Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/1th8MGj44yotH0Shhd8UCYrkJZs.roa
File: 1th8MGj44yotH0Shhd8UCYrkJZs.roa (raw, json)
Hash identifier: IxufogYbYk9levOdvknRowZtvICndkFBA5Ggb1ujwnY=
Subject key identifier: D6:D8:7C:30:68:F8:E3:2A:2D:1F:44:A1:85:DF:14:09:8A:E4:25:9B
Certificate issuer: /CN=247a513ac9a7ef9c8351a727b5ac6bc831cdcbed
Certificate serial: 0184E740051B2E51EF25C95084B3302C2F36
Authority key identifier: 24:7A:51:3A:C9:A7:EF:9C:83:51:A7:27:B5:AC:6B:C8:31:CD:CB:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHpROsmn75yDUacntaxryDHNy-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/1th8MGj44yotH0Shhd8UCYrkJZs.roa
Signing time: Tue 06 Dec 2022 11:44:03 +0000
ROA not before: Tue 06 Dec 2022 11:44:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41609
IP address blocks: 178.250.190.0/24 maxlen: 24
178.250.191.0/24 maxlen: 24
2a00:4080::/48 maxlen: 48
2a00:4087::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:40:05:1b:2e:51:ef:25:c9:50:84:b3:30:2c:2f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247a513ac9a7ef9c8351a727b5ac6bc831cdcbed
Validity
Not Before: Dec 6 11:44:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6d87c3068f8e32a2d1f44a185df14098ae4259b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:52:13:48:d1:f7:1e:fd:a6:fc:14:2f:47:df:
5b:71:1a:7a:1e:df:8a:cc:36:bf:8e:ad:21:5f:ea:
b9:d6:f4:7b:44:1e:f4:00:9b:28:0d:38:8e:66:e2:
61:19:c6:15:11:d3:7d:26:e6:34:1f:a9:d3:ca:77:
1c:7d:b1:bb:36:8d:21:21:91:ee:6e:ce:f8:db:59:
50:f3:3b:84:06:4c:93:f9:c7:8c:9c:d9:ce:f0:9b:
61:d6:ec:48:84:d2:3b:09:7f:b1:8d:21:f9:b8:3c:
72:d7:99:b1:b3:af:6f:c4:39:da:fe:24:be:2f:a0:
af:e3:62:f9:75:11:94:95:a3:7f:04:1a:80:82:7b:
39:b3:5a:06:cb:1f:be:2f:8d:6b:3d:49:ad:06:d5:
42:69:82:74:2d:dd:74:21:d4:84:80:eb:43:83:28:
4d:3a:48:c8:77:af:92:47:9c:26:c7:2b:67:7f:44:
1a:01:1c:ae:81:73:26:2c:98:85:c5:4a:12:a6:ba:
a6:26:ab:5e:01:86:fe:5b:95:ec:b1:18:4d:3c:8b:
5a:59:10:57:1c:49:26:e2:55:61:7f:ef:b4:e7:1f:
0b:f2:35:62:e3:8c:f3:34:38:4b:26:c4:85:f0:4e:
bd:30:cf:02:c4:cc:99:2d:03:87:c5:9a:c3:f4:03:
51:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D8:7C:30:68:F8:E3:2A:2D:1F:44:A1:85:DF:14:09:8A:E4:25:9B
X509v3 Authority Key Identifier:
keyid:24:7A:51:3A:C9:A7:EF:9C:83:51:A7:27:B5:AC:6B:C8:31:CD:CB:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHpROsmn75yDUacntaxryDHNy-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/1th8MGj44yotH0Shhd8UCYrkJZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/JHpROsmn75yDUacntaxryDHNy-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.190.0/23
IPv6:
2a00:4080::/48
2a00:4087::/32
Signature Algorithm: sha256WithRSAEncryption
4f:57:98:25:c5:a2:d9:9d:f1:d6:0e:3b:5a:7a:9d:e9:4e:3a:
24:8a:6a:7c:b2:75:5b:75:b3:7c:d2:92:00:c7:71:2a:7b:f8:
8b:7d:c3:21:d3:61:aa:69:fb:90:98:9d:ec:78:8e:4e:ce:3b:
bf:f9:d3:78:19:fb:6c:17:76:09:f8:56:ee:cd:b5:ec:15:42:
90:2d:78:34:cb:ee:a5:30:4a:1b:c5:21:b0:75:2b:03:16:d7:
71:3c:9f:91:5b:a6:59:dc:37:59:fe:f8:3f:a0:74:45:b3:02:
86:23:8a:28:3d:68:34:81:9c:d6:10:ff:20:45:d9:1b:f5:84:
25:a0:c1:3e:6e:bb:26:a1:fe:e9:a7:67:73:5b:af:33:ce:36:
66:35:26:c0:16:70:1b:fb:2a:84:38:75:06:04:56:0b:19:38:
af:5c:46:29:34:7c:03:3b:a5:2f:08:af:ef:cd:44:9a:2b:02:
f3:62:27:1e:c4:b4:41:5a:db:55:bb:c4:ba:69:14:d2:1f:61:
aa:17:fb:15:91:d1:28:cc:02:e1:0d:30:73:34:88:23:7c:ae:
55:83:d0:9c:1f:8f:15:71:6a:43:09:88:ed:78:11:24:ab:9b:
6e:22:30:da:9a:f7:cf:1a:b0:e8:58:ea:e9:18:5b:2c:47:64:
97:45:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:30 2024 by rpki-client on console-fra.rpki-client.org