Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/e2cc90-971f-4957-ae39-9e72a29de9e2/1/v8JS1zr37lVGQKX0W1D5CFyIFBw.roa
File: v8JS1zr37lVGQKX0W1D5CFyIFBw.roa (raw, json)
Hash identifier: bVRxm+PgjooY8pOZSyKTzWzJ5+aaGxuufTXZgyU3woA=
Subject key identifier: BF:C2:52:D7:3A:F7:EE:55:46:40:A5:F4:5B:50:F9:08:5C:88:14:1C
Certificate issuer: /CN=28e1f42c53f31d75d16156adba0fae02bf917a44
Certificate serial: 09394DCB
Authority key identifier: 28:E1:F4:2C:53:F3:1D:75:D1:61:56:AD:BA:0F:AE:02:BF:91:7A:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KOH0LFPzHXXRYVatug-uAr-RekQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/e2cc90-971f-4957-ae39-9e72a29de9e2/1/v8JS1zr37lVGQKX0W1D5CFyIFBw.roa
Signing time: Sat 01 Jan 2022 04:00:58 +0000
ROA not before: Sat 01 Jan 2022 04:00:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8855
IP address blocks: 212.78.31.0/24 maxlen: 24
212.78.28.0/23 maxlen: 23
212.78.3.0/24 maxlen: 24
212.78.2.0/24 maxlen: 24
212.78.2.0/23 maxlen: 23
212.78.4.0/24 maxlen: 24
212.78.0.0/24 maxlen: 24
212.78.10.0/24 maxlen: 24
212.78.9.0/24 maxlen: 24
212.78.11.0/24 maxlen: 24
212.78.6.0/24 maxlen: 24
212.78.5.0/24 maxlen: 24
212.78.7.0/24 maxlen: 24
212.78.16.0/21 maxlen: 21
212.78.12.0/22 maxlen: 22
212.78.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154750411 (0x9394dcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28e1f42c53f31d75d16156adba0fae02bf917a44
Validity
Not Before: Jan 1 04:00:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfc252d73af7ee554640a5f45b50f9085c88141c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:b4:10:54:70:59:d1:19:38:23:ad:03:7e:
47:35:a7:db:af:55:6c:e5:42:b8:c3:8f:95:2b:3c:
f8:ae:11:45:44:1c:53:fc:25:4a:dd:6f:f1:72:2a:
12:76:10:16:17:d1:89:62:fc:4b:bf:54:5c:95:71:
d1:48:ce:8d:fb:e1:2a:4d:e9:4f:23:18:c0:68:63:
7f:28:6f:88:5d:cb:a3:2b:a3:ad:40:0d:cf:a7:b6:
36:0a:d8:e9:52:f0:d5:79:e2:63:f4:f1:00:5a:21:
ac:f7:82:f3:8b:3f:f0:04:7e:ce:2a:ac:97:0b:83:
97:b7:3e:b3:40:07:9d:3f:89:fe:48:27:ef:c3:ed:
a1:b5:06:02:d6:26:93:1b:2b:e3:40:15:03:ca:19:
7a:9d:87:56:42:07:bc:35:05:f4:d5:7c:fd:7a:a7:
ab:a6:54:26:87:1b:47:61:7d:82:71:9e:31:7b:0e:
e4:7b:85:7a:f5:48:2f:cd:bf:43:c8:44:84:75:96:
77:03:c1:3e:b9:b8:4b:52:1b:af:ed:58:fa:42:24:
e4:f6:d9:d6:04:a9:57:e8:14:bd:06:4c:95:ec:8f:
91:2b:02:d4:1c:65:ff:92:32:6a:13:71:99:dd:d1:
4b:46:45:e2:52:84:f2:58:fa:5d:2e:37:c0:15:9e:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C2:52:D7:3A:F7:EE:55:46:40:A5:F4:5B:50:F9:08:5C:88:14:1C
X509v3 Authority Key Identifier:
keyid:28:E1:F4:2C:53:F3:1D:75:D1:61:56:AD:BA:0F:AE:02:BF:91:7A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KOH0LFPzHXXRYVatug-uAr-RekQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/e2cc90-971f-4957-ae39-9e72a29de9e2/1/v8JS1zr37lVGQKX0W1D5CFyIFBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/e2cc90-971f-4957-ae39-9e72a29de9e2/1/KOH0LFPzHXXRYVatug-uAr-RekQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.78.0.0/24
212.78.2.0-212.78.7.255
212.78.9.0-212.78.29.255
212.78.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:39:d6:0b:d6:e0:4e:c7:ae:9d:e9:37:5b:f2:dd:03:74:cf:
ec:b9:7f:48:bd:87:03:08:2f:80:0e:41:89:9a:2c:96:30:29:
64:b4:59:14:c8:0f:a1:4b:d6:62:1a:92:57:b9:b7:a5:40:62:
98:7d:32:7d:2d:1f:cd:06:41:ca:98:9d:88:ff:cf:63:96:f1:
57:1a:b3:09:01:b0:33:f0:88:90:f9:43:44:f5:cd:d2:cb:27:
81:fc:72:f9:a2:6e:2f:5c:16:7a:b1:1c:df:f4:dd:90:08:58:
60:9f:bf:e5:2e:63:a3:6d:17:54:45:60:c6:fd:e5:73:7c:1f:
24:9b:6f:46:f8:fd:31:48:ba:43:08:0f:89:87:30:5d:19:cd:
7b:64:c1:8e:04:43:17:a7:b2:3c:f7:82:ca:19:df:8e:25:45:
cb:31:03:51:ab:fb:21:8d:55:c8:7d:5d:4e:0c:60:97:f3:8d:
4d:3a:b0:a0:fd:96:7b:91:fb:d1:02:f0:d7:ca:4b:47:2c:37:
36:69:38:1e:36:cb:21:d0:1a:dc:eb:51:04:2c:1f:92:8b:ee:
f9:58:90:77:36:ca:ca:03:4d:38:6f:69:20:a3:df:fe:12:43:
37:03:7b:ff:9a:b9:ba:bb:f5:9c:e0:a4:0c:8e:70:b1:bf:1d:
1e:93:31:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:40 2024 by rpki-client on console-ams.rpki-client.org