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/gcNOMOsShZcR-7DiTAQPeRMc9s8.roa
File: gcNOMOsShZcR-7DiTAQPeRMc9s8.roa (raw, json)
Hash identifier: +tncbp1kMjO77ZkQNm9Pdwde+HhvCKqkrnJqoW+tLZo=
Subject key identifier: 81:C3:4E:30:EB:12:85:97:11:FB:B0:E2:4C:04:0F:79:13:1C:F6:CF
Certificate issuer: /CN=c5483453041593075038881b8d5df31495d942b4
Certificate serial: 018570F0997D5D7FCF7417E7BC018B2965AA
Authority key identifier: C5:48:34:53:04:15:93:07:50:38:88:1B:8D:5D:F3:14:95:D9:42:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/gcNOMOsShZcR-7DiTAQPeRMc9s8.roa
Signing time: Mon 02 Jan 2023 05:24:54 +0000
ROA not before: Mon 02 Jan 2023 05:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 178.22.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:99:7d:5d:7f:cf:74:17:e7:bc:01:8b:29:65:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5483453041593075038881b8d5df31495d942b4
Validity
Not Before: Jan 2 05:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81c34e30eb12859711fbb0e24c040f79131cf6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0b:86:56:42:85:91:eb:d6:b6:51:df:7c:ab:
a1:2d:b5:47:b6:a9:a2:84:29:9a:6d:1f:d6:22:fe:
d8:da:4f:91:d6:46:4e:a4:e1:7c:14:ee:82:95:ea:
76:3e:4f:7e:7d:7b:51:5b:79:34:bd:f2:e7:09:83:
1c:d4:56:6f:7f:32:17:fa:6b:30:2b:39:fb:b9:d8:
35:eb:b2:b1:fc:1b:8c:9e:35:d9:34:af:7e:41:ea:
21:26:a8:90:65:b2:54:a5:4b:79:1d:66:14:80:0c:
1d:15:8e:ab:d7:27:1a:09:83:70:36:6f:fc:dd:93:
e7:69:de:6b:14:75:29:b1:32:2f:cd:4c:55:45:97:
e7:24:7d:08:b4:9c:2a:ae:ac:ab:e9:a4:28:03:61:
df:56:1a:4e:62:66:06:41:ba:ac:4d:d5:94:5f:34:
09:17:b3:70:16:b1:92:29:91:01:a1:78:be:76:28:
5d:82:87:8a:1f:4c:d7:d6:4c:e8:ee:5b:eb:cb:b3:
4d:ea:b3:de:3e:23:35:45:a4:57:ae:b1:b9:af:5b:
80:61:21:ee:61:2b:6c:6c:56:be:3e:90:ae:65:fd:
e3:ee:ec:df:57:d6:ea:69:68:7e:96:fa:a8:c6:f0:
66:9b:24:6b:ad:bc:fc:16:b7:25:4e:d5:41:d9:8c:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C3:4E:30:EB:12:85:97:11:FB:B0:E2:4C:04:0F:79:13:1C:F6:CF
X509v3 Authority Key Identifier:
keyid:C5:48:34:53:04:15:93:07:50:38:88:1B:8D:5D:F3:14:95:D9:42:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/gcNOMOsShZcR-7DiTAQPeRMc9s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:70:34:f1:3b:d5:d7:d4:3e:de:55:4c:eb:b7:93:60:a4:8d:
2e:af:ec:8d:7a:60:91:71:91:42:b0:ed:34:6c:81:f4:e3:a9:
58:60:80:9a:c5:0d:b4:f2:6f:f9:68:ac:27:88:67:a4:5a:e7:
