Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/_WleGUbICtLRSEWuAazLdoq0L2w.roa
File: _WleGUbICtLRSEWuAazLdoq0L2w.roa (raw, json)
Hash identifier: MXrG0f4yrKOaA6HIu5r0kix6KDWuiXDlAYU7bChg5UE=
Subject key identifier: FD:69:5E:19:46:C8:0A:D2:D1:48:45:AE:01:AC:CB:76:8A:B4:2F:6C
Certificate issuer: /CN=0eecb618add708467f774d93e2674076993ecd54
Certificate serial: 03FFF2DE
Authority key identifier: 0E:EC:B6:18:AD:D7:08:46:7F:77:4D:93:E2:67:40:76:99:3E:CD:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/_WleGUbICtLRSEWuAazLdoq0L2w.roa
Signing time: Sat 01 Jan 2022 06:03:15 +0000
ROA not before: Sat 01 Jan 2022 06:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206502
IP address blocks: 78.108.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67105502 (0x3fff2de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eecb618add708467f774d93e2674076993ecd54
Validity
Not Before: Jan 1 06:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd695e1946c80ad2d14845ae01accb768ab42f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:42:21:66:36:53:af:ad:bd:02:43:ec:f8:
f8:a0:a2:d6:5d:bf:e3:b7:b9:3c:3c:31:6f:8b:bf:
8b:de:3e:a9:2d:be:a8:18:8d:06:cb:0e:58:64:82:
11:4d:4a:0b:ce:ba:73:cd:01:f4:fa:07:d0:d3:27:
40:74:25:02:49:17:17:a0:db:1b:bc:17:2a:98:7f:
d8:22:1b:24:1f:70:67:fa:8d:ac:7c:f1:32:3f:6c:
c7:27:f0:e5:73:44:ee:f6:c0:ee:a3:d3:16:0b:e4:
db:d5:a2:38:b3:82:da:35:2e:42:dc:76:4d:98:aa:
a2:1e:9c:18:3f:4d:28:fc:4b:ad:04:ae:84:2f:a1:
01:ed:0f:cf:0e:cc:dd:36:a4:4f:29:92:ef:96:22:
d3:9c:02:1b:7f:8b:3e:05:4a:87:ae:e1:d4:84:11:
9b:22:f3:47:79:1c:56:8a:10:1e:c2:b8:95:42:fe:
38:bf:3c:5f:8d:c8:66:80:99:c7:c7:3e:0d:ad:7b:
c3:43:13:09:29:f0:db:9b:40:44:8f:a5:85:b1:c9:
f8:13:17:10:0a:4c:3a:85:57:7b:0e:c2:4c:91:fc:
b7:20:a4:09:07:05:bd:f8:55:be:3d:9e:cd:5f:fb:
c3:08:24:bc:cf:e5:09:e7:cb:4f:ee:67:66:96:0d:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:69:5E:19:46:C8:0A:D2:D1:48:45:AE:01:AC:CB:76:8A:B4:2F:6C
X509v3 Authority Key Identifier:
keyid:0E:EC:B6:18:AD:D7:08:46:7F:77:4D:93:E2:67:40:76:99:3E:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/_WleGUbICtLRSEWuAazLdoq0L2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:1c:e3:b3:79:38:76:7a:8e:f7:0d:21:dc:9c:f2:65:af:19:
9c:8f:01:9d:1f:5b:84:2f:4e:8f:8a:7b:db:aa:1a:36:07:c7:
59:79:db:e6:f7:52:54:60:85:96:be:9a:99:c0:2e:09:f7:43:
81:0d:c9:80:58:72:bc:d3:15:69:e6:6e:65:13:2b:17:4d:12:
53:f3:b3:13:01:37:ba:21:81:56:32:12:5e:3a:d6:5b:00:c0:
b3:ba:5a:be:b3:58:6d:0f:79:4f:da:05:80:d4:75:8f:20:ab:
0d:4c:26:5e:c5:af:61:7c:8c:9b:dc:ef:54:87:9c:46:44:61:
88:5f:48:97:0f:e9:3f:d4:b2:d0:11:61:5d:98:45:c7:e1:d2:
a1:e7:03:9c:29:59:e0:30:c6:33:82:54:25:3a:ce:24:9e:b2:
32:3c:c5:80:e3:79:a5:94:48:13:b5:b6:14:d2:ee:9e:3f:2b:
ad:ae:4c:75:0f:c3:90:27:4f:7c:9d:66:f4:28:fb:a0:82:1b:
e9:87:60:93:42:0e:48:bd:70:da:15:68:cd:20:ac:f3:23:d1:
18:9c:20:0c:e3:95:e1:dc:46:0b:0b:ee:4c:27:06:1a:3a:70:
54:0b:27:86:be:1d:1e:91:d1:ad:8c:db:e6:74:cd:95:7c:1a:
c0:21:b5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:09 2025 by rpki-client