Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/OEM3U5m49luylrkn3LqggLxjC70.roa
File: OEM3U5m49luylrkn3LqggLxjC70.roa (raw, json)
Hash identifier: O/aUarGAQhS6+BT6tIYQSJ8BHcdfyDZ1TOWoEurUMtQ=
Subject key identifier: 38:43:37:53:99:B8:F6:5B:B2:96:B9:27:DC:BA:A0:80:BC:63:0B:BD
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 011059A2
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/OEM3U5m49luylrkn3LqggLxjC70.roa
Signing time: Sat 01 Jan 2022 06:01:32 +0000
ROA not before: Sat 01 Jan 2022 06:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 178.212.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17848738 (0x11059a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Jan 1 06:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3843375399b8f65bb296b927dcbaa080bc630bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:58:3c:0b:de:11:56:b4:ae:ce:d7:88:9f:
46:36:a0:2a:c1:6c:07:12:ee:76:f5:66:5d:02:74:
59:8f:e4:19:85:94:13:bc:3f:ad:17:12:4e:70:8f:
fc:59:e9:f6:5b:19:6e:ca:fe:3f:29:d6:d4:dd:39:
12:56:43:b0:5a:1d:42:c3:57:f2:63:26:4c:35:49:
38:6e:53:28:e8:8f:cc:2f:0d:b5:82:52:cc:e2:89:
46:f8:0e:39:a4:a8:e7:99:43:d3:43:f5:2b:9d:01:
7d:72:28:82:5f:d7:5e:41:60:6c:ec:38:ee:7e:36:
d8:10:de:f5:c2:90:04:62:c3:ae:d0:3e:85:9a:01:
d5:c3:5b:dd:61:33:f3:2b:f0:a1:d2:81:f6:41:0d:
52:df:78:49:25:da:d0:52:a9:c3:7a:9d:82:87:0f:
46:75:98:d0:bd:36:e3:92:04:7f:d6:c7:00:d3:c2:
26:c1:31:d4:dc:4c:fd:94:f0:98:1a:be:77:17:8b:
6c:34:a1:47:33:0b:09:65:ea:56:0f:d3:61:0e:4c:
d7:e6:50:db:62:c4:48:25:d3:03:7f:b1:25:98:26:
1a:eb:1d:53:11:87:fa:2e:b6:ae:04:d4:89:34:01:
be:ea:cf:dd:37:81:43:9d:35:17:6d:aa:1b:53:0a:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:43:37:53:99:B8:F6:5B:B2:96:B9:27:DC:BA:A0:80:BC:63:0B:BD
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/OEM3U5m49luylrkn3LqggLxjC70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.230.0/24
Signature Algorithm: sha256WithRSAEncryption
38:45:78:c0:1d:18:46:f2:bb:2f:bf:e1:38:dd:c7:d1:7a:53:
58:82:b3:6b:8a:a4:50:18:e3:7d:32:71:22:17:03:07:b6:d4:
b7:91:05:68:71:f7:8c:5d:e0:40:e4:24:2a:83:c2:ce:10:e2:
b1:2a:1c:57:8e:b4:01:43:6b:10:13:dc:ab:a2:34:be:36:19:
94:e6:3a:32:28:e7:21:99:f9:a4:3f:2f:93:a5:74:01:ab:39:
02:75:3a:44:3f:12:af:a3:4a:4a:ed:ef:7d:c7:0f:63:cf:35:
e8:39:99:0b:9e:50:70:5d:c6:08:2c:8a:3d:c6:64:77:84:e9:
46:73:d5:7a:65:bc:1b:40:5a:fb:99:a8:da:78:07:cf:08:4d:
9c:fa:e0:d6:ac:80:f5:8e:0f:16:8d:38:32:54:9f:4b:d5:2a:
15:95:11:ac:11:86:aa:4f:94:40:f6:30:e8:ed:46:31:46:b9:
2e:8b:fd:ac:7a:97:c5:44:b5:8a:35:a0:4f:75:bc:80:33:4f:
58:c8:35:be:27:14:87:c9:7e:ea:04:fc:82:0f:cb:79:0b:0a:
d3:38:a3:d0:3e:74:14:a5:bd:b7:31:9b:37:3c:b1:37:9d:bb:
d3:19:bb:9a:77:78:b6:77:2c:ac:64:07:a9:23:3c:47:4a:2c:
3a:83:0d:8c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEARBZojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YzU1YjFjYTM3MjQyNTVkNjBhMGExZWYyOTU3MjdkZjA4ZTNiMTRjMB4XDTIyMDEw
MTA2MDEzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzg0MzM3NTM5OWI4
ZjY1YmIyOTZiOTI3ZGNiYWEwODBiYzYzMGJiZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMveWDwL3hFWtK7O14ifRjagKsFsBxLudvVmXQJ0WY/kGYWU
E7w/rRcSTnCP/Fnp9lsZbsr+PynW1N05ElZDsFodQsNX8mMmTDVJOG5TKOiPzC8N
tYJSzOKJRvgOOaSo55lD00P1K50BfXIogl/XXkFgbOw47n422BDe9cKQBGLDrtA+
hZoB1cNb3WEz8yvwodKB9kENUt94SSXa0FKpw3qdgocPRnWY0L0245IEf9bHANPC
JsEx1NxM/ZTwmBq+dxeLbDShRzMLCWXqVg/TYQ5M1+ZQ22LESCXTA3+xJZgmGusd
UxGH+i62rgTUiTQBvurP3TeBQ501F22qG1MKM+8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ4QzdTmbj2W7KWuSfcuqCAvGMLvTAfBgNVHSMEGDAWgBS8VbHKNyQlXWCg
oe8pVyffCOOxTDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZGV3h5amNrSlYxZ29LSHZLVmNuM3dqanNVdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvMzdmZDdiLTEzMDMtNDA0Zi1hNTg4LWNiYjNjZDlmZWRmZS8x
L09FTTNVNW00OWx1eWxya24zTHFnZ0x4akM3MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
MzdmZDdiLTEzMDMtNDA0Zi1hNTg4LWNiYjNjZDlmZWRmZS8xL3ZGV3h5amNrSlYx
Z29LSHZLVmNuM3dqanNVdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLU5jANBgkqhkiG9w0BAQsFAAOC
AQEAOEV4wB0YRvK7L7/hON3H0XpTWIKza4qkUBjjfTJxIhcDB7bUt5EFaHH3jF3g
QOQkKoPCzhDisSocV460AUNrEBPcq6I0vjYZlOY6MijnIZn5pD8vk6V0Aas5AnU6
RD8Sr6NKSu3vfccPY8816DmZC55QcF3GCCyKPcZkd4TpRnPVemW8G0Ba+5mo2ngH
zwhNnPrg1qyA9Y4PFo04MlSfS9UqFZURrBGGqk+UQPYw6O1GMUa5Lov9rHqXxUS1
ijWgT3W8gDNPWMg1vicUh8l+6gT8gg/LeQsK0zij0D50FKW9tzGbNzyxN5270xm7
mnd4tncsrGQHqSM8R0osOoMNjA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org