Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/038397-99a1-4a36-85aa-ed9afcebd0b1/1/4K8ieu8c0790OU-e8SiJIkpDMEU.roa
File: 4K8ieu8c0790OU-e8SiJIkpDMEU.roa (raw, json)
Hash identifier: enfuXlaiBLNafE5SwgJ4EJxu42LYeZUsbp3nHpMvRPk=
Subject key identifier: E0:AF:22:7A:EF:1C:D3:BF:74:39:4F:9E:F1:28:89:22:4A:43:30:45
Certificate issuer: /CN=42b3721cc124cc2c376247dd48a5d4b6ba8022c0
Certificate serial: 01849F924DE9F6EB14F475128A88D5665839
Authority key identifier: 42:B3:72:1C:C1:24:CC:2C:37:62:47:DD:48:A5:D4:B6:BA:80:22:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrNyHMEkzCw3YkfdSKXUtrqAIsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/038397-99a1-4a36-85aa-ed9afcebd0b1/1/4K8ieu8c0790OU-e8SiJIkpDMEU.roa
Signing time: Tue 22 Nov 2022 13:41:16 +0000
ROA not before: Tue 22 Nov 2022 13:41:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58193
IP address blocks: 178.251.124.0/24 maxlen: 24
178.251.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:92:4d:e9:f6:eb:14:f4:75:12:8a:88:d5:66:58:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b3721cc124cc2c376247dd48a5d4b6ba8022c0
Validity
Not Before: Nov 22 13:41:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0af227aef1cd3bf74394f9ef12889224a433045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9f:ba:0b:23:a2:95:2c:92:db:53:38:43:b1:
ba:6f:be:57:8e:cc:38:15:92:41:c3:76:b0:47:9d:
eb:d0:79:02:96:c4:2f:0e:46:80:ec:a0:80:f4:2c:
e1:61:f2:d1:a1:c1:78:c8:1f:20:da:38:27:d3:54:
3e:8d:59:c3:e4:5e:b8:1d:c9:33:9a:a6:d3:33:50:
11:e9:24:05:6c:11:e1:e5:b8:f7:b1:6b:cd:41:3e:
5a:96:11:39:f7:75:8b:cc:cf:4b:de:73:a6:32:19:
2d:88:8f:f1:fd:6f:34:fd:58:05:9c:cb:a6:d7:45:
43:1d:82:46:c7:7a:85:f3:2c:c8:d5:6d:fa:b9:56:
3c:68:ed:09:db:b5:ed:bd:a5:b3:b5:44:3b:02:ad:
fe:43:5a:6f:20:a1:6e:58:ca:a7:dc:51:48:34:a2:
ab:ee:7b:c6:97:a1:c5:68:41:ca:57:fb:64:de:f8:
7b:1c:cd:31:86:1e:59:61:6d:98:6a:c2:52:ef:2b:
fb:fa:a4:0d:a2:1e:2c:3d:05:83:33:86:6e:eb:2c:
63:2e:e5:02:16:36:a8:14:28:21:43:e3:01:f1:e7:
83:9f:67:84:b8:53:f0:3e:e1:00:fb:75:c0:34:17:
da:26:94:ef:53:b4:60:66:33:18:23:c8:37:21:2a:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AF:22:7A:EF:1C:D3:BF:74:39:4F:9E:F1:28:89:22:4A:43:30:45
X509v3 Authority Key Identifier:
keyid:42:B3:72:1C:C1:24:CC:2C:37:62:47:DD:48:A5:D4:B6:BA:80:22:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrNyHMEkzCw3YkfdSKXUtrqAIsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/038397-99a1-4a36-85aa-ed9afcebd0b1/1/4K8ieu8c0790OU-e8SiJIkpDMEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/038397-99a1-4a36-85aa-ed9afcebd0b1/1/QrNyHMEkzCw3YkfdSKXUtrqAIsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.124.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:77:54:ca:89:51:74:f6:26:b8:20:d8:8b:77:cf:70:68:47:
40:bc:d4:3c:32:13:6a:02:4d:5b:3f:97:6d:a4:53:af:36:05:
64:0b:28:87:a7:94:57:c4:b8:aa:1a:b0:21:23:9a:fd:b5:e4:
b8:39:b2:7f:3e:42:8f:60:0e:50:0c:7c:7c:ba:e0:f4:52:7d:
c5:68:f5:75:b3:a1:a7:71:eb:ca:2c:71:98:b2:ef:9c:6f:31:
34:5a:2b:39:a3:12:5e:96:c9:e4:18:27:d7:fd:94:4f:7e:45:
95:fa:8c:fa:6f:20:cb:d7:12:89:55:a5:f6:ac:ac:49:b8:f8:
df:37:83:39:ef:96:62:5d:46:e5:35:63:73:c3:a4:ad:15:03:
d5:36:b8:d2:eb:68:6a:8b:13:fc:57:98:3d:ba:11:73:fe:61:
12:97:67:56:2e:18:4c:21:28:73:a2:d6:2d:a6:10:95:c6:e3:
99:22:13:05:be:40:39:f8:01:8c:74:59:c3:99:57:b5:72:be:
1e:00:f3:35:20:3b:73:30:ba:8d:c0:9b:1e:ca:e3:17:a6:ae:
50:a5:a7:c4:40:a4:bc:6c:43:fb:fc:04:9f:4c:2d:68:fe:14:
23:12:2f:56:6e:fe:c1:a9:71:ab:a3:3a:23:97:b0:9f:13:e4:
e3:4f:fa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:59 2024 by rpki-client on console-fra.rpki-client.org