Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/bXoknf1yGVI-C4Rvm-Q4MNZSZac.roa
File: bXoknf1yGVI-C4Rvm-Q4MNZSZac.roa (raw, json)
Hash identifier: S/vHO83j+GjrzxIeZEp8iZilsyjdwAANXzIZZSwLssw=
Subject key identifier: 6D:7A:24:9D:FD:72:19:52:3E:0B:84:6F:9B:E4:38:30:D6:52:65:A7
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01856BAEA63FB1FCC97758A605D2C318854D
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/bXoknf1yGVI-C4Rvm-Q4MNZSZac.roa
Signing time: Sun 01 Jan 2023 04:54:45 +0000
ROA not before: Sun 01 Jan 2023 04:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139660
IP address blocks: 178.208.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:a6:3f:b1:fc:c9:77:58:a6:05:d2:c3:18:85:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jan 1 04:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d7a249dfd7219523e0b846f9be43830d65265a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:15:30:85:72:46:b0:c8:f8:ea:dc:95:31:
23:fb:ce:3e:a1:90:44:56:10:33:2f:21:65:a3:25:
8d:28:bb:74:a2:91:88:96:0f:14:8d:85:cb:cc:14:
5a:06:0b:df:a5:2d:56:76:d2:7f:c7:a1:66:ca:f0:
c8:db:72:65:c1:2c:59:d0:a8:52:43:82:77:ae:68:
ba:ee:31:09:c0:26:7b:8d:a6:4e:81:9d:8d:69:81:
ca:3d:6d:0a:19:13:65:ee:79:dc:32:80:21:4e:e4:
d4:8b:94:e9:2a:01:a5:5f:58:c9:5a:b6:d7:82:1a:
16:57:7f:ee:62:1a:56:6d:2c:f8:e8:f5:a7:18:c4:
0d:8c:a4:0d:30:19:6f:6b:09:a3:56:f4:20:22:5b:
d5:50:6b:42:90:ea:a8:8a:8a:59:53:11:a6:3c:ee:
8d:77:65:76:69:6c:4b:fb:47:cb:18:da:be:dc:e0:
69:c4:03:7d:bc:18:b2:a6:dc:86:ec:81:da:ce:ab:
fc:08:58:91:2a:66:8a:34:c7:d5:c5:11:a3:fc:f4:
7f:a2:6b:df:a0:fd:a4:15:73:c2:78:62:fa:dc:da:
95:4c:b2:23:69:88:ce:fb:63:89:75:4a:ca:7a:bc:
07:6c:76:49:da:b3:84:fa:28:b3:c3:4c:ca:76:4f:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7A:24:9D:FD:72:19:52:3E:0B:84:6F:9B:E4:38:30:D6:52:65:A7
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/bXoknf1yGVI-C4Rvm-Q4MNZSZac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.184.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:40:ef:8d:36:90:71:78:ae:7d:a1:9d:14:5f:9e:ff:82:ed:
ee:41:f6:a4:c0:d5:7a:50:08:ae:60:5f:5d:8d:ee:aa:3c:09:
c4:f4:31:ec:2d:47:90:56:95:e4:75:b0:2d:f6:99:41:20:aa:
ce:07:ee:d4:94:30:4d:37:5f:9c:8c:b0:98:18:f0:38:0c:0e:
95:18:95:01:4c:ee:5c:6a:d7:69:11:fe:ab:22:12:f7:76:76:
f4:f4:29:2e:da:4b:f1:a5:89:df:9a:be:01:94:35:5b:f6:53:
5d:97:93:91:7f:3e:95:0e:9f:1d:06:18:c9:ec:b6:8d:a1:cc:
4b:3b:6c:a0:e6:3a:30:fb:c4:cf:ca:28:af:e1:bd:d2:02:50:
53:af:9c:1d:4c:c4:63:94:31:91:70:de:cd:9c:02:82:ab:51:
40:e7:e8:dd:ac:c2:6d:52:81:83:0a:ad:4d:42:3c:74:77:34:
53:bb:fe:a6:c4:6b:18:d3:f4:35:58:50:f7:6a:bd:a7:af:c7:
94:ce:70:99:c6:d5:d4:02:9a:7a:49:6c:6a:8e:32:92:c0:d5:
31:2f:74:b6:38:1e:e0:4c:81:03:88:6e:4d:d4:ba:43:9b:58:
ec:e5:07:03:9e:96:84:13:a5:f7:fd:bc:89:5c:a2:5a:60:f1:
e0:cd:33:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org