Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/JQGCz_64LRjxZxrH4nE0LLifBdg.roa
File: JQGCz_64LRjxZxrH4nE0LLifBdg.roa (raw, json)
Hash identifier: nOy9bmYcRKKkHW/t2xShSMgcuyVP/Gm2tD8skqRMZGQ=
Subject key identifier: 25:01:82:CF:FE:B8:2D:18:F1:67:1A:C7:E2:71:34:2C:B8:9F:05:D8
Certificate issuer: /CN=da36405d6df5fd4c71c98e1a45b1f16f34b4314c
Certificate serial: 01877C2439BE7FAC919E9B3546D97752FD21
Authority key identifier: DA:36:40:5D:6D:F5:FD:4C:71:C9:8E:1A:45:B1:F1:6F:34:B4:31:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jZAXW31_UxxyY4aRbHxbzS0MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/JQGCz_64LRjxZxrH4nE0LLifBdg.roa
Signing time: Thu 13 Apr 2023 19:42:41 +0000
ROA not before: Thu 13 Apr 2023 19:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 178.211.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7c:24:39:be:7f:ac:91:9e:9b:35:46:d9:77:52:fd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da36405d6df5fd4c71c98e1a45b1f16f34b4314c
Validity
Not Before: Apr 13 19:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=250182cffeb82d18f1671ac7e271342cb89f05d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:e1:51:52:2c:61:7e:99:a5:06:ec:09:cd:
65:4a:58:92:ab:19:dd:03:ed:97:e4:85:f9:7b:d2:
b4:92:b1:42:53:75:00:2d:cc:99:18:8a:79:32:2a:
af:db:ca:d2:7b:c5:e7:07:4c:12:57:ed:4d:69:f0:
29:f1:e2:2c:14:0b:0b:ed:c2:1b:d0:bb:e4:b1:48:
47:dd:a8:49:80:e0:63:56:a1:15:36:b7:8d:d4:d3:
43:26:a0:cc:48:d3:b2:b4:a4:11:0b:0e:c6:41:af:
50:c9:cf:28:1b:b9:c5:43:53:b0:5f:5f:81:b1:44:
f7:4d:b4:a0:d3:93:3d:d9:0f:7d:c6:38:23:55:74:
c9:bd:0a:d7:35:23:c3:ea:33:25:9e:75:97:7e:81:
77:21:7b:39:0c:bd:9e:06:8f:c7:2d:02:21:77:cf:
13:58:71:4c:3c:22:94:3c:37:49:4c:42:df:c6:87:
96:6e:de:d9:9c:6b:bc:fc:c1:d7:6a:6c:fa:18:4e:
ac:70:87:99:f8:61:dd:43:d2:f4:b8:f1:86:30:b6:
cc:1e:f1:53:76:b9:cc:c5:77:56:6d:c8:50:d3:68:
b0:1d:80:1f:2b:32:2f:a7:cc:6a:37:11:84:cc:09:
4b:c6:a1:27:d0:41:3c:74:47:b3:8e:84:f7:2e:70:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:82:CF:FE:B8:2D:18:F1:67:1A:C7:E2:71:34:2C:B8:9F:05:D8
X509v3 Authority Key Identifier:
keyid:DA:36:40:5D:6D:F5:FD:4C:71:C9:8E:1A:45:B1:F1:6F:34:B4:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jZAXW31_UxxyY4aRbHxbzS0MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/JQGCz_64LRjxZxrH4nE0LLifBdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/2jZAXW31_UxxyY4aRbHxbzS0MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.130.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c0:b9:ad:f3:5a:3d:38:93:fb:df:42:36:6c:71:5b:4a:b6:
96:a8:ad:be:79:5b:74:ef:94:37:86:1e:97:c5:e4:88:12:e2:
af:57:1c:3b:84:c4:79:64:1e:21:50:81:e3:70:a0:95:4c:e8:
44:eb:34:c3:17:78:e6:98:f6:f0:59:69:84:ae:c2:29:ce:4b:
c8:b3:f9:13:91:d9:64:4d:53:4c:a1:e5:d1:bc:27:8a:77:44:
29:64:f8:85:1c:67:4b:93:88:77:2d:f6:1a:52:40:30:fc:2f:
a8:f5:47:54:e4:c9:1d:a6:97:ba:ce:89:10:1a:85:53:c3:9b:
00:4c:18:ba:82:70:3c:97:05:6d:8d:9d:50:b3:5d:01:fc:06:
a2:e2:88:bc:17:e2:04:d6:75:33:c5:95:10:d1:77:3e:81:c8:
9c:50:7a:38:6e:8e:7d:eb:69:f6:d4:a2:fc:74:b9:9b:48:4c:
a3:e8:f5:cd:ba:34:93:f7:b8:c8:57:3f:d1:17:0a:bc:88:91:
ae:61:db:0a:95:09:6d:af:bd:70:2c:be:ba:30:05:7f:28:68:
e7:cf:ee:41:69:35:a0:d1:ea:95:b9:65:98:7f:da:70:00:f8:
8d:39:1f:c3:9e:8e:94:00:78:fc:87:02:6c:69:97:1e:65:a7:
c7:27:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:24 2024 by rpki-client on console-fra.rpki-client.org