Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7e5552-0b7d-400c-95fd-856f43f69aa3/1/dzd7sAO7F3H3owC4_4mPKAnBOA8.roa
File: dzd7sAO7F3H3owC4_4mPKAnBOA8.roa (raw, json)
Hash identifier: 3uI6zD9t5Sgozvk82ftqb7rlN4zgxIKikAAWUlJCNrU=
Subject key identifier: 77:37:7B:B0:03:BB:17:71:F7:A3:00:B8:FF:89:8F:28:09:C1:38:0F
Certificate issuer: /CN=2cf3834cdab5abbcdb6bc5cf4e5503d16e84623a
Certificate serial: 018CC94E424BE6CF21DBE8DDEFE94785993E
Authority key identifier: 2C:F3:83:4C:DA:B5:AB:BC:DB:6B:C5:CF:4E:55:03:D1:6E:84:62:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPODTNq1q7zba8XPTlUD0W6EYjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7e5552-0b7d-400c-95fd-856f43f69aa3/1/dzd7sAO7F3H3owC4_4mPKAnBOA8.roa
Signing time: Tue 02 Jan 2024 08:33:18 +0000
ROA not before: Tue 02 Jan 2024 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 217.198.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:42:4b:e6:cf:21:db:e8:dd:ef:e9:47:85:99:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf3834cdab5abbcdb6bc5cf4e5503d16e84623a
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77377bb003bb1771f7a300b8ff898f2809c1380f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:a7:07:19:82:b0:7c:ca:6b:5f:dd:da:64:
1a:67:cc:94:f4:9f:2c:67:23:33:03:0e:05:10:e2:
9a:93:5b:91:96:fc:09:c1:e1:c3:c4:ad:e6:3b:2a:
73:2e:49:2e:42:2c:08:e1:3c:3d:41:e5:96:3a:66:
47:64:9e:54:b0:a2:d0:cb:6b:eb:e7:89:46:e2:84:
a6:5d:20:46:f8:da:20:2f:6b:a1:2c:98:62:66:a9:
46:22:f6:d7:a4:fb:3f:ef:7c:8a:56:18:28:4e:9a:
7d:ab:8f:9c:f4:22:a1:6d:06:8d:70:85:a1:25:bf:
82:20:fd:a6:04:64:45:00:99:b2:2c:bc:17:dd:e5:
8d:a9:84:e9:a2:9e:73:9e:92:43:bc:d5:0e:ae:5a:
b8:9d:d3:43:7b:01:99:09:b6:3d:e1:b5:81:b3:c3:
bd:09:e6:f3:2c:6e:02:36:f8:19:cc:f6:f7:d8:d8:
a9:7a:22:4f:bc:ef:29:7e:44:ad:a9:ed:e9:8e:a5:
d2:06:4b:07:9a:e7:cd:57:4f:f9:92:3b:ab:14:1b:
db:5a:7b:6a:a2:be:5a:a8:ca:a2:cf:8b:59:ca:49:
45:51:19:4b:76:ad:bc:5c:e7:cc:d1:cb:c1:9f:d8:
30:c1:0b:4d:f3:43:1b:f9:31:c7:a1:93:40:05:06:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:37:7B:B0:03:BB:17:71:F7:A3:00:B8:FF:89:8F:28:09:C1:38:0F
X509v3 Authority Key Identifier:
keyid:2C:F3:83:4C:DA:B5:AB:BC:DB:6B:C5:CF:4E:55:03:D1:6E:84:62:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPODTNq1q7zba8XPTlUD0W6EYjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7e5552-0b7d-400c-95fd-856f43f69aa3/1/dzd7sAO7F3H3owC4_4mPKAnBOA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7e5552-0b7d-400c-95fd-856f43f69aa3/1/LPODTNq1q7zba8XPTlUD0W6EYjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.178.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:0e:22:b1:e4:d6:ec:d8:db:a6:08:9d:22:d8:a4:64:d5:c2:
