Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/LeOHrZRuFa0Q7Rls8gLtgzgZRnA.roa
File: LeOHrZRuFa0Q7Rls8gLtgzgZRnA.roa (raw, json)
Hash identifier: lCW/bRjlS8wdKTJU2B74lRIXOE3vwlwuEYixoPxRjlw=
Subject key identifier: 2D:E3:87:AD:94:6E:15:AD:10:ED:19:6C:F2:02:ED:83:38:19:46:70
Certificate issuer: /CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Certificate serial: 018A03A86E6106196D4743125A179B3C830F
Authority key identifier: 3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/LeOHrZRuFa0Q7Rls8gLtgzgZRnA.roa
Signing time: Thu 17 Aug 2023 13:21:24 +0000
ROA not before: Thu 17 Aug 2023 13:21:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 213.178.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:a8:6e:61:06:19:6d:47:43:12:5a:17:9b:3c:83:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Validity
Not Before: Aug 17 13:21:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2de387ad946e15ad10ed196cf202ed8338194670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:2f:c4:e9:02:c2:21:bb:60:0e:18:2d:8e:
19:c0:f6:29:67:c5:5f:ed:e4:b1:25:6a:95:64:f3:
5c:2f:af:a1:5c:fc:0f:ed:66:c7:92:94:c7:8e:e3:
93:4e:7a:a3:b6:c1:cf:79:95:b8:b5:14:3a:29:96:
8f:42:40:09:2c:05:3d:01:bc:98:1a:40:84:f8:76:
6e:69:4b:77:dc:47:02:07:b1:65:0a:69:34:1f:e5:
d4:3f:c1:17:75:95:9d:f8:f4:e0:c2:ce:73:46:93:
33:b6:ca:86:99:d4:12:69:9e:d2:8b:78:c6:07:fd:
b8:75:37:8e:2c:f5:3e:a0:03:00:7d:87:bb:28:ea:
e3:81:3c:b4:d6:b9:dd:98:6e:56:5c:9e:28:ba:f8:
fd:e2:83:cd:8e:81:a6:15:a6:1e:37:3a:69:30:28:
e0:6b:b8:a4:97:c0:62:fd:4b:1d:fc:4d:62:3c:76:
d7:db:6a:30:43:66:99:e2:02:0c:cc:6b:f9:f7:2f:
c8:11:d4:ff:33:38:4c:f6:d9:bf:a5:5e:3e:4b:f5:
f1:a4:b7:f7:be:fb:f7:a9:c8:91:f1:1e:86:35:58:
1d:35:99:81:13:50:6b:a5:9c:6d:8e:b7:93:57:79:
dc:d0:ac:9d:a9:4b:67:f1:be:8b:12:50:08:46:ce:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E3:87:AD:94:6E:15:AD:10:ED:19:6C:F2:02:ED:83:38:19:46:70
X509v3 Authority Key Identifier:
keyid:3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/LeOHrZRuFa0Q7Rls8gLtgzgZRnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.143.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:9a:b7:cd:5b:85:e1:dd:5b:65:40:ad:c8:14:ea:60:9f:6d:
41:6d:08:b0:f3:74:8d:94:1f:0f:d1:4e:2f:dc:ce:6b:f5:bc:
fe:14:5e:c3:16:f0:85:8e:5c:85:a7:6c:cb:f7:b6:3f:7c:d7:
16:c3:0b:8d:93:f1:92:d1:54:04:26:29:77:b4:f5:6f:e6:a9:
3e:33:bb:b6:7e:1f:c7:7a:62:df:b9:1d:82:3d:85:65:9b:1e:
1b:ca:5a:10:28:6a:07:d8:98:af:d6:3f:11:5b:9e:cd:de:d0:
fa:48:97:e1:34:f9:a7:3f:d6:e1:2b:05:f6:68:27:4d:c6:05:
84:e8:30:07:40:18:17:35:a9:a6:d2:9e:3c:05:25:f8:e1:5a:
31:f2:b5:09:02:01:4c:a6:a3:90:6f:9a:b3:e9:b7:6a:30:29:
ed:b6:7d:13:a3:a9:5e:ef:37:78:d0:5e:97:e1:e6:c6:4b:c0:
4f:1d:2f:90:c6:3f:d9:1d:11:2d:22:8b:d3:d8:ad:ce:45:eb:
c9:81:51:03:8d:61:47:3b:c5:f5:52:92:10:8d:23:5d:42:b6:
2e:c7:3a:e2:d3:28:05:bf:cc:c9:70:ff:45:f1:ad:a1:b9:97:
ba:d7:11:99:f5:6e:6b:7c:3b:38:07:ef:7e:74:86:72:3d:da:
e5:bc:72:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:38 2025 by rpki-client