Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3f1ed3-bd9b-4301-a493-8bd79430f57f/1/A4vjuA7oVsIjUnhq-6cq2WJqd9o.roa
File: A4vjuA7oVsIjUnhq-6cq2WJqd9o.roa (raw, json)
Hash identifier: TWrTR8A7mX0R6CP6GjDw8LmvCUpEi80xuk0bR/sCMkY=
Subject key identifier: 03:8B:E3:B8:0E:E8:56:C2:23:52:78:6A:FB:A7:2A:D9:62:6A:77:DA
Certificate issuer: /CN=84273c8de4650d71a17685e5a11908e588db0988
Certificate serial: 018326EC5A91E77BDF7AD5C3BFEBEFB8FE18
Authority key identifier: 84:27:3C:8D:E4:65:0D:71:A1:76:85:E5:A1:19:08:E5:88:DB:09:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCc8jeRlDXGhdoXloRkI5YjbCYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3f1ed3-bd9b-4301-a493-8bd79430f57f/1/A4vjuA7oVsIjUnhq-6cq2WJqd9o.roa
Signing time: Sat 10 Sep 2022 10:22:47 +0000
ROA not before: Sat 10 Sep 2022 10:22:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 178.211.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:ec:5a:91:e7:7b:df:7a:d5:c3:bf:eb:ef:b8:fe:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84273c8de4650d71a17685e5a11908e588db0988
Validity
Not Before: Sep 10 10:22:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=038be3b80ee856c22352786afba72ad9626a77da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:0e:80:54:ed:35:e5:3a:6b:06:6c:28:56:
41:46:81:c3:f5:8c:a7:00:78:ec:b2:d4:92:31:97:
60:e7:59:91:ea:27:97:76:82:7d:1d:41:2b:53:f9:
41:64:e0:ef:25:32:54:53:14:61:4e:03:11:90:5b:
18:21:e5:ce:ae:56:04:64:1a:13:95:76:95:8c:d9:
e6:98:6e:0c:30:53:8f:18:22:ce:7d:ec:24:d0:53:
53:5c:8d:f0:22:3e:af:eb:15:6a:7b:eb:9a:a9:22:
3c:bf:6f:61:a3:fc:70:e3:16:1b:53:83:1d:9a:66:
84:d7:67:61:09:39:9a:b1:2b:89:de:85:02:d2:88:
b9:82:07:c4:68:78:94:a7:d4:6e:1f:f0:2c:58:0b:
6d:4c:47:4b:b6:c3:bf:49:c6:c1:3a:fd:1f:a9:6d:
e1:03:34:82:36:a2:b1:a4:f7:91:25:17:eb:d3:fc:
9c:8e:25:7b:3e:74:88:a1:32:60:5a:1c:81:e6:36:
3e:8a:11:c4:6a:6a:cf:69:4f:dd:92:32:a8:d8:d1:
c1:97:c4:56:ba:2d:e3:36:e9:fc:2c:cc:a0:ec:e2:
96:cb:41:94:1b:d8:88:aa:01:28:ae:e8:4a:7f:ae:
09:70:6d:03:d7:26:4c:d3:71:6a:3b:d4:2e:28:30:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8B:E3:B8:0E:E8:56:C2:23:52:78:6A:FB:A7:2A:D9:62:6A:77:DA
X509v3 Authority Key Identifier:
keyid:84:27:3C:8D:E4:65:0D:71:A1:76:85:E5:A1:19:08:E5:88:DB:09:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCc8jeRlDXGhdoXloRkI5YjbCYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3f1ed3-bd9b-4301-a493-8bd79430f57f/1/A4vjuA7oVsIjUnhq-6cq2WJqd9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3f1ed3-bd9b-4301-a493-8bd79430f57f/1/hCc8jeRlDXGhdoXloRkI5YjbCYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.136.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b7:7c:a3:22:c7:d6:a4:4e:72:61:23:19:c3:1a:8a:ef:85:
ce:18:ea:21:fb:54:0e:80:c8:e0:44:bb:ca:12:f4:3e:7d:0f:
f3:4d:6b:9a:49:c2:2b:06:b0:f1:a0:11:c6:b4:e1:0e:dd:79:
e2:4d:b9:7e:1e:27:5a:df:0a:87:b9:be:29:d1:96:08:a9:0c:
73:c8:1b:f0:9b:6c:f3:38:77:59:1d:12:b0:fc:cf:93:b3:46:
40:1d:b1:eb:d8:90:3e:82:27:d7:52:bb:12:bb:f8:8b:03:ea:
6b:1d:9c:eb:41:06:b5:fa:0b:f5:d1:04:de:4a:cb:c7:b2:65:
a9:19:73:70:5b:84:3f:d3:fc:47:4f:0d:8d:0c:b4:7a:20:6e:
b0:79:97:02:93:91:cf:3c:3e:7c:64:a6:47:ae:55:ce:d5:65:
ea:92:b2:0a:f8:c0:d8:75:f7:ac:25:93:7e:e1:88:4c:fb:b2:
87:8b:68:2c:c0:c0:d7:62:db:7a:65:9b:36:45:1d:ea:8e:66:
1c:8a:94:a0:a5:01:c6:a3:76:c0:ec:8d:ab:63:95:a2:7a:1a:
39:32:d0:9b:fd:e9:27:c6:3c:5b:ae:39:9c:a6:cf:4e:dc:06:
72:33:33:f8:17:19:37:5a:91:da:8e:01:e1:aa:52:ff:e4:58:
7a:ba:39:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:20 2025 by rpki-client