Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3f1ed3-bd9b-4301-a493-8bd79430f57f/1/p9fnoV53YWIB8j_WqvsYsf7SF-k.roa
File: p9fnoV53YWIB8j_WqvsYsf7SF-k.roa (raw, json)
Hash identifier: YgzUSLhYSQj5TgUPiqg0+Hwf2MBn0HDpBSZzTZa0aXw=
Subject key identifier: A7:D7:E7:A1:5E:77:61:62:01:F2:3F:D6:AA:FB:18:B1:FE:D2:17:E9
Certificate issuer: /CN=84273c8de4650d71a17685e5a11908e588db0988
Certificate serial: 018CC8DEF28D6E787C58C99CDDFF6E42C866
Authority key identifier: 84:27:3C:8D:E4:65:0D:71:A1:76:85:E5:A1:19:08:E5:88:DB:09:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCc8jeRlDXGhdoXloRkI5YjbCYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3f1ed3-bd9b-4301-a493-8bd79430f57f/1/p9fnoV53YWIB8j_WqvsYsf7SF-k.roa
Signing time: Tue 02 Jan 2024 06:31:43 +0000
ROA not before: Tue 02 Jan 2024 06:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 178.211.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:f2:8d:6e:78:7c:58:c9:9c:dd:ff:6e:42:c8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84273c8de4650d71a17685e5a11908e588db0988
Validity
Not Before: Jan 2 06:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7d7e7a15e77616201f23fd6aafb18b1fed217e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4c:0c:cf:4c:32:13:20:2d:35:4d:bb:7a:a4:
26:77:f8:d0:7d:82:19:84:fc:a7:a2:a6:77:e5:9f:
dd:20:15:3b:57:29:65:4e:f4:f2:af:6b:ce:b9:03:
7a:e2:c6:fd:98:3b:e7:e2:6f:73:1b:ca:e1:43:bb:
4f:30:75:d4:83:bc:d2:dd:07:f2:56:2c:21:ac:12:
e6:72:54:e5:46:db:27:d0:d9:94:3c:03:22:d4:de:
a3:9f:db:48:5b:78:4f:e7:02:64:e3:6b:ec:18:50:
50:e5:f6:7e:9b:c8:37:b3:48:b4:d6:5f:9b:d2:02:
5b:fe:f0:67:d8:b2:10:46:c8:27:4f:14:53:94:a3:
c0:e7:88:89:55:e7:24:99:4b:c2:c9:9e:50:87:25:
76:ed:cd:dc:db:1c:35:23:66:98:e1:b6:24:d9:9a:
92:6e:9a:3d:38:fb:2c:24:6c:21:94:98:59:98:98:
41:b3:cd:24:bd:e2:8b:a7:95:19:61:e8:79:cb:52:
ca:d3:ec:26:4a:9e:da:25:b0:f7:e4:84:82:9c:48:
81:f5:f8:de:fe:0d:63:5c:3c:e1:94:bc:53:34:bb:
1b:fa:5c:2c:93:aa:6b:f3:12:59:43:7e:38:e4:e5:
29:da:f5:38:1d:56:d4:a4:62:94:b5:79:d4:59:15:
eb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:E7:A1:5E:77:61:62:01:F2:3F:D6:AA:FB:18:B1:FE:D2:17:E9
X509v3 Authority Key Identifier:
keyid:84:27:3C:8D:E4:65:0D:71:A1:76:85:E5:A1:19:08:E5:88:DB:09:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCc8jeRlDXGhdoXloRkI5YjbCYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3f1ed3-bd9b-4301-a493-8bd79430f57f/1/p9fnoV53YWIB8j_WqvsYsf7SF-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3f1ed3-bd9b-4301-a493-8bd79430f57f/1/hCc8jeRlDXGhdoXloRkI5YjbCYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.136.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:db:6e:fc:45:12:a1:f2:08:66:b4:78:d2:57:7b:40:f7:e4:
