Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/8gOR_6DTQ0vEFWwwJ5USu-aoNpY.roa
File: 8gOR_6DTQ0vEFWwwJ5USu-aoNpY.roa (raw, json)
Hash identifier: UY9zd3uVulR4qS2pIWgTpTBHit+JM2dzFk5izlzZjRw=
Subject key identifier: F2:03:91:FF:A0:D3:43:4B:C4:15:6C:30:27:95:12:BB:E6:A8:36:96
Certificate issuer: /CN=7726ebff0f2d74bfa21600ff73fe26691fc731a9
Certificate serial: 0185822D421653EA01FD18B610ADC2C2EC36
Authority key identifier: 77:26:EB:FF:0F:2D:74:BF:A2:16:00:FF:73:FE:26:69:1F:C7:31:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dybr_w8tdL-iFgD_c_4maR_HMak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/8gOR_6DTQ0vEFWwwJ5USu-aoNpY.roa
Signing time: Thu 05 Jan 2023 13:44:42 +0000
ROA not before: Thu 05 Jan 2023 13:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20712
IP address blocks: 178.211.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:2d:42:16:53:ea:01:fd:18:b6:10:ad:c2:c2:ec:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7726ebff0f2d74bfa21600ff73fe26691fc731a9
Validity
Not Before: Jan 5 13:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f20391ffa0d3434bc4156c30279512bbe6a83696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d3:a4:c4:fa:4f:09:8f:7e:72:8a:b8:02:ad:
e5:c2:5a:ab:94:96:3e:8a:84:55:24:95:43:c7:dc:
7f:10:6f:e9:a7:a1:44:7c:c7:53:db:6a:93:bc:d0:
ae:1d:5d:d4:a5:50:47:8f:61:e0:d0:ec:41:29:ed:
db:2c:ee:09:e0:a7:9a:ee:5c:b6:89:1d:55:a6:aa:
be:37:9f:86:3c:36:c9:6d:e7:3b:fc:e0:a9:31:56:
98:e5:0c:6c:53:7b:2e:8b:f7:84:3c:72:83:90:9c:
43:14:83:6a:7a:90:d5:d2:62:b5:5f:c2:47:4c:00:
c8:37:5f:57:cc:36:72:12:79:ff:ab:7d:e7:20:d8:
d2:e1:04:e5:05:b6:bf:65:76:c7:67:45:67:e3:8a:
2c:73:e2:e2:d6:d4:1e:b7:0f:69:20:16:67:78:cf:
3c:a1:44:6a:dc:08:fc:5c:73:ce:16:47:e3:09:8b:
84:c8:7d:9a:38:3a:bb:c3:0c:ef:ba:68:40:a6:78:
f9:d9:99:80:0a:68:5f:55:38:24:f9:1c:87:22:f4:
9d:30:24:da:ae:4d:90:e8:91:ed:d7:b7:4b:43:cf:
c6:0e:7f:d4:07:f3:4b:0e:c4:ad:bd:7a:1c:8b:92:
81:72:f1:cd:46:d2:95:3f:9c:86:c9:34:b5:23:3e:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:03:91:FF:A0:D3:43:4B:C4:15:6C:30:27:95:12:BB:E6:A8:36:96
X509v3 Authority Key Identifier:
keyid:77:26:EB:FF:0F:2D:74:BF:A2:16:00:FF:73:FE:26:69:1F:C7:31:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dybr_w8tdL-iFgD_c_4maR_HMak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/8gOR_6DTQ0vEFWwwJ5USu-aoNpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/dybr_w8tdL-iFgD_c_4maR_HMak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.150.0/24
Signature Algorithm: sha256WithRSAEncryption
92:bc:23:7a:4a:2d:ee:d3:12:e6:51:91:5e:50:a0:bb:4f:c7:
09:67:74:65:a2:98:d1:71:66:26:51:38:87:b5:4f:ea:3e:05:
8e:43:1b:5d:3c:fd:0f:4d:1c:cc:72:79:af:d6:74:bd:68:b0:
d8:02:dd:72:5b:91:fa:e3:ee:43:4e:dc:b6:ac:c8:af:33:fb:
a2:5f:32:ed:36:53:f7:20:f9:69:b4:63:a5:09:23:5d:92:f2:
e4:94:06:57:6e:ff:7b:cd:34:b7:e0:ec:5c:1f:45:e7:9f:84:
a3:f8:4e:66:d5:59:56:92:c3:53:f5:50:14:10:bb:38:61:c3:
4a:c6:ca:92:30:0f:24:91:50:5e:92:99:81:2b:3d:e7:d0:8e:
e8:27:4f:a6:8a:74:8c:cb:38:84:4c:da:81:1f:ed:f9:a4:9f:
72:b3:45:4d:9e:75:8f:cb:56:3d:62:93:08:b6:a9:41:9d:29:
ab:77:64:90:92:58:b8:42:7c:e8:02:7f:f8:f8:d8:f1:96:56:
f5:4e:62:1a:d6:0a:cf:04:a9:6a:05:e7:f3:5a:db:5a:a5:f1:
71:ae:7f:a0:5b:21:ed:79:62:a1:3a:55:af:a5:5e:e8:63:bd:
d6:2a:88:91:fe:de:0d:0c:9f:2d:69:1d:61:84:10:fd:f1:94:
ea:29:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:42 2025 by rpki-client