Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/MsKmRQXrVRDH2-IhEBu85lKWOtI.roa
File: MsKmRQXrVRDH2-IhEBu85lKWOtI.roa (raw, json)
Hash identifier: w8J6J3L+v+RyL82wfPOV/t9qYbkdvlxoHlcIFMn7m2E=
Subject key identifier: 32:C2:A6:45:05:EB:55:10:C7:DB:E2:21:10:1B:BC:E6:52:96:3A:D2
Certificate issuer: /CN=e5c0fb256374b7d43e232c848e42cc7b3f83ed22
Certificate serial: 018CC56E04CE5A93D0A07B56D303359F9AC0
Authority key identifier: E5:C0:FB:25:63:74:B7:D4:3E:23:2C:84:8E:42:CC:7B:3F:83:ED:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cD7JWN0t9Q-IyyEjkLMez-D7SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/MsKmRQXrVRDH2-IhEBu85lKWOtI.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 178.211.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:04:ce:5a:93:d0:a0:7b:56:d3:03:35:9f:9a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c0fb256374b7d43e232c848e42cc7b3f83ed22
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32c2a64505eb5510c7dbe221101bbce652963ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:bd:f1:d2:2f:20:82:f5:65:f8:b1:c7:92:
49:65:ff:20:4f:3e:dc:65:60:63:12:97:a1:f1:89:
58:29:33:04:8a:2f:ec:64:e8:00:d2:ee:56:da:cb:
9b:19:b4:7f:74:3f:32:71:b6:f4:e5:76:98:3c:a5:
b5:07:d8:d9:0a:c8:2b:33:31:25:c8:29:1a:7d:de:
74:34:eb:66:ff:d9:29:c8:ce:f6:ab:18:42:67:8d:
11:c8:71:00:09:af:5d:e6:59:a3:75:af:10:46:81:
55:6c:0c:df:44:c7:09:a7:85:9a:02:f9:f1:db:37:
73:8b:9b:3f:e8:f3:86:db:2d:41:70:8b:f7:93:39:
c0:bf:9e:25:ae:a0:8a:97:14:f6:9c:c9:f8:d9:99:
99:ca:d6:3f:93:5d:12:95:10:55:05:77:41:9b:3f:
b4:d0:0d:dc:c4:ec:6f:86:18:c0:7b:d3:76:d5:04:
e4:2d:9a:f3:dd:3b:57:80:22:be:2e:fb:44:0b:62:
11:b9:66:5f:0f:dc:70:b5:79:6a:90:56:93:23:94:
34:c2:13:9a:b3:0f:f9:c5:0c:df:23:40:82:85:db:
90:f3:87:ce:b0:f6:75:c8:aa:7e:53:5b:38:b9:da:
71:34:06:67:7d:d9:41:1f:7f:58:0b:5c:b1:62:4e:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C2:A6:45:05:EB:55:10:C7:DB:E2:21:10:1B:BC:E6:52:96:3A:D2
X509v3 Authority Key Identifier:
keyid:E5:C0:FB:25:63:74:B7:D4:3E:23:2C:84:8E:42:CC:7B:3F:83:ED:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cD7JWN0t9Q-IyyEjkLMez-D7SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/MsKmRQXrVRDH2-IhEBu85lKWOtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/5cD7JWN0t9Q-IyyEjkLMez-D7SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d1:e5:19:d1:df:41:f9:c4:f0:e3:a1:b3:51:4e:37:74:b4:
b1:b8:f2:04:54:40:41:94:d6:92:5e:81:27:fa:58:43:fa:2a:
55:53:3a:99:53:1e:48:90:a2:55:85:33:4b:53:10:33:24:11:
42:d9:63:7c:ec:62:52:52:f5:a8:9c:02:7c:40:27:91:f1:6a:
34:40:15:8a:c1:36:3d:35:8c:2e:ac:43:67:25:b9:9d:d5:9f:
02:cb:08:04:c8:92:b0:5a:8a:7d:1d:04:b4:bc:9c:26:08:b7:
bc:25:46:d8:a1:60:11:7d:ac:7c:71:05:f8:82:89:16:e9:f2:
4c:47:1b:94:f3:78:95:6d:40:a3:82:73:ab:2e:04:15:94:b4:
c5:3a:d7:c8:8d:70:aa:87:2a:6b:be:43:62:9c:d4:ae:0c:4a:
83:59:e8:04:a3:31:20:93:1a:fe:61:cb:d0:e4:d2:98:cc:4b:
e1:e7:6e:8a:e4:f5:7b:07:8f:7f:ce:32:cd:49:89:36:13:df:
ab:65:9b:45:d6:3a:dd:63:b4:ae:31:ca:3b:49:42:71:c8:42:
14:4a:11:35:b3:72:7e:ef:49:35:17:71:4c:ba:c6:5b:80:a6:
97:e2:86:35:34:e9:67:f4:df:34:6b:0c:bd:88:e0:55:ca:2b:
fe:a2:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:19 2024 by rpki-client on console-fra.rpki-client.org