Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/Mtx4WII7t0ALAwxSfAkt7SLhEuQ.roa
File: Mtx4WII7t0ALAwxSfAkt7SLhEuQ.roa (raw, json)
Hash identifier: YUkcgG060RKOl3lDX/D8O3YurgrzcJteTYKDaTpLj+4=
Subject key identifier: 32:DC:78:58:82:3B:B7:40:0B:03:0C:52:7C:09:2D:ED:22:E1:12:E4
Certificate issuer: /CN=7726ebff0f2d74bfa21600ff73fe26691fc731a9
Certificate serial: 01856D0A9FEAEF42D957A436DB1D4EBDDFDF
Authority key identifier: 77:26:EB:FF:0F:2D:74:BF:A2:16:00:FF:73:FE:26:69:1F:C7:31:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dybr_w8tdL-iFgD_c_4maR_HMak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/Mtx4WII7t0ALAwxSfAkt7SLhEuQ.roa
Signing time: Sun 01 Jan 2023 11:14:50 +0000
ROA not before: Sun 01 Jan 2023 11:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31122
IP address blocks: 178.211.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:9f:ea:ef:42:d9:57:a4:36:db:1d:4e:bd:df:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7726ebff0f2d74bfa21600ff73fe26691fc731a9
Validity
Not Before: Jan 1 11:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32dc7858823bb7400b030c527c092ded22e112e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:15:bc:aa:c3:3d:4f:d9:d6:23:9d:ff:72:4d:
96:08:5d:aa:76:d1:c5:53:fe:64:75:fe:77:1c:0b:
55:72:16:9f:c1:42:36:f3:24:1c:c3:86:f6:36:79:
c0:18:89:ea:45:63:76:f1:7c:57:59:b7:11:71:99:
d3:8c:e2:44:3e:54:62:ce:b0:9d:d0:c5:1c:d6:9f:
15:1d:07:b1:ac:ef:49:b8:1b:a4:cc:20:26:a7:17:
ae:ff:76:92:a3:38:96:08:41:ee:8b:e9:36:d7:50:
78:0d:e3:21:83:0f:88:d2:7e:1a:27:ae:05:db:a6:
48:df:87:60:68:f4:10:8c:82:f6:26:92:44:d5:2e:
66:d4:9a:e4:23:8c:e5:96:92:72:06:6b:a2:90:b2:
00:d4:6d:76:d2:c2:e0:47:23:1b:ad:5b:fd:65:8b:
24:35:7e:46:37:fa:36:63:44:fb:9b:67:43:f7:39:
24:b7:e1:0d:ad:8b:72:6a:24:c5:b8:59:d7:47:5a:
51:68:5a:88:1a:0e:4b:81:5c:74:09:2d:14:b7:54:
17:4d:c2:35:97:5c:b6:a6:5f:29:9d:8d:d7:0a:ba:
99:07:ff:ce:bb:92:af:1f:81:a2:0a:28:88:5c:f5:
c1:b2:87:69:7a:98:f4:50:b6:37:ab:50:2f:09:41:
1e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DC:78:58:82:3B:B7:40:0B:03:0C:52:7C:09:2D:ED:22:E1:12:E4
X509v3 Authority Key Identifier:
keyid:77:26:EB:FF:0F:2D:74:BF:A2:16:00:FF:73:FE:26:69:1F:C7:31:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dybr_w8tdL-iFgD_c_4maR_HMak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/Mtx4WII7t0ALAwxSfAkt7SLhEuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/dybr_w8tdL-iFgD_c_4maR_HMak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.150.0/24
