Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/H2ghO5CMD4g_0YQP_49Y0jMJntU.roa
File: H2ghO5CMD4g_0YQP_49Y0jMJntU.roa (raw, json)
Hash identifier: 2m8U6PzziCCzql/ykDyo8FnLx3Flz021WKHDb463Vz8=
Subject key identifier: 1F:68:21:3B:90:8C:0F:88:3F:D1:84:0F:FF:8F:58:D2:33:09:9E:D5
Certificate issuer: /CN=da36405d6df5fd4c71c98e1a45b1f16f34b4314c
Certificate serial: 01878247AF33421BB92B144E18494131F9A8
Authority key identifier: DA:36:40:5D:6D:F5:FD:4C:71:C9:8E:1A:45:B1:F1:6F:34:B4:31:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jZAXW31_UxxyY4aRbHxbzS0MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/H2ghO5CMD4g_0YQP_49Y0jMJntU.roa
Signing time: Sat 15 Apr 2023 00:19:08 +0000
ROA not before: Sat 15 Apr 2023 00:19:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206995
IP address blocks: 178.211.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:82:47:af:33:42:1b:b9:2b:14:4e:18:49:41:31:f9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da36405d6df5fd4c71c98e1a45b1f16f34b4314c
Validity
Not Before: Apr 15 00:19:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f68213b908c0f883fd1840fff8f58d233099ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:d7:40:e2:0d:9d:93:8a:e3:95:d8:f1:b1:
2e:ad:1a:4f:4b:b7:bc:1d:97:ec:95:36:b8:0b:12:
3c:da:a4:bc:16:e4:9d:11:14:3a:66:5a:3a:f7:57:
59:6f:ea:c1:cb:33:c3:fe:54:b3:8c:d9:23:6d:85:
34:5f:94:af:52:0a:f6:6a:bd:1b:2c:a0:c4:52:26:
2d:78:cc:e7:41:d2:8d:9d:3c:0a:70:8f:ba:84:c4:
8c:8a:9b:c7:f2:91:fc:61:88:a9:4c:cd:a8:fc:eb:
65:a4:11:10:38:47:f7:66:b4:c7:e3:40:ca:76:16:
eb:d0:eb:b5:2c:cd:5f:92:92:02:86:d9:fc:4f:ad:
af:bd:43:39:c6:1b:f9:7b:93:8b:92:6f:9a:1c:67:
d5:69:2d:01:d2:05:2d:62:f6:aa:8e:63:31:2a:05:
4d:76:b3:d5:d6:02:28:bd:c4:29:89:32:0c:cf:24:
6d:ec:91:b3:d6:1a:b7:7a:9a:c9:70:f0:ab:f6:9b:
7f:19:1a:64:c2:28:6e:f5:6d:0c:5e:1a:be:fe:ed:
38:1a:9d:bc:40:e4:14:a4:c7:a5:af:64:39:15:c7:
b7:02:e7:79:e9:a2:0f:37:43:84:06:08:5f:ba:a4:
ea:9d:5c:9c:ca:62:aa:b9:80:94:14:fd:c7:da:94:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:68:21:3B:90:8C:0F:88:3F:D1:84:0F:FF:8F:58:D2:33:09:9E:D5
X509v3 Authority Key Identifier:
keyid:DA:36:40:5D:6D:F5:FD:4C:71:C9:8E:1A:45:B1:F1:6F:34:B4:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jZAXW31_UxxyY4aRbHxbzS0MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/H2ghO5CMD4g_0YQP_49Y0jMJntU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/2jZAXW31_UxxyY4aRbHxbzS0MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.130.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fe:9c:1b:2d:9a:90:a8:65:25:75:0e:bb:12:ee:46:21:5e:
7e:e0:b7:03:e4:b4:7a:94:f0:ff:92:e7:13:26:4d:41:7e:b8:
e8:57:9c:2c:1d:fd:71:0f:f2:46:7b:f4:5e:47:6b:4f:c4:74:
28:68:e5:35:75:f5:e9:12:65:03:75:92:e1:a9:12:1c:49:cd:
c5:eb:9a:6d:45:03:79:59:26:c5:bf:bf:ab:84:77:33:5d:25:
10:b1:5d:50:0c:f3:89:1b:90:5e:28:b8:dd:5c:3d:73:fb:f2:
70:19:73:5b:9c:a8:5b:9b:4b:dd:90:02:50:e2:ba:7c:34:86:
e5:43:cc:9a:7a:fb:e4:a0:07:34:44:38:c2:68:b6:5a:93:60:
bd:5f:02:77:69:fd:d5:f4:55:81:79:5e:b3:f3:ab:9a:b6:06:
eb:1e:ae:64:ba:83:75:e0:6a:a2:dd:00:ad:39:65:3c:f3:4c:
3c:08:8a:b7:21:26:1f:22:b6:ae:d2:fe:09:a7:e2:e6:a5:e8:
89:bb:a4:3a:48:8b:d0:19:59:31:ab:77:fc:b8:e9:56:10:9f:
41:0e:b9:41:54:7d:88:75:91:ef:7a:5d:fe:2c:e3:b8:16:46:
b7:a6:a8:9c:f0:d3:7e:b6:83:0b:d8:74:49:9b:37:07:bb:f5:
12:d5:4d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:24 2024 by rpki-client on console-fra.rpki-client.org