Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d36edc-e05a-4e91-8459-b10bbe281e65/1/dgNMUs1520cOtSqLTbdJjIdYLf4.roa
File: dgNMUs1520cOtSqLTbdJjIdYLf4.roa (raw, json)
Hash identifier: ockfu84Z4coSRLvcBPIzjzITk/IgvT4pXWPxdxkzInY=
Subject key identifier: 76:03:4C:52:CD:79:DB:47:0E:B5:2A:8B:4D:B7:49:8C:87:58:2D:FE
Certificate issuer: /CN=093da9146dad5ce3f160ce91c47a182d1b14943d
Certificate serial: 01856BDC79BD4025A46C2893FA00259CC57B
Authority key identifier: 09:3D:A9:14:6D:AD:5C:E3:F1:60:CE:91:C4:7A:18:2D:1B:14:94:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CT2pFG2tXOPxYM6RxHoYLRsUlD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d36edc-e05a-4e91-8459-b10bbe281e65/1/dgNMUs1520cOtSqLTbdJjIdYLf4.roa
Signing time: Sun 01 Jan 2023 05:44:49 +0000
ROA not before: Sun 01 Jan 2023 05:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64492
IP address blocks: 178.212.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:79:bd:40:25:a4:6c:28:93:fa:00:25:9c:c5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093da9146dad5ce3f160ce91c47a182d1b14943d
Validity
Not Before: Jan 1 05:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76034c52cd79db470eb52a8b4db7498c87582dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:73:ac:6a:4c:37:fb:31:22:e8:26:d6:02:
86:c8:f4:43:6d:d9:b4:25:45:3a:05:d7:a6:02:ca:
4b:34:36:dd:96:de:46:7b:3c:0f:d3:5e:3b:00:bb:
15:61:bb:98:ca:de:8a:2b:3d:8d:ee:06:33:98:f8:
10:40:ca:52:1a:31:16:29:4f:5c:63:73:b3:5c:48:
9d:3c:d6:d4:60:89:fa:05:38:c1:56:17:75:bd:fc:
dc:c6:41:aa:9a:34:b9:84:8f:ad:e1:a0:71:54:f7:
6d:9c:42:23:86:42:87:e1:2c:83:20:e7:39:a2:1e:
0f:7e:d1:9d:4a:4b:44:6e:b8:6e:9f:26:09:86:3b:
bd:ff:aa:2a:0e:b1:64:04:6b:69:9e:e1:7e:54:2c:
5a:64:43:02:42:76:88:5b:87:78:1c:1a:d2:bb:2b:
72:cd:72:a9:27:9b:bf:14:0d:6f:ff:f1:94:7b:75:
d3:1a:df:02:90:d1:8d:6f:d8:94:82:9a:d0:78:f4:
a9:7f:18:4f:7d:4b:53:c3:31:a0:38:eb:c7:da:ac:
17:9d:7f:c2:a9:d0:d7:a5:2e:1b:ca:90:46:5c:06:
a0:13:e2:47:e2:5c:02:fb:0f:e4:00:24:6c:8b:3f:
95:32:ab:b1:32:9c:20:e0:5d:f7:0e:b8:3d:fa:63:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:03:4C:52:CD:79:DB:47:0E:B5:2A:8B:4D:B7:49:8C:87:58:2D:FE
X509v3 Authority Key Identifier:
keyid:09:3D:A9:14:6D:AD:5C:E3:F1:60:CE:91:C4:7A:18:2D:1B:14:94:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CT2pFG2tXOPxYM6RxHoYLRsUlD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d36edc-e05a-4e91-8459-b10bbe281e65/1/dgNMUs1520cOtSqLTbdJjIdYLf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d36edc-e05a-4e91-8459-b10bbe281e65/1/CT2pFG2tXOPxYM6RxHoYLRsUlD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.143.0/24
Signature Algorithm: sha256WithRSAEncryption
56:7b:ed:70:e5:f8:92:2e:63:49:31:a5:a3:6c:af:45:65:7b:
a7:e1:c6:d7:aa:27:13:c3:7a:33:7a:aa:48:5d:21:6d:e4:3f:
c9:1e:65:3f:10:2e:6f:87:e2:fa:8a:7a:f2:54:99:89:ee:04:
67:9e:4f:71:54:c4:aa:2f:ae:d4:6b:eb:1c:30:21:63:4c:c5:
da:97:46:85:c4:c7:c3:70:e7:57:1e:8a:3a:42:b6:a3:b3:8a:
48:64:7f:b9:08:2f:c2:2d:30:72:cb:e7:c7:4f:39:0a:9f:aa:
e5:ef:25:3a:01:bb:51:9b:41:8c:b0:41:ef:45:f1:57:8a:d9:
e7:36:95:66:b4:36:85:2a:e3:bb:c3:10:6e:df:f8:8d:d6:dd:
a9:98:89:68:0a:5e:ab:54:58:24:3a:ba:f1:f0:fe:c9:23:94:
f0:0d:ca:f1:96:81:58:2b:2f:0a:85:d8:3a:b8:e7:60:3e:93:
c9:2b:b0:5f:1d:31:27:46:32:c0:e0:ac:6f:fc:e3:67:ae:1c:
ae:95:aa:ce:ee:93:4d:9f:e0:07:be:0b:d0:e3:76:b4:9f:11:
39:8b:06:45:50:5f:ae:e8:f7:77:19:e4:81:76:9e:e2:1d:d8:
6b:e4:82:f3:f5:f9:84:5a:97:1b:9c:67:9f:a1:2a:75:50:a4:
0a:98:e7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org