Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/00a69d-d768-41ac-bd1a-74ce37ebc193/1/OaCst7j8Ljt-qA4G2SNR1G39eys.roa
File: OaCst7j8Ljt-qA4G2SNR1G39eys.roa (raw, json)
Hash identifier: UeHntuexJm6bjJHyPhTa0tItUlIxqf1JV5IdlHYSGd8=
Subject key identifier: 39:A0:AC:B7:B8:FC:2E:3B:7E:A8:0E:06:D9:23:51:D4:6D:FD:7B:2B
Certificate issuer: /CN=be3d2d631d8c337fb89aceb2ff04a1ada8085265
Certificate serial: 025371CF
Authority key identifier: BE:3D:2D:63:1D:8C:33:7F:B8:9A:CE:B2:FF:04:A1:AD:A8:08:52:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj0tYx2MM3-4ms6y_wShragIUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/00a69d-d768-41ac-bd1a-74ce37ebc193/1/OaCst7j8Ljt-qA4G2SNR1G39eys.roa
Signing time: Thu 19 May 2022 16:13:29 +0000
ROA not before: Thu 19 May 2022 16:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212953
IP address blocks: 178.255.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39023055 (0x25371cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3d2d631d8c337fb89aceb2ff04a1ada8085265
Validity
Not Before: May 19 16:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39a0acb7b8fc2e3b7ea80e06d92351d46dfd7b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:c4:4b:12:3b:c0:90:35:99:ad:a2:8a:81:
51:51:f3:b8:ea:92:85:a4:5e:19:dc:ee:a3:d5:61:
27:d3:6c:73:62:c8:2b:6f:a7:a1:51:c4:2c:48:6d:
33:ef:ab:fa:fd:1d:ac:4d:86:bb:dc:f2:08:e1:b2:
d9:16:62:8a:63:8d:0f:42:95:66:95:f9:05:9e:92:
ad:b9:79:f6:7a:af:90:d2:2c:b2:5e:9e:a2:ce:25:
45:56:e3:b8:b5:81:79:87:ea:54:25:ff:ea:25:0b:
c2:91:87:16:0a:67:ba:8c:76:a9:5d:c4:7e:d7:c3:
87:6c:83:2f:33:ab:8c:49:37:8b:c8:a6:0c:c0:cc:
d6:63:c1:5f:b2:04:e0:e2:7a:5f:a5:82:31:79:0f:
71:a7:1f:52:85:c7:ef:1d:52:ac:02:01:c7:f6:66:
98:19:77:c3:76:58:01:13:b8:66:8f:2e:8b:2a:02:
cf:a1:79:73:59:13:41:d7:38:ec:04:10:dc:07:d4:
0b:93:a3:90:59:ac:52:a4:d1:7f:6f:6e:c9:58:83:
04:82:1d:5f:4f:c4:66:81:0b:f7:2e:08:97:31:d0:
ff:70:b8:43:ff:22:36:98:fc:9f:e3:93:f8:9f:22:
63:08:22:ba:87:83:6d:a7:a7:5c:ae:58:e0:60:84:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A0:AC:B7:B8:FC:2E:3B:7E:A8:0E:06:D9:23:51:D4:6D:FD:7B:2B
X509v3 Authority Key Identifier:
keyid:BE:3D:2D:63:1D:8C:33:7F:B8:9A:CE:B2:FF:04:A1:AD:A8:08:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj0tYx2MM3-4ms6y_wShragIUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/00a69d-d768-41ac-bd1a-74ce37ebc193/1/OaCst7j8Ljt-qA4G2SNR1G39eys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/00a69d-d768-41ac-bd1a-74ce37ebc193/1/vj0tYx2MM3-4ms6y_wShragIUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.218.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:fd:bc:ae:f1:ec:8f:2f:71:60:94:9e:f9:5a:dd:2c:58:dd:
64:5e:dd:4d:cf:91:28:81:4c:c8:3c:e6:01:b2:11:44:2e:47:
ae:e1:f7:15:ed:dc:3c:95:6a:3d:90:a0:8f:06:91:ad:63:0d:
ff:23:38:f3:05:1c:a5:35:a1:65:d8:b8:df:ef:9e:7d:f1:bc:
6a:ec:88:dc:0a:76:0f:21:24:56:7b:d6:c3:27:59:10:d1:95:
8d:8e:41:5a:9b:cb:e8:33:c9:bd:57:67:1d:de:4a:32:ce:4a:
37:5b:ac:fa:a9:5f:cf:69:e4:f2:4d:7e:43:3e:78:6c:eb:f9:
25:01:4b:a9:fe:9c:56:93:10:a8:2f:73:9d:49:80:c0:bf:e6:
f5:8a:70:29:a6:b8:83:b0:8f:2f:c6:5e:bf:33:75:3c:7a:09:
29:e2:ea:34:fd:b2:94:97:3c:fd:a6:55:ad:4a:89:db:57:b3:
cd:fa:65:e6:d3:8a:72:a7:23:91:49:2b:58:03:a7:03:2a:e2:
f1:21:b0:9d:ed:47:a6:26:8d:47:65:9b:f4:1d:84:ea:bc:ee:
5a:f0:96:8b:6d:ce:e7:ad:d7:46:37:ae:72:41:a8:45:e1:9c:
98:95:61:db:3f:ce:07:02:5f:46:b5:5b:ca:b3:04:a9:46:2d:
46:e0:e7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:34:01 2025 by rpki-client