Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/4lqzySSwWdArUzrxy_R7RSWEdHk.roa
File: 4lqzySSwWdArUzrxy_R7RSWEdHk.roa (raw, json)
Hash identifier: afZb8BmU3Q/i1apTtdKHUnQX2SHsiBkhs7WTejafGLE=
Subject key identifier: E2:5A:B3:C9:24:B0:59:D0:2B:53:3A:F1:CB:F4:7B:45:25:84:74:79
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01856BAEA179E74015C250FABD93881D018C
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/4lqzySSwWdArUzrxy_R7RSWEdHk.roa
Signing time: Sun 01 Jan 2023 04:54:44 +0000
ROA not before: Sun 01 Jan 2023 04:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43043
IP address blocks: 178.208.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:a1:79:e7:40:15:c2:50:fa:bd:93:88:1d:01:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jan 1 04:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e25ab3c924b059d02b533af1cbf47b4525847479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:45:0d:51:32:ab:90:ac:16:4b:52:91:e5:
8b:0e:98:28:5c:74:44:11:a2:07:55:54:42:02:13:
6a:4a:1c:6f:39:08:8b:db:46:c5:02:a8:cd:65:82:
d5:c4:d5:de:ab:27:0a:e3:15:ec:fd:6b:58:4d:4a:
f4:5a:51:d0:24:61:87:f9:e5:6e:89:a5:2a:a1:37:
3c:aa:96:9d:3c:f6:56:b6:95:a4:bc:23:79:0b:31:
0b:39:ca:a9:fd:a5:88:1c:19:8c:7e:cd:d2:b2:3c:
7e:a9:87:46:bb:b8:2b:90:7d:f8:78:01:9a:17:f2:
16:e4:64:a2:7a:ff:ef:44:8e:77:11:c9:01:f8:7c:
f5:41:b5:33:6e:ba:39:7c:05:b3:ef:b1:71:67:46:
cf:f6:b3:b7:9f:77:c9:7a:03:7d:0a:4c:9f:97:af:
35:7f:93:9f:1d:86:6f:a0:7f:14:61:d1:0f:2e:e8:
42:38:3b:ad:49:2a:2a:9f:10:f8:70:62:f4:a2:0a:
1c:ab:c8:b4:f1:b2:06:34:96:68:16:c8:dd:97:0a:
e4:bf:67:8f:28:6c:2b:22:5e:73:8c:dc:49:0a:07:
30:cc:03:97:fd:26:ff:54:9c:a1:08:34:9b:e8:e6:
c4:93:b6:26:d3:99:6a:cf:f5:03:1e:fc:4e:23:03:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5A:B3:C9:24:B0:59:D0:2B:53:3A:F1:CB:F4:7B:45:25:84:74:79
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/4lqzySSwWdArUzrxy_R7RSWEdHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.177.0/24
Signature Algorithm: sha256WithRSAEncryption
12:4a:63:c8:12:82:ad:31:f5:aa:52:80:83:cd:0c:e3:a4:21:
31:9a:9b:78:af:b0:78:bf:7f:b4:55:0e:0f:fe:f4:d9:00:0b:
5f:c8:9d:f3:41:b5:b9:47:94:81:9e:b9:78:41:90:13:b9:aa:
74:59:fd:95:06:16:bd:e7:88:88:ed:cb:c6:9e:5d:84:49:65:
fe:ca:fd:70:5f:3b:3c:d2:38:05:60:05:b3:cc:70:87:0d:20:
0d:2d:c5:00:58:00:06:c4:f0:59:d2:47:34:44:14:4d:52:bf:
84:a2:57:bb:02:c4:7d:81:96:de:cd:5c:ee:33:39:d5:91:6d:
13:3f:6f:8c:de:f1:9a:6f:1b:00:56:18:72:34:51:a4:3f:5d:
dc:b5:89:94:91:e8:b5:8a:da:33:27:a5:85:dc:65:9c:b0:df:
2e:f8:e7:30:53:08:fe:a1:64:86:c1:32:35:61:5f:a6:09:5c:
ce:9f:cd:cb:2a:8e:57:10:56:b3:38:d8:16:05:50:7f:0e:0c:
a0:84:6f:96:b7:26:2b:60:ce:2d:34:6f:95:ac:bd:43:a5:9b:
3f:e5:26:55:f0:c3:7d:ba:65:cb:10:78:0e:13:2c:0a:2e:12:
9c:14:31:af:62:fe:c6:29:c8:97:27:c9:e0:4a:e1:0d:ab:58:
7f:39:5a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org