Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/OEr86VMppaaNw4s9LpTfetIbj0o.roa
File: OEr86VMppaaNw4s9LpTfetIbj0o.roa (raw, json)
Hash identifier: zlXOB1Pse4AvlmpwnEJ7XWyOw+XKItypz5mDbwm4u+E=
Subject key identifier: 38:4A:FC:E9:53:29:A5:A6:8D:C3:8B:3D:2E:94:DF:7A:D2:1B:8F:4A
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 0433BAF6
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/OEr86VMppaaNw4s9LpTfetIbj0o.roa
Signing time: Wed 25 May 2022 15:34:13 +0000
ROA not before: Wed 25 May 2022 15:34:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 178.212.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70499062 (0x433baf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: May 25 15:34:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=384afce95329a5a68dc38b3d2e94df7ad21b8f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:a9:73:0b:99:f2:5b:ae:47:04:35:48:fe:
c5:9a:67:14:8a:f6:5f:a0:87:db:22:6a:84:9d:92:
34:7f:a0:d9:b2:2d:3a:35:bc:4a:e9:2d:d2:83:0d:
eb:23:d7:8e:00:c9:9e:a3:c8:8d:18:8f:49:40:7a:
54:d1:64:d2:89:f2:78:7b:9e:63:4b:62:d5:71:4b:
4d:36:68:91:bb:76:09:ea:93:5e:b5:aa:a5:f6:12:
1c:b4:65:78:ed:c4:e8:b9:09:15:40:29:9f:92:40:
9a:e5:1d:c1:db:09:10:aa:12:32:1c:37:5c:c5:7f:
38:7d:8a:c1:da:f2:4c:42:c2:27:7f:66:e6:f2:ed:
6f:ba:82:10:d4:c0:c6:8c:4f:74:81:65:99:1d:e0:
2e:ea:31:00:32:07:c7:45:78:bf:61:b1:34:b8:dd:
f5:48:50:58:60:16:d1:f0:20:45:04:82:dd:2a:66:
d4:07:e2:e9:64:14:a1:cf:e7:b0:0c:6d:b7:2d:2e:
9d:87:08:78:fc:49:a1:6c:d5:ec:82:14:03:87:9b:
a1:c6:86:3b:58:b5:95:3d:a7:48:c8:23:49:76:7b:
49:9a:a3:1b:1f:b3:c9:c8:18:c0:a8:1c:b9:d2:82:
87:f5:66:a8:9c:db:d1:e9:1c:22:56:4b:cf:29:43:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:FC:E9:53:29:A5:A6:8D:C3:8B:3D:2E:94:DF:7A:D2:1B:8F:4A
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/OEr86VMppaaNw4s9LpTfetIbj0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.203.0/24
Signature Algorithm: sha256WithRSAEncryption
53:cb:7d:2b:9a:e9:7c:f1:49:f6:cb:dd:20:3c:a3:dc:c3:d0:
2a:ca:33:08:1e:38:7c:c1:26:2e:12:59:70:cc:ec:29:18:05:
55:1e:34:a0:20:ef:77:8c:d5:df:b8:74:1c:9f:60:7d:d0:5b:
7a:66:d6:e8:27:8f:8d:28:98:bb:98:7c:18:50:a8:60:05:15:
cb:2a:1b:70:7b:3d:23:03:23:5b:7c:e6:be:10:14:3e:c2:00:
ce:cb:c3:d2:73:3b:30:d4:a8:9d:a5:86:78:51:c9:8d:6d:51:
3e:fc:73:52:31:e6:a1:b2:b5:24:f7:e4:20:b5:41:75:6e:09:
7c:80:c9:db:01:ce:f5:00:6d:56:c2:d3:4d:94:05:ce:5e:82:
d7:c3:81:c3:c8:40:46:6a:a6:94:63:79:01:25:b5:65:01:f2:
2d:aa:d9:9d:04:c2:2b:6a:e4:82:40:46:db:de:41:8e:1b:52:
da:71:73:31:42:66:ea:be:bc:74:ac:2a:a1:2d:8e:29:80:8e:
6f:16:d5:60:93:e9:cd:3b:dd:3a:0a:96:01:50:f9:71:87:db:
43:f2:d6:7a:03:da:4c:2b:ff:7b:85:41:79:ba:3c:ea:68:82:
b0:26:48:7a:9c:8b:83:f8:b4:5e:93:80:51:00:2a:8d:f0:a4:
b4:9d:d7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org