Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/17c970-427a-49d6-ae2e-f457dfc2a67f/1/uhN3QmANr-5L0aopm7Hlt5eG1wk.roa
File: uhN3QmANr-5L0aopm7Hlt5eG1wk.roa (raw, json)
Hash identifier: ewGt66w9JAQ4BQ5RiJxsSZ/CNnJLdLXEZV1CD9x/ESE=
Subject key identifier: BA:13:77:42:60:0D:AF:EE:4B:D1:AA:29:9B:B1:E5:B7:97:86:D7:09
Certificate issuer: /CN=24faacf76d904df29ea0287edf1ec199a05a370e
Certificate serial: FC0FDA
Authority key identifier: 24:FA:AC:F7:6D:90:4D:F2:9E:A0:28:7E:DF:1E:C1:99:A0:5A:37:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPqs922QTfKeoCh-3x7BmaBaNw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/17c970-427a-49d6-ae2e-f457dfc2a67f/1/uhN3QmANr-5L0aopm7Hlt5eG1wk.roa
Signing time: Sat 01 Jan 2022 02:55:32 +0000
ROA not before: Sat 01 Jan 2022 02:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213220
IP address blocks: 178.255.222.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16519130 (0xfc0fda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24faacf76d904df29ea0287edf1ec199a05a370e
Validity
Not Before: Jan 1 02:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba137742600dafee4bd1aa299bb1e5b79786d709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:5d:6b:9d:3d:f7:da:12:86:51:8a:3e:7b:
b4:d7:21:be:3a:6a:5c:5c:ca:89:05:f0:fd:d7:73:
72:32:16:be:f2:14:d3:9e:f6:a3:3e:07:30:9a:a6:
ef:14:ff:c1:93:82:f3:a8:9c:29:30:f8:21:2e:27:
38:84:c1:be:dd:10:86:5f:6b:c7:7e:b6:b4:e1:30:
a1:5e:26:f3:7b:31:e6:1a:09:67:c5:09:5d:c2:a9:
cb:03:4d:bf:2d:3b:b1:b6:a6:eb:3e:ca:3d:e6:e2:
44:6f:8b:42:66:07:ed:5e:71:eb:07:e5:81:5f:a4:
ee:5e:10:04:06:59:92:5d:18:8e:71:d9:14:1d:3c:
cd:65:ad:25:f2:ba:41:de:f7:3e:51:a9:ae:28:12:
5a:66:22:56:a1:4b:25:f3:c0:63:94:97:69:be:7d:
e0:64:06:74:3e:70:16:b7:48:9a:30:ec:77:ae:a9:
ef:fb:b5:83:83:60:3d:4d:27:9e:38:a6:4a:a4:b7:
d7:1e:9e:b1:95:4f:e6:7a:cb:9b:fb:5a:6c:0b:c8:
37:43:01:45:d4:39:c2:d1:c5:be:4b:01:cd:ad:79:
76:cc:df:7c:53:5d:79:f6:38:f0:c7:e4:09:2b:9c:
53:2f:79:af:df:61:93:64:d5:71:cd:6b:fe:e0:c9:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:77:42:60:0D:AF:EE:4B:D1:AA:29:9B:B1:E5:B7:97:86:D7:09
X509v3 Authority Key Identifier:
keyid:24:FA:AC:F7:6D:90:4D:F2:9E:A0:28:7E:DF:1E:C1:99:A0:5A:37:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPqs922QTfKeoCh-3x7BmaBaNw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/17c970-427a-49d6-ae2e-f457dfc2a67f/1/uhN3QmANr-5L0aopm7Hlt5eG1wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/17c970-427a-49d6-ae2e-f457dfc2a67f/1/JPqs922QTfKeoCh-3x7BmaBaNw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.222.0/24
Signature Algorithm: sha256WithRSAEncryption
33:bc:cf:07:c2:bc:c7:e7:3c:7e:6d:71:6e:e4:28:c9:14:73:
a5:e1:dd:f5:76:d8:fe:62:aa:8d:e9:9f:61:8d:49:86:c2:0f:
8a:90:0a:1b:bf:d2:e8:76:62:71:9e:bd:a9:0c:e4:33:82:4f:
67:6c:55:e9:4c:8d:62:7e:18:38:06:98:5c:c8:a7:02:54:a0:
2d:7d:32:bc:2e:71:f6:84:19:e1:d5:9e:50:6c:9b:77:7e:a6:
7e:43:a9:14:c4:03:f6:71:81:d8:32:b2:70:db:14:8e:3f:ee:
da:aa:6d:d3:9a:97:85:aa:c1:96:a3:f7:df:3c:53:5c:c4:f9:
72:ea:eb:86:57:92:39:93:34:e3:cb:3d:e9:40:c7:8b:c6:51:
56:95:3e:99:6d:7e:4f:74:09:80:4c:a2:fa:e6:19:c7:25:9c:
e0:8e:64:2b:3f:b0:c3:3d:52:bb:62:47:ca:c0:ec:d6:46:d1:
f4:87:05:ed:60:05:a6:a6:d8:ab:f4:6e:ec:c4:a0:73:41:f1:
b0:ff:17:b2:72:d8:d1:1c:93:24:73:48:23:c8:9c:12:b3:7d:
47:f9:65:5c:8e:19:39:e4:57:10:fb:ed:12:0f:0a:ce:2e:f4:
a4:1a:ff:16:94:d4:44:d5:9f:a8:76:e4:6b:9c:79:b1:21:c8:
2c:17:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:30 2025 by rpki-client