78:b8:a7:28:95:78:b8:24:8d:50:0a:90:a6:92:99:f4:5a:62:
82:d0:14:a1:07:a1:da:d2:a8:32:a4:57:9d:8f:65:a8:53:02:
47:5b:31:9d:b4:bb:b1:8d:8f:ec:29:94:55:14:df:94:58:24:
21:d8:cc:e6:02:7a:5a:1c:71:3e:bf:e1:da:7b:97:04:4f:a0:
1e:5a:94:d3:01:ee:23:ee:03:b2:12:3c:c4:2e:f6:e5:7c:28:
eb:c7:3c:91:0a:2d:fe:37:fb:4d:28:9e:bb:1b:8d:1a:cb:7b:
cf:39:7e:a5:4f:4d:26:fa:26:c6:4f:d4:81:5f:4a:eb:43:c2:
7b:34:06:e5:86:af:0e:02:b6:50:78:e8:61:c5:81:b4:14:fe:
9c:b7:a8:f2:3b:a9:69:08:99:06:b4:a1:6b:2e:55:20:21:a6:
0e:ad:ec:fb:3a:b3:54:08:18:ee:f5:7a:27:3b:58:c4:ae:4b:
83:f9:d6:34:5c:49:aa:64:ca:42:c1:73:b7:5a:3a:20:0b:79:
80:ca:b7:2a:9a:e6:d0:26:e4:14:6f:c0:a2:08:50:a5:4d:54:
1a:fb:f9:49:37:82:11:28:41:84:f2:b8:e7:9f:99:6d:a3:f1:
0d:03:8c:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3vKNbnh8WMmc3f9uQshmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MjczYzhkZTQ2NTBkNzFhMTc2ODVlNWExMTkwOGU1ODhk
YjA5ODgwHhcNMjQwMTAyMDYzMTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2Q3ZTdhMTVlNzc2MTYyMDFmMjNmZDZhYWZiMThiMWZlZDIxN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0wMz0wyEyAtNU27eqQmd/jQfYIZ
hPynoqZ35Z/dIBU7VyllTvTyr2vOuQN64sb9mDvn4m9zG8rhQ7tPMHXUg7zS3Qfy
ViwhrBLmclTlRtsn0NmUPAMi1N6jn9tIW3hP5wJk42vsGFBQ5fZ+m8g3s0i01l+b
0gJb/vBn2LIQRsgnTxRTlKPA54iJVeckmUvCyZ5QhyV27c3c2xw1I2aY4bYk2ZqS
bpo9OPssJGwhlJhZmJhBs80kveKLp5UZYeh5y1LK0+wmSp7aJbD35ISCnEiB9fje
/g1jXDzhlLxTNLsb+lwsk6pr8xJZQ3445OUp2vU4HVbUpGKUtXnUWRXrAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKfX56Fed2FiAfI/1qr7GLH+0hfpMB8GA1UdIwQY
MBaAFIQnPI3kZQ1xoXaF5aEZCOWI2wmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaENjOGplUmxEWEdoZG9YbG9Sa0k1WWpiQ1lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZjFlZDMtYmQ5Yi00MzAxLWE0OTMt
OGJkNzk0MzBmNTdmLzEvcDlmbm9WNTNZV0lCOGpfV3F2c1lzZjdTRi1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZjFlZDMtYmQ5Yi00MzAxLWE0OTMtOGJkNzk0MzBmNTdm
LzEvaENjOGplUmxEWEdoZG9YbG9Sa0k1WWpiQ1lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstOIMA0G
CSqGSIb3DQEBCwUAA4IBAQDC2278RRKh8ghmtHjSV3tA9+R4uKcolXi4JI1QCpCm
kpn0WmKC0BShB6Ha0qgypFedj2WoUwJHWzGdtLuxjY/sKZRVFN+UWCQh2MzmAnpa
HHE+v+Hae5cET6AeWpTTAe4j7gOyEjzELvblfCjrxzyRCi3+N/tNKJ67G40ay3vP
OX6lT00m+ibGT9SBX0rrQ8J7NAblhq8OArZQeOhhxYG0FP6ct6jyO6lpCJkGtKFr
LlUgIaYOrez7OrNUCBju9XonO1jErkuD+dY0XEmqZMpCwXO3WjogC3mAyrcqmubQ
JuQUb8CiCFClTVQa+/lJN4IRKEGE8rjnn5lto/ENA4yU
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:22 2025 by rpki-client