Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/dMw58yaEhn0NGjCobsDfFLb4i9o.roa
File: dMw58yaEhn0NGjCobsDfFLb4i9o.roa (raw, json)
Hash identifier: j1fv3a8QyeQcUVjiOZOGd2GmRNeHlSlxb4kIGx9Zd30=
Subject key identifier: 74:CC:39:F3:26:84:86:7D:0D:1A:30:A8:6E:C0:DF:14:B6:F8:8B:DA
Certificate issuer: /CN=651698c0cd983797915e7d793fb6d18c481e84c5
Certificate serial: 018CC94D80C6643F11BCCF781C29E75FBF36
Authority key identifier: 65:16:98:C0:CD:98:37:97:91:5E:7D:79:3F:B6:D1:8C:48:1E:84:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaYwM2YN5eRXn15P7bRjEgehMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/dMw58yaEhn0NGjCobsDfFLb4i9o.roa
Signing time: Tue 02 Jan 2024 08:32:28 +0000
ROA not before: Tue 02 Jan 2024 08:32:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199737
IP address blocks: 178.211.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:80:c6:64:3f:11:bc:cf:78:1c:29:e7:5f:bf:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651698c0cd983797915e7d793fb6d18c481e84c5
Validity
Not Before: Jan 2 08:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74cc39f32684867d0d1a30a86ec0df14b6f88bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:d0:70:cb:ba:67:8d:e1:fb:49:77:72:26:
46:c4:42:1d:5d:ee:b1:ca:8f:d1:78:fe:87:c0:33:
52:41:a7:fe:81:b6:94:dc:c2:b9:ba:cf:eb:3c:68:
0e:02:64:a5:a1:5a:ba:58:e7:27:aa:b1:f1:a1:8d:
37:48:8e:d4:69:45:c8:20:b5:b3:b5:ee:f0:69:e7:
1f:26:84:98:36:07:56:03:53:2f:6e:17:20:18:f5:
2d:e7:cf:20:9a:ee:36:9f:0a:95:fb:2a:0c:69:59:
85:05:a3:f7:fe:f7:f6:f1:29:c0:17:76:28:2d:c8:
32:01:c6:97:ae:54:b5:c1:30:56:52:f7:19:89:37:
37:cb:62:0a:77:76:6f:1d:4f:45:0c:09:80:de:e4:
95:c8:d4:c0:45:60:94:82:d1:85:2f:82:fb:42:39:
dd:88:aa:ef:98:ee:7b:49:6e:b2:ba:ac:36:91:b6:
dd:82:86:35:a4:d8:f6:d7:d7:cc:c2:e3:e8:57:59:
28:18:7e:a9:92:1a:7f:d2:c1:a0:70:fd:9f:f4:6c:
57:94:e9:77:5f:b3:7a:1e:3d:cc:41:37:72:54:8d:
27:99:43:b4:93:d3:f3:9e:39:39:42:9a:8b:c8:cc:
f0:fc:a9:1a:aa:b5:52:fb:6d:76:2c:6d:44:02:a3:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CC:39:F3:26:84:86:7D:0D:1A:30:A8:6E:C0:DF:14:B6:F8:8B:DA
X509v3 Authority Key Identifier:
keyid:65:16:98:C0:CD:98:37:97:91:5E:7D:79:3F:B6:D1:8C:48:1E:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaYwM2YN5eRXn15P7bRjEgehMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/dMw58yaEhn0NGjCobsDfFLb4i9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/ZRaYwM2YN5eRXn15P7bRjEgehMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.132.0/24
Signature Algorithm: sha256WithRSAEncryption
37:35:95:e5:7e:31:a7:01:5f:32:17:53:d9:bf:0f:76:82:dd:
da:28:03:b8:8a:54:be:cc:0b:df:fb:5a:70:bb:48:77:c8:1f:
e4:b5:57:f4:8b:f7:ec:39:e5:dc:55:34:b4:8b:de:6e:c7:f8:
71:9b:5c:12:92:74:3d:90:c1:d1:02:ac:29:e0:8b:6c:3f:d3:
14:8e:fc:7f:dd:75:86:8a:cb:23:9e:ff:c8:1f:4f:c1:1c:e3:
9e:c7:e0:f1:46:5e:0c:50:a8:3a:14:b7:62:78:eb:24:46:4a:
82:40:d6:82:ef:31:54:c2:3b:d9:81:32:8a:77:53:aa:5a:db:
08:b7:46:d8:fc:79:63:1d:07:5b:6a:df:c6:44:d5:51:8b:2a:
dd:8f:bf:7d:e9:a6:56:4b:d4:bc:57:18:20:63:fe:6c:f5:18:
ed:8f:df:d9:3a:56:18:ad:76:56:42:91:cf:f6:e4:ab:f8:4e:
f2:b0:26:b5:61:cc:0a:36:1d:13:6b:af:41:e0:84:b6:1f:13:
c5:25:40:07:ce:05:89:23:bf:1d:73:37:fe:3e:d3:85:4f:2b:
08:21:03:0e:2d:ef:37:c8:50:b2:a7:58:c8:d3:42:0c:da:48:
58:70:23:cd:72:58:ca:34:12:4d:4b:29:1f:04:29:e2:f7:78:
c9:20:1c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org