Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/17c970-427a-49d6-ae2e-f457dfc2a67f/1/YsTCGUGUpZP53W4gsIShUhkvxqg.roa
File: YsTCGUGUpZP53W4gsIShUhkvxqg.roa (raw, json)
Hash identifier: O2+34qr/6qZLVgDuCxb4GuXW5YoYZokTQQh9DP5m2hI=
Subject key identifier: 62:C4:C2:19:41:94:A5:93:F9:DD:6E:20:B0:84:A1:52:19:2F:C6:A8
Certificate issuer: /CN=24faacf76d904df29ea0287edf1ec199a05a370e
Certificate serial: 0187E37B0536158026AA3C607FB7F08EE6C6
Authority key identifier: 24:FA:AC:F7:6D:90:4D:F2:9E:A0:28:7E:DF:1E:C1:99:A0:5A:37:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPqs922QTfKeoCh-3x7BmaBaNw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/17c970-427a-49d6-ae2e-f457dfc2a67f/1/YsTCGUGUpZP53W4gsIShUhkvxqg.roa
Signing time: Wed 03 May 2023 21:18:22 +0000
ROA not before: Wed 03 May 2023 21:18:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56971
IP address blocks: 178.255.222.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e3:7b:05:36:15:80:26:aa:3c:60:7f:b7:f0:8e:e6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24faacf76d904df29ea0287edf1ec199a05a370e
Validity
Not Before: May 3 21:18:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62c4c2194194a593f9dd6e20b084a152192fc6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:fb:10:6f:85:62:53:3f:a2:07:39:0e:1d:
c8:a9:e9:f7:9d:d2:de:85:55:82:82:bf:5e:6a:6c:
76:8a:ff:db:93:43:35:4a:91:18:11:cc:91:0e:9f:
47:84:ad:cc:14:ab:c3:d4:a0:c5:82:3f:6c:b5:51:
ce:78:f2:36:54:f1:55:99:51:82:13:df:b4:53:43:
51:71:50:3f:0d:11:9b:86:fd:78:4b:67:09:4c:ff:
9c:0c:bd:ed:63:c0:29:e3:76:5c:a5:b9:06:d9:a0:
00:9f:02:ec:c3:ca:a0:2c:b1:6b:b9:3d:07:42:ff:
09:01:9e:28:a6:2e:9c:04:2e:dd:c2:52:9f:a6:45:
6c:5d:33:a8:f8:33:49:a3:03:d8:0f:20:5e:29:df:
b7:28:90:02:92:60:e5:87:7c:97:e7:3d:e1:11:ca:
b1:d1:0b:4e:c6:cb:38:40:09:7b:dd:03:ce:3a:da:
b2:61:81:10:45:e8:f1:6f:f1:8b:34:42:34:52:d7:
56:55:b4:86:6b:29:01:6e:30:8c:71:3f:31:12:89:
f8:5e:e0:97:89:7f:05:33:bc:7c:7d:a7:38:5c:07:
a5:eb:80:21:7a:22:94:c7:b3:a3:ae:a9:91:eb:c7:
de:04:d2:1f:f4:ec:6d:cb:e4:a5:8b:e6:8f:fc:7a:
35:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C4:C2:19:41:94:A5:93:F9:DD:6E:20:B0:84:A1:52:19:2F:C6:A8
X509v3 Authority Key Identifier:
keyid:24:FA:AC:F7:6D:90:4D:F2:9E:A0:28:7E:DF:1E:C1:99:A0:5A:37:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPqs922QTfKeoCh-3x7BmaBaNw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/17c970-427a-49d6-ae2e-f457dfc2a67f/1/YsTCGUGUpZP53W4gsIShUhkvxqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/17c970-427a-49d6-ae2e-f457dfc2a67f/1/JPqs922QTfKeoCh-3x7BmaBaNw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.222.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b7:a1:07:03:9a:cc:19:46:30:52:ac:45:88:c0:fc:6c:47:
