Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/A0bm9iMsW3YBurb2e2UVKZAdIr8.roa
File: A0bm9iMsW3YBurb2e2UVKZAdIr8.roa (raw, json)
Hash identifier: 9WuoseEtBjALBy/JQMW56w0On2PNfeaOBxlQQSHhG0c=
Subject key identifier: 03:46:E6:F6:23:2C:5B:76:01:BA:B6:F6:7B:65:15:29:90:1D:22:BF
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0187704177C54E61BF8E4FC7E480E2FE1090
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/A0bm9iMsW3YBurb2e2UVKZAdIr8.roa
Signing time: Tue 11 Apr 2023 12:19:11 +0000
ROA not before: Tue 11 Apr 2023 12:19:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 178.254.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:41:77:c5:4e:61:bf:8e:4f:c7:e4:80:e2:fe:10:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Apr 11 12:19:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0346e6f6232c5b7601bab6f67b651529901d22bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:47:be:2f:ac:05:d8:b8:b1:05:c1:3e:75:7f:
96:e4:d1:2e:29:52:5b:e0:4b:72:0c:42:fa:d5:40:
b8:98:dd:a8:d5:5c:57:07:ed:29:82:25:b4:2c:f3:
8e:3a:69:27:2c:65:68:88:0e:5d:cf:ab:ff:ad:37:
a4:5f:16:3a:e0:30:2a:e8:5b:96:55:46:bf:a9:6b:
61:75:82:54:42:b9:4c:04:b7:bd:ed:fd:9d:b5:fe:
6a:26:62:ad:30:32:a2:a4:99:3c:f1:a7:cc:ba:bb:
c9:5e:ad:13:03:21:f0:1f:f3:f7:f9:2c:c7:31:ea:
06:f8:0b:fc:4b:c4:4a:77:7c:17:c5:e7:50:15:8c:
68:78:ab:ef:c6:47:ab:59:c8:1f:f1:3f:7b:37:90:
8b:55:f5:19:9e:bb:9a:75:f4:e8:93:20:85:c9:01:
4d:78:db:d2:14:c6:79:e0:04:53:9e:4c:c0:c6:9f:
6f:97:62:3c:29:6e:d3:0c:a1:19:dc:99:65:47:e2:
1f:51:0e:79:49:be:25:40:a1:39:47:2f:0f:f9:58:
84:25:7a:13:ea:12:04:d2:49:96:88:66:4c:4d:34:
a2:c4:50:3a:76:df:db:6b:d9:54:cf:f2:72:33:be:
57:f7:de:fc:f5:e8:36:9b:27:98:2f:d5:18:1f:7a:
ae:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:46:E6:F6:23:2C:5B:76:01:BA:B6:F6:7B:65:15:29:90:1D:22:BF
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/A0bm9iMsW3YBurb2e2UVKZAdIr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d0:1a:b5:f9:58:28:dc:b8:84:26:30:91:fa:ad:f5:c1:52:
8a:24:b9:81:77:df:92:12:a3:4c:8c:42:c2:b4:2b:51:bf:2b:
a0:78:23:16:0e:45:66:af:d5:14:01:2c:87:36:23:fc:7a:92:
30:dc:38:22:09:31:b0:6e:ac:05:4a:72:40:da:10:94:d6:3c:
48:34:8f:e7:36:0f:64:c0:fe:56:e2:7b:80:5b:6d:50:18:3a:
c7:d7:4b:c2:9d:05:7f:b3:3b:21:d6:92:22:23:d5:36:d9:a3:
7c:10:4a:83:73:99:ca:53:aa:e5:da:d3:f3:5e:fe:38:d7:2a:
9c:17:cd:58:0e:ad:1e:38:d3:03:c5:d1:b5:37:98:3e:6e:08:
fc:7c:97:4e:00:48:c4:b3:10:04:ed:2f:79:a5:0a:06:94:f2:
17:c0:97:47:00:28:53:6d:dd:5b:3c:e7:47:37:d7:57:99:82:
4d:e2:b6:88:c1:1f:85:95:46:9c:44:f7:b6:23:58:ba:b5:94:
25:54:73:29:6c:d4:94:84:09:7a:f3:28:81:67:0a:e3:f8:5c:
38:31:25:d5:bd:9a:e3:ce:c1:46:1b:bb:30:5c:50:b0:a8:e4:
93:ba:59:ee:27:f5:37:57:ee:0e:d9:52:25:d0:0f:fc:84:c4:
33:f0:8c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net