Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/Oxm8liGe9e1_zbDW_BUr_S1I3nY.roa
File: Oxm8liGe9e1_zbDW_BUr_S1I3nY.roa (raw, json)
Hash identifier: Ef3tf5MFi8dRv8zvnHx/0aKmQHd5yrZbAe3QVJdPwH0=
Subject key identifier: 3B:19:BC:96:21:9E:F5:ED:7F:CD:B0:D6:FC:15:2B:FD:2D:48:DE:76
Certificate issuer: /CN=b71db0625b4ae88ac6a584b369ccff70d98436ad
Certificate serial: 01856F42A4F147FA29AF2590BD23EC51B43C
Authority key identifier: B7:1D:B0:62:5B:4A:E8:8A:C6:A5:84:B3:69:CC:FF:70:D9:84:36:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx2wYltK6IrGpYSzacz_cNmENq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/Oxm8liGe9e1_zbDW_BUr_S1I3nY.roa
Signing time: Sun 01 Jan 2023 21:35:16 +0000
ROA not before: Sun 01 Jan 2023 21:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 178.212.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a4:f1:47:fa:29:af:25:90:bd:23:ec:51:b4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71db0625b4ae88ac6a584b369ccff70d98436ad
Validity
Not Before: Jan 1 21:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b19bc96219ef5ed7fcdb0d6fc152bfd2d48de76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:f4:14:3c:12:0a:e8:b3:ab:c1:d9:ff:4c:
ed:91:25:13:26:ef:35:32:08:73:76:33:f7:aa:bb:
a3:53:6b:56:26:0b:76:08:52:8a:86:e7:e3:fc:32:
cd:2c:29:4d:0a:e0:56:48:2d:ac:97:77:97:07:39:
25:25:2e:d9:51:62:47:3f:61:14:03:ec:5b:b9:ec:
57:51:5c:c8:33:76:a1:f7:cd:4e:0e:84:56:58:e1:
9c:fd:77:a7:2b:ab:ce:88:1d:5e:81:ac:c9:76:d6:
30:6b:d6:d0:48:02:ca:32:56:46:be:31:8c:0b:ef:
14:2f:0b:32:9c:a0:9c:9c:4b:25:ff:a7:8b:fc:fc:
b2:86:5d:2b:8c:a0:48:f6:86:c4:61:91:93:68:4b:
06:94:f1:ad:6d:6d:2b:f4:3f:e3:7a:ac:b1:72:64:
55:da:05:92:3b:f0:41:4f:ce:06:ff:54:7c:a9:bd:
c5:0d:09:50:31:5c:86:fd:ce:75:a6:4a:b8:23:91:
72:a5:2a:a6:bc:a4:04:cd:cd:9a:78:5d:f4:e9:b1:
ec:0a:fd:1c:cb:df:62:5a:1b:42:1d:e4:e9:ea:42:
79:e7:8b:d6:11:a5:c3:64:7c:b3:ca:8b:7f:dd:d5:
68:65:9a:f5:69:35:d5:3e:83:0a:42:2c:6f:0e:b8:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:19:BC:96:21:9E:F5:ED:7F:CD:B0:D6:FC:15:2B:FD:2D:48:DE:76
X509v3 Authority Key Identifier:
keyid:B7:1D:B0:62:5B:4A:E8:8A:C6:A5:84:B3:69:CC:FF:70:D9:84:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx2wYltK6IrGpYSzacz_cNmENq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/Oxm8liGe9e1_zbDW_BUr_S1I3nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/tx2wYltK6IrGpYSzacz_cNmENq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.79.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:2b:8c:63:7e:cf:38:eb:b9:70:71:69:a6:20:ec:3d:fc:db:
ef:39:3a:88:41:a6:fd:5b:46:05:17:e8:51:36:cc:43:3a:fe:
52:d7:16:bc:f9:34:5c:b4:d1:44:df:b5:89:f6:27:a6:5d:ea:
97:e1:bb:9d:db:06:42:13:68:09:46:d3:f6:30:87:cc:2e:f2:
76:fa:3e:1c:ea:b9:b7:04:83:7e:d3:52:b9:ff:d4:0f:45:c0:
a2:a8:4b:f9:d2:93:75:6b:ad:13:ff:21:9b:0b:5b:a5:f0:50:
68:6f:4e:ee:10:ea:0c:39:81:d3:c3:ed:9c:70:a7:49:95:c5:
a9:09:25:3a:d7:1d:4a:4a:58:a7:19:ac:97:45:aa:47:95:b1:
a9:9a:43:a7:99:58:fb:54:7f:97:42:13:29:f1:25:34:ef:98:
c2:a1:0a:ab:31:8e:b9:97:cb:99:d7:96:16:94:df:18:9e:f3:
05:61:45:ec:9b:34:d2:51:6a:05:10:88:74:ca:d7:8f:bc:04:
61:20:06:05:72:e1:7c:31:56:0f:f7:54:99:51:0d:81:a3:65:
6c:b0:dc:5b:5a:28:12:f1:80:75:a9:20:3c:c4:e1:ca:bb:27:
ac:09:84:61:06:1f:dc:70:9e:24:93:03:23:33:50:52:e0:8b:
3e:f6:b8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:54 2025 by rpki-client