Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/OAdSylll_TqRjJA9wN1pnQuLoh0.roa
File: OAdSylll_TqRjJA9wN1pnQuLoh0.roa (raw, json)
Hash identifier: gVLAwvZx0fWhsjpvu9N1Mre6zU1c286/pXFMhzPIBhY=
Subject key identifier: 38:07:52:CA:59:65:FD:3A:91:8C:90:3D:C0:DD:69:9D:0B:8B:A2:1D
Certificate issuer: /CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Certificate serial: D1C0C3
Authority key identifier: BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/OAdSylll_TqRjJA9wN1pnQuLoh0.roa
Signing time: Sat 01 Jan 2022 02:50:54 +0000
ROA not before: Sat 01 Jan 2022 02:50:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 178.212.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13746371 (0xd1c0c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Validity
Not Before: Jan 1 02:50:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=380752ca5965fd3a918c903dc0dd699d0b8ba21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:f7:fd:cf:8a:e5:d0:89:09:76:69:85:18:
99:41:2f:05:b7:0b:72:49:15:e8:d0:cb:ca:ba:a3:
80:76:e8:94:7f:83:bf:68:1d:83:9a:35:49:92:bb:
55:4d:3e:92:65:79:e9:0d:79:b0:0a:f2:8d:3f:c7:
7c:e5:42:24:6d:c4:96:42:d9:47:4c:22:5d:32:89:
03:8c:2c:0d:5a:f1:9a:3a:8e:b0:9e:82:f9:8a:2e:
ce:b0:73:70:04:77:7f:3e:c3:7f:06:ee:c3:3a:09:
81:e9:5b:8d:87:8d:a1:a8:e8:64:e0:0e:72:b0:84:
e8:cc:de:60:a2:bf:f2:4c:e2:81:7f:4f:0e:e7:05:
36:9a:2c:7c:dd:64:72:f1:c9:09:45:cf:d1:78:25:
be:15:c3:9c:e0:08:ea:09:41:75:af:3d:b4:d3:b3:
a3:a0:4c:2b:b3:bc:4f:d1:6a:53:b9:50:da:7f:dc:
cc:37:67:d9:e1:f4:b7:2d:4b:27:8e:61:1b:38:bf:
fc:a0:d0:ec:1b:6a:bb:5c:6a:c2:18:bb:46:a9:52:
c2:15:58:8a:5f:3c:0b:fa:62:a9:a5:46:16:dd:39:
1e:04:6e:0e:4e:9f:06:60:3b:d7:c3:5a:c9:6b:c9:
74:e3:93:20:3e:bb:1b:5e:e0:49:76:cb:52:d8:f2:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:07:52:CA:59:65:FD:3A:91:8C:90:3D:C0:DD:69:9D:0B:8B:A2:1D
X509v3 Authority Key Identifier:
keyid:BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/OAdSylll_TqRjJA9wN1pnQuLoh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/vO72Si5uEcTdatBblu_2RN20V68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.77.0/24
Signature Algorithm: sha256WithRSAEncryption
51:8b:ab:de:08:d3:24:0d:7d:78:3e:b9:fd:ab:a4:14:93:b3:
60:64:b9:d3:64:37:b5:ef:fd:36:32:bc:ba:23:86:ac:ed:34:
89:be:9a:5c:25:68:9f:bc:f0:e6:1b:51:63:fe:37:58:04:71:
34:7e:aa:c2:59:79:d6:33:82:39:ed:77:65:bf:63:84:51:d1:
a9:8f:75:d8:94:2d:32:38:4f:bc:ef:9c:44:c3:9b:a3:f5:ce:
b3:3d:37:bf:b7:73:a3:ab:45:28:ea:ba:25:3f:5d:a7:8e:2d:
98:3f:12:a2:50:f8:b4:88:3d:f4:b8:35:02:6e:e6:fb:a7:a8:
6e:9e:96:6d:e1:0a:11:0f:cb:0a:63:92:41:1c:0a:f8:7f:66:
99:9d:38:17:74:ee:e6:d2:44:21:24:79:ab:1c:57:95:68:ab:
c0:59:35:04:ec:f0:62:60:8b:9b:ae:56:59:0d:e5:40:39:48:
53:7f:bd:ef:2f:1b:63:9a:dc:e7:b8:17:58:8a:66:aa:64:af:
1c:5f:c2:c6:6a:f8:55:20:d4:6b:1c:62:48:f5:94:58:c3:ed:
e4:7a:85:2e:67:3f:47:66:05:eb:7c:e1:d8:e0:50:a4:5c:d0:
de:b5:37:24:52:17:05:8b:b9:7f:dd:8e:34:83:58:21:a5:23:
0c:a6:48:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:10 2025 by rpki-client