Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/dWOVBeC9rYrgiMsEUWG48qX1Wkw.roa
File: dWOVBeC9rYrgiMsEUWG48qX1Wkw.roa (raw, json)
Hash identifier: E/5YJ+LBiC5osugGpetht8RXbDCTNLmcabUCRGWp2Ec=
Subject key identifier: 75:63:95:05:E0:BD:AD:8A:E0:88:CB:04:51:61:B8:F2:A5:F5:5A:4C
Certificate issuer: /CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Certificate serial: 018CC56EE49ADC1078A78DE0EA0304D8F04D
Authority key identifier: 3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/dWOVBeC9rYrgiMsEUWG48qX1Wkw.roa
Signing time: Mon 01 Jan 2024 14:30:28 +0000
ROA not before: Mon 01 Jan 2024 14:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 213.178.141.0/24 maxlen: 24
213.178.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e4:9a:dc:10:78:a7:8d:e0:ea:03:04:d8:f0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Validity
Not Before: Jan 1 14:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75639505e0bdad8ae088cb045161b8f2a5f55a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:01:d3:e4:35:98:8d:20:82:96:2b:9d:12:65:
96:21:b8:03:ce:3e:b7:f5:a1:f3:ea:7c:c8:ab:a2:
b5:78:4e:9f:0e:0a:32:6c:da:01:12:ea:ac:a4:e9:
a6:b9:17:6f:ac:f7:48:d4:a7:d6:6e:34:b2:b8:17:
a4:2e:53:23:be:a0:49:4e:76:02:69:7f:b0:fc:33:
09:70:0b:c5:3c:38:21:9c:0c:9a:70:d8:a7:b8:11:
bb:cf:18:84:88:2a:4d:fb:0c:11:14:8b:0c:16:ca:
00:59:df:6b:aa:17:5a:3c:fe:72:c4:9a:46:11:92:
0a:ec:d5:1c:b3:f3:fc:e8:d7:35:0c:de:5b:64:db:
f1:8a:c4:2c:c0:e5:5b:27:5f:eb:7d:16:02:49:9f:
97:0b:96:da:81:ed:b4:da:7a:b6:e9:b3:15:2b:36:
a6:21:9e:30:aa:da:10:d6:a1:8e:cc:17:09:66:10:
b7:23:e2:1b:06:f7:3b:07:ad:15:05:e2:9f:89:03:
19:c8:68:f9:03:68:ea:8d:b5:b2:59:3c:47:00:14:
ea:13:5f:70:15:d7:a1:af:a1:79:93:0d:d3:7b:32:
03:00:c2:6f:75:57:c9:5e:07:f0:4d:d5:5c:50:06:
64:7d:ad:50:53:5c:e1:42:a6:66:18:98:8b:b2:70:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:63:95:05:E0:BD:AD:8A:E0:88:CB:04:51:61:B8:F2:A5:F5:5A:4C
X509v3 Authority Key Identifier:
keyid:3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/dWOVBeC9rYrgiMsEUWG48qX1Wkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.140.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:d0:6a:ae:8f:7c:e1:c1:a1:c9:67:27:8e:51:9d:18:f9:7d:
b6:87:41:60:4c:73:8a:91:d4:a4:fa:e5:fa:ea:49:46:f3:2f:
57:4d:d9:e5:e9:9a:27:53:9c:74:7d:df:4a:0e:fa:b8:73:0b:
24:c7:07:f8:8f:0d:ed:d3:2d:bb:2d:7e:67:c1:eb:d6:98:c0:
34:c9:89:bb:a6:9a:c0:1d:04:6a:69:e2:ce:82:7f:79:30:5c:
25:ad:9a:54:20:63:e4:cd:d5:bd:10:42:2e:3b:21:eb:b0:ed:
7b:cb:e2:b2:f5:06:8d:60:40:e6:34:9b:eb:91:93:0a:f7:05:
2c:c1:8c:b0:fe:5a:1d:4f:2a:af:ef:70:77:82:8f:99:0d:9a:
3f:e3:05:d8:d2:7b:74:ea:f5:9b:03:9a:9a:d3:e8:02:1d:fb:
cd:b2:85:81:38:29:b7:a7:4b:b3:e3:6f:93:94:cb:5f:a1:bd:
f9:f7:54:0d:20:f2:a1:59:c4:34:66:aa:dc:80:63:35:69:80:
1f:f7:20:e6:29:18:cc:37:9d:ff:34:b1:e2:e5:83:79:a2:af:
fc:5b:20:d6:f4:5e:11:ab:fb:a9:dc:89:71:05:5c:3b:5b:f8:
83:0d:1e:cf:b8:f7:06:23:f0:a5:40:0e:97:bf:45:87:b4:7f:
a3:aa:9b:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbuSa3BB4p43g6gME2PBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMTNiZjgyMjU5MmJkMWI1NGI3N2NjMmMxY2M0MmIyOGNj
ZjE2NjkwHhcNMjQwMTAxMTQzMDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTYzOTUwNWUwYmRhZDhhZTA4OGNiMDQ1MTYxYjhmMmE1ZjU1YTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAHT5DWYjSCCliudEmWWIbgDzj63
9aHz6nzIq6K1eE6fDgoybNoBEuqspOmmuRdvrPdI1KfWbjSyuBekLlMjvqBJTnYC
aX+w/DMJcAvFPDghnAyacNinuBG7zxiEiCpN+wwRFIsMFsoAWd9rqhdaPP5yxJpG
EZIK7NUcs/P86Nc1DN5bZNvxisQswOVbJ1/rfRYCSZ+XC5bage202nq26bMVKzam
IZ4wqtoQ1qGOzBcJZhC3I+IbBvc7B60VBeKfiQMZyGj5A2jqjbWyWTxHABTqE19w
Fdehr6F5kw3TezIDAMJvdVfJXgfwTdVcUAZkfa1QU1zhQqZmGJiLsnDSwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHVjlQXgva2K4IjLBFFhuPKl9VpMMB8GA1UdIwQY
MBaAFDsTv4Ilkr0bVLd8wsHMQrKMzxZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3hPX2dpV1N2UnRVdDN6Q3djeENzb3pQRm1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hNjQwNjEtNTJjOS00M2RjLTllZTAt
NWFmZGUyOTRkMWMyLzEvZFdPVkJlQzlyWXJnaU1zRVVXRzQ4cVgxV2t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hNjQwNjEtNTJjOS00M2RjLTllZTAtNWFmZGUyOTRkMWMy
LzEvT3hPX2dpV1N2UnRVdDN6Q3djeENzb3pQRm1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1bKMMA0G
CSqGSIb3DQEBCwUAA4IBAQAN0Gquj3zhwaHJZyeOUZ0Y+X22h0FgTHOKkdSk+uX6
6klG8y9XTdnl6ZonU5x0fd9KDvq4cwskxwf4jw3t0y27LX5nwevWmMA0yYm7pprA
HQRqaeLOgn95MFwlrZpUIGPkzdW9EEIuOyHrsO17y+Ky9QaNYEDmNJvrkZMK9wUs
wYyw/lodTyqv73B3go+ZDZo/4wXY0nt06vWbA5qa0+gCHfvNsoWBOCm3p0uz42+T
lMtfob3591QNIPKhWcQ0ZqrcgGM1aYAf9yDmKRjMN53/NLHi5YN5oq/8WyDW9F4R
q/up3IlxBVw7W/iDDR7PuPcGI/ClQA6Xv0WHtH+jqpss
-----END CERTIFICATE-----
Generated at Mon May 6 13:59:36 2024 by rpki-client on console-fra.rpki-client.org