Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/fZ1tr8xctgyXGdGLygAIp_gXZC0.roa
File: fZ1tr8xctgyXGdGLygAIp_gXZC0.roa (raw, json)
Hash identifier: Cge6w0OazUvJOsRtXv0ifDSc9mfnpFGflACw+P0n3iY=
Subject key identifier: 7D:9D:6D:AF:CC:5C:B6:0C:97:19:D1:8B:CA:00:08:A7:F8:17:64:2D
Certificate issuer: /CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
Certificate serial: 01838ED7C3C2B6A0D5113060D45EF0795DEE
Authority key identifier: 8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/fZ1tr8xctgyXGdGLygAIp_gXZC0.roa
Signing time: Fri 30 Sep 2022 14:40:48 +0000
ROA not before: Fri 30 Sep 2022 14:40:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 178.212.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:d7:c3:c2:b6:a0:d5:11:30:60:d4:5e:f0:79:5d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
Validity
Not Before: Sep 30 14:40:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d9d6dafcc5cb60c9719d18bca0008a7f817642d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:57:1c:12:9e:60:42:72:08:0b:53:d1:39:
ee:3e:4d:37:19:08:f5:74:ae:b3:d0:21:91:3f:b2:
a9:9c:00:28:b5:12:95:c6:9e:2d:d4:7f:43:dd:41:
b8:52:be:4f:c0:dc:2f:b3:ba:37:a4:f4:39:65:71:
0d:45:2e:1c:6f:72:09:6d:0f:f0:99:00:a1:75:82:
1d:fa:f1:95:4d:f7:5f:8a:03:7d:aa:3d:c1:94:79:
fc:21:63:3d:96:72:38:cb:83:da:38:c0:ef:38:e9:
98:7d:66:cd:a2:82:06:31:a3:11:a4:0b:69:36:24:
39:e8:46:d1:20:b4:06:d0:a1:92:7e:8c:ab:c6:01:
88:8b:84:4b:86:72:63:91:c5:59:71:a6:0b:a8:43:
69:d3:28:d2:83:88:fc:7f:ab:3b:79:2c:bf:53:b6:
59:23:b3:45:4f:11:bf:c7:bf:b1:b5:84:83:70:81:
0f:20:85:96:ed:f0:9d:fb:6c:f5:6c:f6:5e:e1:96:
7e:b9:c3:84:53:84:50:49:7b:05:fe:71:cb:59:8d:
02:8f:53:50:2c:32:9b:f2:5b:9e:04:38:f0:f1:b8:
45:ad:98:ac:1a:2e:7d:cb:cb:88:8f:d6:3a:c0:8b:
c9:4e:a4:58:c2:8e:6f:8c:3b:03:1e:00:ae:4f:3c:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9D:6D:AF:CC:5C:B6:0C:97:19:D1:8B:CA:00:08:A7:F8:17:64:2D
X509v3 Authority Key Identifier:
keyid:8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/fZ1tr8xctgyXGdGLygAIp_gXZC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.76.0/24
Signature Algorithm: sha256WithRSAEncryption
77:9d:4b:6f:14:24:a9:03:eb:fd:09:9d:9c:13:1f:2a:d0:7a:
14:b2:56:c6:10:a0:76:94:c8:de:92:02:88:09:00:0e:78:14:
dc:91:da:ef:f4:d9:74:d2:b8:a4:6c:2a:b1:63:99:44:a0:77:
92:fa:9a:9a:f6:b9:1a:e7:7a:67:01:38:73:17:c8:72:1d:d6:
eb:36:78:f7:cf:d1:f4:78:9a:dc:4c:2f:a4:37:91:58:16:4c:
aa:e8:bb:9d:93:89:6b:35:5d:0d:02:d6:7c:06:dc:8f:4e:8f:
32:65:5b:d8:1b:47:d1:0b:c6:da:5a:93:be:28:90:b6:67:46:
1c:00:ed:0d:d9:f2:dd:cf:c0:ce:4b:6b:4f:9a:bf:51:e4:bc:
16:dd:e7:13:f2:40:a6:12:1f:dc:21:42:0f:79:a1:1b:9d:d8:
97:53:c7:cf:27:e5:46:e9:b8:7c:a0:84:ea:15:70:cc:73:dd:
8c:c5:df:8a:ae:ff:ce:04:23:0a:67:fa:e0:43:9e:b0:f6:1d:
16:46:e7:59:4f:a2:f7:b6:45:d3:2a:e6:12:84:36:f9:cf:8a:
aa:b8:38:16:da:41:4c:de:fd:52:3f:86:6b:e0:75:e7:2e:43:
53:d4:24:64:77:91:69:cd:79:cd:ef:fb:bc:2d:d5:e6:30:a3:
45:e7:eb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:55 2025 by rpki-client