c3:6b:61:fa:da:61:02:12:a5:7a:f2:b9:39:ba:b9:86:cc:86:
d7:42:a4:a0:dc:97:e8:0e:58:2d:f8:31:0c:f7:ee:3b:6d:7b:
e2:79:fa:a0:ec:69:f1:d7:a4:49:af:e0:63:c9:6c:97:61:b4:
ce:e7:e2:65:33:e6:80:2a:3b:82:b5:b1:fe:15:aa:46:07:88:
7f:ca:f6:a1:57:a9:a5:8b:1b:29:f1:24:eb:48:95:8f:ed:aa:
92:ef:2a:e3:61:d6:67:60:21:74:70:7b:30:db:fd:d0:f7:e6:
de:57:09:7c:7c:51:19:73:84:fc:97:95:74:9d:54:a9:af:d6:
95:d3:7b:78:b4:06:57:8b:11:1b:04:2c:d8:9d:83:0a:5a:38:
d4:65:24:0f:f3:cb:c0:0d:c9:6a:cb:72:b9:e3:eb:af:86:10:
b2:ba:48:38:1b:9b:70:e1:21:18:6e:aa:6e:33:95:10:58:f1:
73:aa:51:36:71:49:40:89:d6:11:39:f2:6a:d2:2b:a5:a0:c6:
cc:3f:2c:91:fe:9f:f7:81:5e:ab:9b:de:b2:07:3e:ab:9a:f7:
be:88:82:6e:cf:48:75:41:3b:17:66:a0:9a:6e:00:19:57:a9:
31:24:34:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfjewU2FYAmqjxgf7fwjubGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZmFhY2Y3NmQ5MDRkZjI5ZWEwMjg3ZWRmMWVjMTk5YTA1
YTM3MGUwHhcNMjMwNTAzMjExODIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmM0YzIxOTQxOTRhNTkzZjlkZDZlMjBiMDg0YTE1MjE5MmZjNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgT7EG+FYlM/ogc5Dh3Iqen3ndLe
hVWCgr9eamx2iv/bk0M1SpEYEcyRDp9HhK3MFKvD1KDFgj9stVHOePI2VPFVmVGC
E9+0U0NRcVA/DRGbhv14S2cJTP+cDL3tY8Ap43ZcpbkG2aAAnwLsw8qgLLFruT0H
Qv8JAZ4opi6cBC7dwlKfpkVsXTOo+DNJowPYDyBeKd+3KJACkmDlh3yX5z3hEcqx
0QtOxss4QAl73QPOOtqyYYEQRejxb/GLNEI0UtdWVbSGaykBbjCMcT8xEon4XuCX
iX8FM7x8fac4XAel64AheiKUx7OjrqmR68feBNIf9Oxty+Sli+aP/Ho13wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLEwhlBlKWT+d1uILCEoVIZL8aoMB8GA1UdIwQY
MBaAFCT6rPdtkE3ynqAoft8ewZmgWjcOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlBxczkyMlFUZktlb0NoLTN4N0JtYUJhTnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xN2M5NzAtNDI3YS00OWQ2LWFlMmUt
ZjQ1N2RmYzJhNjdmLzEvWXNUQ0dVR1VwWlA1M1c0Z3NJU2hVaGt2eHFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8xN2M5NzAtNDI3YS00OWQ2LWFlMmUtZjQ1N2RmYzJhNjdm
LzEvSlBxczkyMlFUZktlb0NoLTN4N0JtYUJhTnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv/eMA0G
CSqGSIb3DQEBCwUAA4IBAQBlt6EHA5rMGUYwUqxFiMD8bEfDa2H62mECEqV68rk5
urmGzIbXQqSg3JfoDlgt+DEM9+47bXviefqg7Gnx16RJr+BjyWyXYbTO5+JlM+aA
KjuCtbH+FapGB4h/yvahV6mlixsp8STrSJWP7aqS7yrjYdZnYCF0cHsw2/3Q9+be
Vwl8fFEZc4T8l5V0nVSpr9aV03t4tAZXixEbBCzYnYMKWjjUZSQP88vADclqy3K5
4+uvhhCyukg4G5tw4SEYbqpuM5UQWPFzqlE2cUlAidYROfJq0iuloMbMPyyR/p/3
gV6rm96yBz6rmve+iIJuz0h1QTsXZqCabgAZV6kxJDQK
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:43 2025 by rpki-client