Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/TjgnreWBeBrByU7NU8zd7WYDMVI.roa
File: TjgnreWBeBrByU7NU8zd7WYDMVI.roa (raw, json)
Hash identifier: uysnGCi4bzSG+zSJLCcpFrzMa7eL+mslEyZkMcWd424=
Subject key identifier: 4E:38:27:AD:E5:81:78:1A:C1:C9:4E:CD:53:CC:DD:ED:66:03:31:52
Certificate issuer: /CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
Certificate serial: 018B9642B5EBFCD987ABCB4460404FD0872A
Authority key identifier: 8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/TjgnreWBeBrByU7NU8zd7WYDMVI.roa
Signing time: Fri 03 Nov 2023 17:37:16 +0000
ROA not before: Fri 03 Nov 2023 17:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 178.212.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:42:b5:eb:fc:d9:87:ab:cb:44:60:40:4f:d0:87:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
Validity
Not Before: Nov 3 17:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e3827ade581781ac1c94ecd53ccdded66033152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:7c:8b:42:e4:f7:df:5c:55:27:25:45:30:
80:19:49:7d:14:9b:8a:31:61:b4:08:04:d9:34:ca:
10:7c:62:3b:87:53:56:f5:ae:47:a5:35:ef:fb:d6:
59:e9:49:3b:61:d4:7d:27:7f:70:57:20:a1:e9:9c:
8c:85:05:c9:93:14:9b:32:86:88:f2:27:c9:a9:30:
53:8c:a7:16:61:b3:de:2f:55:6d:fb:33:71:e5:c7:
78:06:33:d6:36:d3:fb:e1:a5:a2:de:40:2c:1b:22:
c0:ce:d0:3d:ac:cd:a3:d9:8f:00:f2:37:7e:d0:ae:
3b:7c:91:08:7e:5a:7f:4a:79:da:30:0a:8a:1c:97:
b9:f2:8e:c2:d4:41:3d:15:30:ff:f6:17:5c:3f:f9:
f3:fb:e2:45:1b:39:7f:0e:24:54:6f:95:53:f9:af:
5d:15:52:6f:48:5a:d4:cb:14:7c:cb:0c:f8:67:5d:
b0:51:e6:77:c0:98:7f:ef:1e:3e:5c:86:71:8d:35:
93:c8:1f:8f:27:a5:8b:0e:37:43:3e:cf:ac:5f:1f:
cb:8b:4d:40:cd:41:4c:db:24:60:54:77:01:a6:e7:
dc:1b:01:60:c4:1d:4e:6e:98:bd:df:bc:17:d2:64:
e9:7d:21:3f:26:db:c5:32:23:83:1f:6a:0f:9a:ef:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:38:27:AD:E5:81:78:1A:C1:C9:4E:CD:53:CC:DD:ED:66:03:31:52
X509v3 Authority Key Identifier:
keyid:8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/TjgnreWBeBrByU7NU8zd7WYDMVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.76.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:26:26:c5:97:a6:83:dc:ab:2d:5b:b7:53:53:04:36:3d:b6:
9d:7c:73:6f:29:26:15:d8:d4:f9:ee:20:9e:97:16:64:09:ec:
52:ff:59:ad:ef:0c:ee:d8:08:10:78:70:4a:96:24:f5:28:84:
e3:78:5e:fd:7c:3e:b9:08:5d:f1:9e:6d:28:d3:4f:a4:d2:75:
be:07:10:11:7b:03:a1:d9:a3:83:c5:1f:f5:25:df:3a:21:b9:
7e:b6:5a:eb:20:aa:ee:41:c0:75:5f:37:fd:a9:86:f3:fc:c1:
cb:e8:80:d7:79:f9:f5:c6:60:25:50:91:c0:ef:68:4d:c6:ed:
5f:bd:59:24:c0:af:02:d7:15:78:91:12:b6:58:0c:45:2c:1e:
93:f5:7e:f0:dc:cb:6b:d1:75:03:aa:e4:6b:90:23:2d:0a:3b:
2f:6e:e6:95:62:f4:cc:66:20:81:11:1a:3a:4f:0f:ec:86:9e:
0a:05:4a:70:49:d8:07:ee:34:e2:33:56:21:60:8f:84:a6:96:
c9:33:d7:cf:c1:b6:20:ab:33:4c:a4:d7:cf:33:6d:18:bb:0d:
34:2a:7d:51:78:8c:3d:b6:19:4a:ef:c9:59:82:f1:d4:fc:eb:
0c:e7:e4:02:bb:51:33:1d:6d:17:b1:d0:af:d5:7f:b1:fc:e2:
40:bf:88:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuWQrXr/NmHq8tEYEBP0IcqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMTQ1NTdlMWY5Yjg0Yzk0ODAyNDUzZjRlYzE5OWFjZjg1
NWIzYTQwHhcNMjMxMTAzMTczNzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTM4MjdhZGU1ODE3ODFhYzFjOTRlY2Q1M2NjZGRlZDY2MDMzMTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTN8i0Lk999cVSclRTCAGUl9FJuK
MWG0CATZNMoQfGI7h1NW9a5HpTXv+9ZZ6Uk7YdR9J39wVyCh6ZyMhQXJkxSbMoaI
8ifJqTBTjKcWYbPeL1Vt+zNx5cd4BjPWNtP74aWi3kAsGyLAztA9rM2j2Y8A8jd+
0K47fJEIflp/SnnaMAqKHJe58o7C1EE9FTD/9hdcP/nz++JFGzl/DiRUb5VT+a9d
FVJvSFrUyxR8ywz4Z12wUeZ3wJh/7x4+XIZxjTWTyB+PJ6WLDjdDPs+sXx/Li01A
zUFM2yRgVHcBpufcGwFgxB1Obpi937wX0mTpfSE/JtvFMiODH2oPmu+UKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE44J63lgXgawclOzVPM3e1mAzFSMB8GA1UdIwQY
MBaAFI4UVX4fm4TJSAJFP07Bmaz4VbOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhSVmZoLWJoTWxJQWtVX1RzR1pyUGhWczZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9jYTdjNmYtYWFjYS00ZmRjLWJmMjMt
OTc4MzQyMWU1MWJhLzEvVGpnbnJlV0JlQnJCeVU3TlU4emQ3V1lETVZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9jYTdjNmYtYWFjYS00ZmRjLWJmMjMtOTc4MzQyMWU1MWJh
LzEvamhSVmZoLWJoTWxJQWtVX1RzR1pyUGhWczZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstRMMA0G
CSqGSIb3DQEBCwUAA4IBAQDHJibFl6aD3KstW7dTUwQ2PbadfHNvKSYV2NT57iCe
lxZkCexS/1mt7wzu2AgQeHBKliT1KITjeF79fD65CF3xnm0o00+k0nW+BxARewOh
2aODxR/1Jd86Ibl+tlrrIKruQcB1Xzf9qYbz/MHL6IDXefn1xmAlUJHA72hNxu1f
vVkkwK8C1xV4kRK2WAxFLB6T9X7w3Mtr0XUDquRrkCMtCjsvbuaVYvTMZiCBERo6
Tw/shp4KBUpwSdgH7jTiM1YhYI+EppbJM9fPwbYgqzNMpNfPM20Yuw00Kn1ReIw9
thlK78lZgvHU/OsM5+QCu1EzHW0XsdCv1X+x/OJAv4iy
-----END CERTIFICATE-----
Generated at Thu Dec 14 12:03:15 2023 by rpki-client on console-ams.rpki-client.org