Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/hg9bz1D74PMGFJVVcJ-xSorVrTU.roa
File: hg9bz1D74PMGFJVVcJ-xSorVrTU.roa (raw, json)
Hash identifier: uAESxLGARvfAkwjbjCbnOUMAeSbeYgloXryW16d83GE=
Subject key identifier: 86:0F:5B:CF:50:FB:E0:F3:06:14:95:55:70:9F:B1:4A:8A:D5:AD:35
Certificate issuer: /CN=0d5c1d712d05562491a4a278a84b9cda35539432
Certificate serial: 01856F9DE839E36E7DD3C205A8702ED19566
Authority key identifier: 0D:5C:1D:71:2D:05:56:24:91:A4:A2:78:A8:4B:9C:DA:35:53:94:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVwdcS0FViSRpKJ4qEuc2jVTlDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/hg9bz1D74PMGFJVVcJ-xSorVrTU.roa
Signing time: Sun 01 Jan 2023 23:14:57 +0000
ROA not before: Sun 01 Jan 2023 23:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49037
IP address blocks: 178.212.139.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:e8:39:e3:6e:7d:d3:c2:05:a8:70:2e:d1:95:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d5c1d712d05562491a4a278a84b9cda35539432
Validity
Not Before: Jan 1 23:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=860f5bcf50fbe0f306149555709fb14a8ad5ad35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:63:88:68:cd:e6:0e:ee:3d:95:08:d9:27:c9:
12:1f:5b:dc:4c:5c:08:a2:61:8e:da:76:cc:c7:5a:
4a:74:e6:29:77:22:c1:21:1c:26:0d:e5:c1:c2:50:
e8:e1:72:7b:3a:fe:bf:a1:21:72:a9:45:c3:28:a4:
2a:9b:95:69:f9:44:44:b4:f7:50:27:6a:d4:1d:6d:
f2:f4:da:fd:44:92:0c:c2:a3:a7:49:c3:5c:0e:27:
65:af:b2:db:bd:54:a0:50:79:c6:4b:29:ee:7e:38:
c1:da:12:a5:5e:58:75:a8:b4:85:5a:15:0b:69:e8:
3c:38:3d:0f:43:05:82:72:9c:4c:86:dc:e2:00:9c:
61:6a:b7:a6:2f:ba:ff:1a:e0:5f:93:72:53:43:e6:
96:cc:1f:e8:be:11:16:91:89:b7:b8:15:8f:ba:c4:
9b:93:3b:b9:11:80:91:cb:40:4e:8e:a3:59:6c:ac:
56:d7:65:5d:9d:a5:51:7a:e9:a7:11:f7:c5:d5:af:
6e:ee:d9:28:c8:52:ca:68:b6:95:f6:ed:69:bb:ca:
6e:57:b2:dd:ac:be:12:e1:46:bd:e0:6b:5a:bc:3a:
58:83:e1:db:7c:f4:21:e1:5c:08:6b:1d:e7:74:0c:
8b:a8:dd:d1:f9:63:32:6d:8c:cf:7a:e1:cd:3c:ee:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0F:5B:CF:50:FB:E0:F3:06:14:95:55:70:9F:B1:4A:8A:D5:AD:35
X509v3 Authority Key Identifier:
keyid:0D:5C:1D:71:2D:05:56:24:91:A4:A2:78:A8:4B:9C:DA:35:53:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVwdcS0FViSRpKJ4qEuc2jVTlDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/hg9bz1D74PMGFJVVcJ-xSorVrTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/DVwdcS0FViSRpKJ4qEuc2jVTlDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.139.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d2:d4:f5:15:6a:4f:bf:87:b4:8b:9e:24:15:12:1d:3b:04:
be:28:af:28:37:41:f6:f7:70:e0:b3:59:d6:19:a3:21:b5:01:
3f:2a:6d:17:28:f7:3b:58:54:b3:62:0d:88:02:f7:58:6f:84:
2a:5c:30:01:39:e8:9b:5e:d4:c3:68:a4:e9:8d:e7:68:b8:58:
3a:d6:3e:49:1c:fa:ac:ea:cf:c6:77:bc:5e:0f:28:2f:2e:76:
fb:62:5e:58:fa:02:0b:1e:fb:37:94:ac:3f:df:ca:40:b4:ec:
65:90:4a:c8:00:21:0d:c1:fe:8d:4a:b1:31:83:35:b1:f5:5d:
d2:e0:df:22:02:e4:c3:60:7f:5c:01:49:19:c9:79:56:d0:8f:
a8:99:0c:28:6b:3a:ef:80:dd:ec:0c:07:e2:52:96:f8:c3:7c:
00:32:b5:9a:b9:56:b4:48:df:ed:99:d7:f2:cb:a6:7c:55:66:
1c:72:fc:da:85:4a:a5:cb:1f:e0:dc:0e:7a:b8:5b:e7:1b:0c:
cb:5f:a4:45:2b:fb:bf:00:f7:dd:b7:3d:e5:ae:63:c2:f9:d4:
62:bd:75:93:7d:6a:47:21:5d:26:f8:c6:c1:fd:6e:b4:ac:0f:
39:d3:02:ab:21:bc:ba:f2:9c:22:cf:8f:fc:77:32:ba:69:0b:
3b:a1:64:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:57 2024 by rpki-client on console-fra.rpki-client.org