Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/1-2dNRHLUgLMIoD_cCjQz5csxiCI.roa
File: 1-2dNRHLUgLMIoD_cCjQz5csxiCI.roa (raw, json)
Hash identifier: JVPfzIkpgjUJ0tROjKi8zzmAhVlp9AUcbH3T6EiFAo8=
Subject key identifier: FB:67:4D:44:72:D4:80:B3:08:A0:3F:DC:0A:34:33:E5:CB:31:88:22
Certificate issuer: /CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
Certificate serial: 018B9642B5224629522C44E48BFF2FDCE5F1
Authority key identifier: 8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/1-2dNRHLUgLMIoD_cCjQz5csxiCI.roa
Signing time: Fri 03 Nov 2023 17:37:16 +0000
ROA not before: Fri 03 Nov 2023 17:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 178.212.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:42:b5:22:46:29:52:2c:44:e4:8b:ff:2f:dc:e5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
Validity
Not Before: Nov 3 17:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb674d4472d480b308a03fdc0a3433e5cb318822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c6:90:aa:4e:26:73:5b:bf:5b:dc:f3:03:a3:
72:d6:88:e0:be:df:a7:bb:42:04:91:8d:5d:eb:d2:
bd:d9:ae:7c:b7:b7:53:df:d2:18:73:77:0a:e7:d7:
d0:1d:67:27:a4:c5:6a:dd:0b:da:13:e7:f8:92:4f:
5f:9b:d6:ba:75:b8:1b:c8:b2:02:cd:0f:b5:9e:0f:
53:5a:20:d8:45:f2:72:03:cb:2a:62:68:8b:4d:79:
c2:47:5c:f7:d6:ea:36:df:e4:3b:fa:68:97:4f:e8:
8d:92:b6:db:de:d4:03:4a:e0:c3:79:7f:8c:5e:0b:
91:d2:17:75:e7:0a:64:fc:56:56:16:0a:56:c9:e1:
21:9a:1b:a6:bd:86:20:28:f5:e6:0b:13:13:a2:ad:
d9:64:77:c7:95:59:48:70:6b:0a:20:46:14:8b:25:
00:4c:7d:44:33:4a:1b:76:61:54:23:49:6f:dc:24:
24:68:ad:b5:f5:45:ee:b3:26:51:c5:4d:94:52:80:
8e:ef:28:4c:23:44:5e:8e:88:87:6c:ea:32:de:59:
eb:0f:8a:1b:2f:f5:09:80:a2:f5:33:8a:c5:08:1e:
97:df:4a:13:6c:52:d2:3e:2c:fa:1c:4d:1f:38:2a:
b6:a6:c4:0e:85:b7:c5:db:d1:55:bc:05:0b:35:6a:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:67:4D:44:72:D4:80:B3:08:A0:3F:DC:0A:34:33:E5:CB:31:88:22
X509v3 Authority Key Identifier:
keyid:8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/1-2dNRHLUgLMIoD_cCjQz5csxiCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.76.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f1:98:a9:ef:a1:3b:4b:e5:3b:e6:b5:fb:63:7b:48:cd:3c:
55:0c:20:81:d3:36:25:f9:4e:4d:9c:32:fa:c3:a0:45:af:ec:
fc:7f:7b:57:60:59:48:9d:5a:fb:59:9d:8e:f2:2c:8e:2e:a6:
e8:88:33:0d:d4:1c:6a:a5:2f:84:22:d9:05:55:e6:fc:cf:52:
78:e8:8e:71:90:f5:d1:a9:31:00:fb:a8:c6:0e:4e:fc:0d:76:
1b:85:14:d5:46:fd:59:c9:8c:dd:50:38:b2:f7:57:d0:c6:b8:
83:8c:6d:27:e3:b5:5e:49:6e:b8:9e:d0:f5:67:44:0c:8b:2c:
56:a5:07:29:99:79:2c:3c:11:6c:4f:53:43:bf:60:21:5e:9e:
82:94:3d:23:57:3b:0f:d9:50:f5:6d:07:79:57:0e:42:9c:ec:
d6:82:49:da:74:a1:43:db:a8:31:1c:91:16:b9:ed:2b:63:97:
ae:01:d6:21:80:04:06:ee:f9:6f:6e:fa:73:ce:89:aa:19:ca:
a0:6e:05:9a:5e:a9:e9:75:0a:69:ff:7b:c0:66:bb:f3:d7:c5:
af:9e:5f:18:34:97:c5:e8:1e:ad:ca:b4:75:c5:22:08:96:05:
31:38:80:87:ab:5f:1d:e7:c6:3a:d3:2e:c1:61:a4:7a:f7:6e:
c4:e2:91:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:29 2024 by rpki-client on console-fra.rpki-client.org