Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/DCD5nTysqGm5j6eoH4ckBnhRyRs.roa
File: DCD5nTysqGm5j6eoH4ckBnhRyRs.roa (raw, json)
Hash identifier: ISQaUqwq0FCKqJ7SWHBTYZupI8K/k0qUSKzVdoWppaY=
Subject key identifier: 0C:20:F9:9D:3C:AC:A8:69:B9:8F:A7:A8:1F:87:24:06:78:51:C9:1B
Certificate issuer: /CN=0eecb618add708467f774d93e2674076993ecd54
Certificate serial: 01856E267860DDC0A072A6EA7DEF0C93A62D
Authority key identifier: 0E:EC:B6:18:AD:D7:08:46:7F:77:4D:93:E2:67:40:76:99:3E:CD:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/DCD5nTysqGm5j6eoH4ckBnhRyRs.roa
Signing time: Sun 01 Jan 2023 16:24:53 +0000
ROA not before: Sun 01 Jan 2023 16:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206502
IP address blocks: 78.108.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:78:60:dd:c0:a0:72:a6:ea:7d:ef:0c:93:a6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eecb618add708467f774d93e2674076993ecd54
Validity
Not Before: Jan 1 16:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c20f99d3caca869b98fa7a81f8724067851c91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:e3:02:2a:2a:7a:1a:ca:c2:c8:01:1f:88:
1c:90:be:7d:7e:36:da:8e:d7:19:6a:b1:9d:26:1d:
71:fe:46:cc:49:d3:ff:eb:81:9c:ed:3b:b5:83:d1:
23:d7:94:4b:85:eb:16:e3:5f:08:11:f9:35:d5:8d:
f1:52:27:3b:bd:c9:9c:5a:4d:f0:9a:3c:0e:95:03:
8e:1a:3a:cb:c4:59:05:71:45:85:89:0d:90:e7:ee:
e1:d2:a8:5b:31:fc:7a:21:ba:be:c1:0c:8c:56:5a:
e1:72:c5:9d:ff:42:b4:c9:89:61:17:a0:f8:17:01:
cf:e0:5b:7e:fe:b8:88:00:fb:04:5d:c5:6e:04:23:
83:91:1c:4f:4a:c6:21:78:8b:26:f3:ba:1c:6e:a0:
14:96:11:77:48:53:c4:65:3a:8b:83:8e:b6:63:3b:
14:39:71:68:80:3f:52:b2:b1:a6:74:04:df:12:1c:
31:4b:7b:4a:8c:6f:f2:a2:1b:74:1b:7e:d3:64:63:
bf:0f:0a:d3:0b:72:ee:95:5e:0f:aa:70:1f:36:b8:
09:ce:da:70:dc:f9:91:c2:92:2d:43:26:7b:db:70:
e5:1c:56:b5:ee:52:a5:cc:ac:64:02:a0:59:51:d3:
a8:69:b9:2e:ce:ef:8d:2e:17:f2:4d:ea:ce:8b:44:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:20:F9:9D:3C:AC:A8:69:B9:8F:A7:A8:1F:87:24:06:78:51:C9:1B
X509v3 Authority Key Identifier:
keyid:0E:EC:B6:18:AD:D7:08:46:7F:77:4D:93:E2:67:40:76:99:3E:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/DCD5nTysqGm5j6eoH4ckBnhRyRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.212.0/24
Signature Algorithm: sha256WithRSAEncryption
18:9c:a5:6e:26:9d:47:b9:a2:6e:73:60:f6:3b:63:5f:d2:99:
e6:39:f2:52:c2:a2:e0:f0:99:66:e9:b9:92:f8:36:0f:e7:e4:
ad:7b:bd:b0:df:af:51:0e:dc:24:ad:0c:e7:94:5d:21:07:61:
fa:4b:8b:9f:5a:94:91:4f:5e:e9:36:4f:e6:57:d2:30:44:b3:
6d:85:2e:6b:30:7b:a7:b7:4a:f6:fe:09:d4:d9:3d:85:a6:5a:
c9:1d:d0:76:8b:93:7e:47:5e:91:38:50:ea:1f:6a:5a:f5:f3:
36:6f:f6:ed:1e:e2:24:15:c4:cf:22:a5:ad:e5:75:11:86:29:
73:9a:1f:25:51:6e:12:84:63:95:83:6c:be:a3:90:1c:e2:3e:
70:06:19:4d:b6:e1:9b:cd:69:f1:9f:78:e8:b0:37:43:53:56:
7c:f8:b1:56:35:35:29:bd:66:5b:a5:d7:73:dd:1c:31:ac:9f:
a5:6f:d0:39:19:a8:f7:7b:08:45:cb:0d:8e:57:d4:0b:1e:e4:
b5:2c:d8:8a:bd:b8:d5:1d:e8:79:1b:4d:df:c3:b6:82:e3:23:
88:28:87:ef:f1:9b:7b:0f:37:0e:d2:e1:48:eb:e2:c0:70:a3:
2e:62:df:3e:03:1e:45:cb:96:18:5d:f4:de:13:76:35:7b:e8:
21:91:a4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:09 2025 by rpki-client