Signature Algorithm: sha256WithRSAEncryption
74:27:f6:2c:bd:e5:5d:65:95:b6:94:48:01:f9:fc:61:f3:33:
e6:3b:f3:7f:4d:10:1e:28:2b:a6:bb:fa:fc:76:e6:77:06:40:
1e:01:10:3d:55:24:fb:50:8e:1e:a6:11:13:4c:41:d2:76:04:
14:ee:f3:a8:d7:a5:bc:86:12:37:88:9c:d1:ca:6d:30:43:0c:
2a:d5:f5:5b:e8:74:96:46:83:53:46:36:bc:7d:78:c4:de:20:
bb:0e:5d:4f:f9:49:a2:59:26:62:b7:a5:15:f8:0f:ab:f9:6b:
e0:12:1f:db:ff:2f:04:76:83:14:75:b7:74:56:2f:6a:ad:c6:
1f:35:83:66:24:8d:64:75:8a:35:77:30:d6:08:ad:80:36:df:
c2:dc:a4:74:51:46:dd:fc:83:05:44:d8:82:7d:28:b0:ba:2e:
8b:6b:c1:25:6a:f4:0c:93:1a:a6:37:21:ae:de:97:db:ad:35:
8f:d3:5d:0d:67:c7:8e:e6:0f:49:b9:75:53:d1:b5:0a:93:ba:
3f:43:2b:6d:06:df:a4:3e:0e:65:e7:89:da:fe:59:6d:33:1d:
55:69:05:87:b4:6f:ba:b8:cd:80:e7:55:34:29:3e:6e:71:59:
8c:b3:52:6e:92:3d:00:4b:96:16:ad:d5:e8:80:e8:21:63:5c:
fb:32:f2:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtCp/q70LZV6Q22x1Ovd/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjZlYmZmMGYyZDc0YmZhMjE2MDBmZjczZmUyNjY5MWZj
NzMxYTkwHhcNMjMwMTAxMTExNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmRjNzg1ODgyM2JiNzQwMGIwMzBjNTI3YzA5MmRlZDIyZTExMmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRW8qsM9T9nWI53/ck2WCF2qdtHF
U/5kdf53HAtVchafwUI28yQcw4b2NnnAGInqRWN28XxXWbcRcZnTjOJEPlRizrCd
0MUc1p8VHQexrO9JuBukzCAmpxeu/3aSoziWCEHui+k211B4DeMhgw+I0n4aJ64F
26ZI34dgaPQQjIL2JpJE1S5m1JrkI4zllpJyBmuikLIA1G120sLgRyMbrVv9ZYsk
NX5GN/o2Y0T7m2dD9zkkt+ENrYtyaiTFuFnXR1pRaFqIGg5LgVx0CS0Ut1QXTcI1
l1y2pl8pnY3XCrqZB//Ou5KvH4GiCiiIXPXBsodpepj0ULY3q1AvCUEewQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDLceFiCO7dACwMMUnwJLe0i4RLkMB8GA1UdIwQY
MBaAFHcm6/8PLXS/ohYA/3P+JmkfxzGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlicl93OHRkTC1pRmdEX2NfNG1hUl9ITWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MTM3ZTYtMjhiZi00ZmM2LTlkMGEt
ODMyZThhYWEyMDZmLzEvTXR4NFdJSTd0MEFMQXd4U2ZBa3Q3U0xoRXVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83MTM3ZTYtMjhiZi00ZmM2LTlkMGEtODMyZThhYWEyMDZm
LzEvZHlicl93OHRkTC1pRmdEX2NfNG1hUl9ITWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstOWMA0G
CSqGSIb3DQEBCwUAA4IBAQB0J/YsveVdZZW2lEgB+fxh8zPmO/N/TRAeKCumu/r8
duZ3BkAeARA9VST7UI4ephETTEHSdgQU7vOo16W8hhI3iJzRym0wQwwq1fVb6HSW
RoNTRja8fXjE3iC7Dl1P+UmiWSZit6UV+A+r+WvgEh/b/y8EdoMUdbd0Vi9qrcYf
NYNmJI1kdYo1dzDWCK2ANt/C3KR0UUbd/IMFRNiCfSiwui6La8ElavQMkxqmNyGu
3pfbrTWP010NZ8eO5g9JuXVT0bUKk7o/QyttBt+kPg5l54na/lltMx1VaQWHtG+6
uM2A51U0KT5ucVmMs1Jukj0AS5YWrdXogOghY1z7MvLv
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:35 2025 by rpki-client