8a:80:9a:d3:b9:9f:75:1f:98:0d:50:8f:70:0b:d6:e3:52:ce:
a3:e6:3a:0a:75:8d:ab:aa:73:72:0e:7c:86:74:58:48:52:97:
0f:b2:f5:10:12:83:9e:f6:dc:e7:60:b0:07:65:e6:c7:2d:83:
10:5f:88:fb:b8:64:4a:2f:af:04:c4:af:82:cd:5b:7c:c7:b4:
1b:16:1a:d2:83:fb:e4:84:98:f3:e3:93:15:57:7b:02:4a:6f:
fa:8d:4a:a3:fb:b6:6b:0c:41:dd:46:01:55:3e:ba:b5:20:44:
26:a4:8f:b1:b7:02:11:a8:89:6b:41:88:80:26:cd:71:5a:65:
8e:a9:99:1f:61:38:7d:54:79:da:1a:d9:27:82:0d:55:46:77:
28:11:55:3d:4f:0f:54:e7:d0:d3:19:3c:70:8f:98:59:55:29:
bc:67:9d:27:57:42:04:12:28:aa:00:73:cd:84:6c:10:05:d8:
28:32:90:02:e8:c6:3f:8f:e0:d6:31:c6:9b:f2:d9:6c:ff:e6:
a9:2c:1d:87:dc:97:b0:e0:da:2e:b8:d6:e4:2c:81:48:30:42:
fd:2e:c6:b2:8b:c3:b2:67:1c:01:db:3c:6f:4d:8d:02:08:5f:
76:2d:91:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTkJL5s8h2+jd7+lHhZk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZjM4MzRjZGFiNWFiYmNkYjZiYzVjZjRlNTUwM2QxNmU4
NDYyM2EwHhcNMjQwMTAyMDgzMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzM3N2JiMDAzYmIxNzcxZjdhMzAwYjhmZjg5OGYyODA5YzEzODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDqnBxmCsHzKa1/d2mQaZ8yU9J8s
ZyMzAw4FEOKak1uRlvwJweHDxK3mOypzLkkuQiwI4Tw9QeWWOmZHZJ5UsKLQy2vr
54lG4oSmXSBG+NogL2uhLJhiZqlGIvbXpPs/73yKVhgoTpp9q4+c9CKhbQaNcIWh
Jb+CIP2mBGRFAJmyLLwX3eWNqYTpop5znpJDvNUOrlq4ndNDewGZCbY94bWBs8O9
CebzLG4CNvgZzPb32NipeiJPvO8pfkStqe3pjqXSBksHmufNV0/5kjurFBvbWntq
or5aqMqiz4tZyklFURlLdq28XOfM0cvBn9gwwQtN80Mb+THHoZNABQbSSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHc3e7ADuxdx96MAuP+JjygJwTgPMB8GA1UdIwQY
MBaAFCzzg0zatau822vFz05VA9FuhGI6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFBPRFROcTFxN3piYThYUFRsVUQwVzZFWWpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83ZTU1NTItMGI3ZC00MDBjLTk1ZmQt
ODU2ZjQzZjY5YWEzLzEvZHpkN3NBTzdGM0gzb3dDNF80bVBLQW5CT0E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni83ZTU1NTItMGI3ZC00MDBjLTk1ZmQtODU2ZjQzZjY5YWEz
LzEvTFBPRFROcTFxN3piYThYUFRsVUQwVzZFWWpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cayMA0G
CSqGSIb3DQEBCwUAA4IBAQA+DiKx5Nbs2NumCJ0i2KRk1cKKgJrTuZ91H5gNUI9w
C9bjUs6j5joKdY2rqnNyDnyGdFhIUpcPsvUQEoOe9tznYLAHZebHLYMQX4j7uGRK
L68ExK+CzVt8x7QbFhrSg/vkhJjz45MVV3sCSm/6jUqj+7ZrDEHdRgFVPrq1IEQm
pI+xtwIRqIlrQYiAJs1xWmWOqZkfYTh9VHnaGtkngg1VRncoEVU9Tw9U59DTGTxw
j5hZVSm8Z50nV0IEEiiqAHPNhGwQBdgoMpAC6MY/j+DWMcab8tls/+apLB2H3Jew
4NouuNbkLIFIMEL9Lsayi8OyZxwB2zxvTY0CCF92LZEo
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:49 2025 by rpki-client