Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/1aN5w1_atpchQJQUs7hgWqQENso.roa
File: 1aN5w1_atpchQJQUs7hgWqQENso.roa (raw, json)
Hash identifier: BsR1Ua0UqUTeHSTKRagvKJ19Mz9MbuKZYjjfLLhMyt4=
Subject key identifier: D5:A3:79:C3:5F:DA:B6:97:21:40:94:14:B3:B8:60:5A:A4:04:36:CA
Certificate issuer: /CN=fc4d168cf9fa66d4a2c921dc2b54a3c77efbed61
Certificate serial: 01856C53C9FC3A6682A067B2CB791BA63BCE
Authority key identifier: FC:4D:16:8C:F9:FA:66:D4:A2:C9:21:DC:2B:54:A3:C7:7E:FB:ED:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0WjPn6ZtSiySHcK1Sjx3777WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/1aN5w1_atpchQJQUs7hgWqQENso.roa
Signing time: Sun 01 Jan 2023 07:55:08 +0000
ROA not before: Sun 01 Jan 2023 07:55:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 178.211.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:c9:fc:3a:66:82:a0:67:b2:cb:79:1b:a6:3b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d168cf9fa66d4a2c921dc2b54a3c77efbed61
Validity
Not Before: Jan 1 07:55:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5a379c35fdab69721409414b3b8605aa40436ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9b:43:9e:32:ec:9f:0d:ff:07:5a:1b:a7:49:
88:47:a3:a0:a3:23:3a:20:49:51:48:e9:59:f0:b2:
aa:82:4e:65:ed:69:82:54:79:65:97:0b:a4:6c:f7:
a2:84:61:32:67:e5:92:38:9c:08:62:e0:a6:a2:ce:
b4:1d:12:57:98:9d:92:6c:13:db:ff:a0:f3:e3:cc:
06:c6:1f:be:b7:3c:16:f2:5d:e7:3c:c9:41:a6:7e:
09:38:54:ab:d7:09:3f:52:7d:7b:de:1b:dc:3d:7b:
11:5a:ef:db:54:a7:2f:4d:71:be:5b:1f:5b:7b:31:
b4:71:4b:4b:a8:b5:15:82:80:f0:c3:5b:ef:50:56:
95:19:5a:34:f2:e6:b0:5b:45:23:0b:59:95:ea:9e:
d6:bb:77:4d:75:7a:a8:f2:0a:07:70:92:48:80:8f:
bd:ad:f3:8d:3f:d4:5f:e7:a0:ff:6f:8d:4e:84:08:
83:93:3a:7c:05:ea:e2:e4:11:ba:60:05:9c:a5:7e:
69:3e:d0:c4:26:39:8d:39:0b:45:b4:24:2c:64:fd:
1e:56:1b:41:9d:b1:50:4c:05:36:e6:ce:a5:0b:4b:
8c:18:52:a2:56:b7:39:93:4c:4b:dc:d8:a5:b7:f5:
af:d6:5b:7d:a0:67:cb:f1:9c:40:bd:05:f5:38:b1:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A3:79:C3:5F:DA:B6:97:21:40:94:14:B3:B8:60:5A:A4:04:36:CA
X509v3 Authority Key Identifier:
keyid:FC:4D:16:8C:F9:FA:66:D4:A2:C9:21:DC:2B:54:A3:C7:7E:FB:ED:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0WjPn6ZtSiySHcK1Sjx3777WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/1aN5w1_atpchQJQUs7hgWqQENso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/_E0WjPn6ZtSiySHcK1Sjx3777WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.159.0/24
Signature Algorithm: sha256WithRSAEncryption
56:78:67:74:e6:79:0b:70:ba:f4:6f:20:dd:1c:69:57:c3:4f:
8d:9a:56:a5:37:9c:97:cb:da:00:d3:10:65:a8:dd:d6:ea:99:
8a:61:18:51:3b:bc:f1:ce:8c:0b:b9:05:a3:0f:46:15:91:ed:
2e:e3:97:29:89:1f:b7:d6:58:8b:91:37:0d:4e:e4:95:72:99:
3b:63:b0:bb:46:14:16:16:77:07:4a:27:6f:39:7e:e8:6c:c1:
d5:02:5d:ae:67:14:95:d0:aa:ab:28:b1:3e:62:dd:08:4b:32:
d4:7b:71:27:02:e5:35:dd:f0:6e:b0:08:88:22:af:8e:9d:bb:
ac:15:1f:9e:a2:e1:6d:00:e3:aa:ad:75:5d:29:96:69:25:7a:
17:4e:6e:21:9b:83:d2:5b:f8:95:91:20:03:a3:7a:b1:31:d6:
2c:6d:15:d2:28:fe:a8:22:c6:bf:84:03:f7:70:a6:36:0c:b8:
db:c7:4d:72:37:ef:53:bb:c7:58:23:7b:0b:e9:85:65:d1:3d:
8d:6d:63:8a:05:a6:9b:c3:dd:2b:fc:67:1d:a0:c3:59:59:21:
32:4e:8b:e3:a3:18:1f:0d:fc:53:2e:19:34:23:47:07:c0:df:
49:e6:73:6d:6a:4e:45:57:52:1e:d4:a4:9c:9d:d3:7a:6a:4c:
6e:f7:20:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:04 2024 by rpki-client on console-fra.rpki-client.org