Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/3B3MJNdgrGp8dlmEGWkpih85N6M.roa
File: 3B3MJNdgrGp8dlmEGWkpih85N6M.roa (raw, json)
Hash identifier: HERs/5sN2MqXl0+YF6kuNwxng0Y5mgGy0dUGPES/n2w=
Subject key identifier: DC:1D:CC:24:D7:60:AC:6A:7C:76:59:84:19:69:29:8A:1F:39:37:A3
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 018E2D33C9D31272C01325924B5B3BD08D3A
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/3B3MJNdgrGp8dlmEGWkpih85N6M.roa
Signing time: Mon 11 Mar 2024 11:09:12 +0000
ROA not before: Mon 11 Mar 2024 11:09:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 178.130.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:33:c9:d3:12:72:c0:13:25:92:4b:5b:3b:d0:8d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Mar 11 11:09:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc1dcc24d760ac6a7c7659841969298a1f3937a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:b7:48:fa:39:90:5a:b2:b1:89:d3:05:92:
d2:64:58:a1:55:3e:b5:cb:cd:98:49:7e:12:bb:3f:
88:1c:77:b6:4b:76:cd:4d:c7:79:c1:c4:b4:ab:e0:
c3:51:d8:8a:32:09:b4:94:b4:9a:e6:06:ac:47:85:
27:55:6d:58:87:40:90:14:49:d4:15:22:62:19:68:
0e:b4:65:87:04:6e:53:23:1d:ae:f3:ae:e4:73:be:
04:cb:bb:09:be:45:fd:d3:d6:c1:1b:79:99:e5:33:
a6:2a:6a:71:b3:e5:d9:a8:a6:33:e1:a0:45:0b:59:
58:ef:be:76:9a:f8:d9:be:42:b0:58:b2:8d:d4:94:
3c:4f:51:c4:cc:5d:80:fb:82:50:8e:ef:1c:83:f6:
8c:99:44:77:4f:05:be:f1:59:05:6f:96:e8:6f:28:
9b:4c:8f:01:aa:5a:ad:28:9d:6e:2a:dc:9a:2c:92:
3c:2c:a7:00:9e:75:0c:08:e2:52:75:4a:90:09:34:
a3:f6:95:00:2c:73:b8:1c:fa:d5:a1:8b:cd:60:bd:
e8:a8:52:64:21:0d:8b:ad:27:50:cf:59:76:7e:24:
59:04:73:92:0d:c0:cf:55:e5:f9:5e:fd:6c:d6:01:
3d:82:21:a2:41:99:f1:ac:95:d1:e2:39:9b:75:c1:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1D:CC:24:D7:60:AC:6A:7C:76:59:84:19:69:29:8A:1F:39:37:A3
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/3B3MJNdgrGp8dlmEGWkpih85N6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.130.131.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:3c:b3:1c:d6:2b:86:39:da:ba:52:ca:4f:13:26:0c:61:87:
ef:cb:37:52:f2:81:a8:81:5d:04:01:d1:57:92:88:43:42:9b:
a7:76:ee:3e:d7:88:c5:5c:f2:0b:a3:e9:ec:53:d0:a1:b2:cf:
1a:71:ea:d0:f6:b9:91:cc:89:85:c3:0f:f3:d3:06:d0:ef:66:
2c:0d:8b:b8:d6:ad:5a:45:13:79:ab:3c:85:0a:77:7d:ec:05:
e5:fd:e6:80:e4:d1:10:5f:0e:6f:55:4a:dc:0b:00:cd:f6:da:
6c:2e:4f:ca:60:84:9e:92:38:bf:d7:14:9d:f9:bb:10:29:02:
35:4e:00:a8:12:9f:7d:51:f6:bf:c9:e6:ef:9b:55:b5:db:78:
ba:f0:7c:8d:a9:cf:ec:e3:e6:b6:79:48:d5:73:25:7c:d0:91:
02:32:24:5d:bd:ee:f3:0b:64:8d:c4:56:c6:ca:90:0a:45:d7:
35:76:30:40:ec:e9:99:cf:b7:54:be:5b:fe:4c:32:d2:71:a4:
04:0c:f6:e2:ef:97:ab:9a:10:f1:0b:75:38:da:16:24:1f:28:
b5:48:fb:20:71:57:cf:b0:9f:1a:4c:4b:6b:2d:86:04:9c:ea:
1e:2a:be:cd:73:c0:02:84:68:cb:46:a5:1e:01:76:15:d9:65:
08:2a:99:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 03:51:53 2024 by rpki-client on console.sobornost.net