3d:84:53:c5:eb:9f:5f:f7:74:5b:3f:61:54:c6:53:84:69:c2:
7c:dc:09:a9:ec:62:8c:e6:c4:3a:82:81:d4:49:76:5e:ee:1e:
67:e4:55:ef:ee:a3:7c:75:35:a2:74:73:52:09:89:a5:79:dd:
5c:fa:18:31:a1:c8:43:d9:94:20:30:45:d8:48:bf:e6:ca:7d:
34:2e:36:6f:39:f2:32:60:0f:e9:48:c8:28:b6:ec:ce:33:36:
99:48:81:ac:e3:c5:ef:5d:50:52:d4:2a:ec:dd:12:d7:01:cc:
f5:63:b3:0d:2f:3c:e7:a5:57:53:ca:23:11:96:1f:45:3e:90:
45:ca:f8:6a:95:3e:9e:f4:53:13:f4:05:63:7c:7f:8e:5f:f1:
05:32:71:43:ae:86:06:ea:10:54:d9:6e:ad:eb:00:6d:4b:50:
5e:12:9c:cf:b7:94:ee:89:da:42:fb:6b:48:2b:5d:19:3a:3d:
ae:2b:10:76:07:f4:e3:15:58:27:76:67:cf:7c:97:c8:a8:e1:
d2:96:59:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw8Jl9XX/PdBfnvAGLKWWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDgzNDUzMDQxNTkzMDc1MDM4ODgxYjhkNWRmMzE0OTVk
OTQyYjQwHhcNMjMwMTAyMDUyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWMzNGUzMGViMTI4NTk3MTFmYmIwZTI0YzA0MGY3OTEzMWNmNmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AuGVkKFkevWtlHffKuhLbVHtqmi
hCmabR/WIv7Y2k+R1kZOpOF8FO6Clep2Pk9+fXtRW3k0vfLnCYMc1FZvfzIX+msw
Kzn7udg167Kx/BuMnjXZNK9+QeohJqiQZbJUpUt5HWYUgAwdFY6r1ycaCYNwNm/8
3ZPnad5rFHUpsTIvzUxVRZfnJH0ItJwqrqyr6aQoA2HfVhpOYmYGQbqsTdWUXzQJ
F7NwFrGSKZEBoXi+dihdgoeKH0zX1kzo7lvry7NN6rPePiM1RaRXrrG5r1uAYSHu
YStsbFa+PpCuZf3j7uzfV9bqaWh+lvqoxvBmmyRrrbz8FrclTtVB2YxSBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIHDTjDrEoWXEfuw4kwED3kTHPbPMB8GA1UdIwQY
MBaAFMVINFMEFZMHUDiIG41d8xSV2UK0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFVnMFV3UVZrd2RRT0lnYmpWM3pGSlhaUXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85ZWNiZDEtMTk4Mi00MDQ5LThjYzMt
MzhiMTEzNjJmNjhlLzEvZ2NOT01Pc1NoWmNSLTdEaVRBUVBlUk1jOXM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85ZWNiZDEtMTk4Mi00MDQ5LThjYzMtMzhiMTEzNjJmNjhl
LzEveFVnMFV3UVZrd2RRT0lnYmpWM3pGSlhaUXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshYdMA0G
CSqGSIb3DQEBCwUAA4IBAQAbcDTxO9XX1D7eVUzrt5NgpI0ur+yNemCRcZFCsO00
bIH046lYYICaxQ208m/5aKwniGekWuc9hFPF659f93RbP2FUxlOEacJ83Amp7GKM
5sQ6goHUSXZe7h5n5FXv7qN8dTWidHNSCYmled1c+hgxochD2ZQgMEXYSL/myn00
LjZvOfIyYA/pSMgotuzOMzaZSIGs48XvXVBS1Crs3RLXAcz1Y7MNLzznpVdTyiMR
lh9FPpBFyvhqlT6e9FMT9AVjfH+OX/EFMnFDroYG6hBU2W6t6wBtS1BeEpzPt5Tu
idpC+2tIK10ZOj2uKxB2B/TjFVgndmfPfJfIqOHSllmb
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:31 2025 by rpki-client