Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/1-WbJBzYzq_TS2FlXRf-L8-QYAPw.roa
File: 1-WbJBzYzq_TS2FlXRf-L8-QYAPw.roa (raw, json)
Hash identifier: 4HXgn8mriM1T12o0qEHsswqlgFxaSqgATFdTekx1na0=
Subject key identifier: F9:66:C9:07:36:33:AB:F4:D2:D8:59:57:45:FF:8B:F3:E4:18:00:FC
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 0192E76DBC2FC1B435A08A71C036128150B5
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/1-WbJBzYzq_TS2FlXRf-L8-QYAPw.roa
Signing time: Fri 01 Nov 2024 11:13:01 +0000
ROA not before: Fri 01 Nov 2024 11:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 178.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e7:6d:bc:2f:c1:b4:35:a0:8a:71:c0:36:12:81:50:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Nov 1 11:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f966c9073633abf4d2d8595745ff8bf3e41800fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:5d:8d:d2:52:5f:85:d8:50:d5:34:15:cf:
6c:11:c7:3a:b9:02:ff:ad:f5:f7:65:e4:e1:f9:74:
1c:81:0b:f3:b0:a9:c0:e8:15:cd:b7:e4:f5:9d:bc:
a7:86:11:21:3a:65:97:6f:71:7d:7f:41:a1:df:b7:
5f:7f:c2:60:3f:72:b4:87:b6:16:e8:bc:b2:0e:40:
15:fe:09:8f:9b:be:37:80:7e:4b:6c:15:c2:2c:e5:
ab:b9:1a:89:e1:f1:d3:3e:3d:eb:e6:fa:09:c4:e9:
59:54:fc:1b:6a:4a:94:db:c9:2e:3e:29:99:ce:eb:
67:27:db:94:1a:f1:14:28:2a:e4:74:13:16:96:0f:
17:09:c3:5c:75:15:89:4d:0d:e6:5e:19:44:12:b9:
ef:7a:20:ab:dc:5a:e7:c1:03:81:6a:4a:3f:e3:84:
c3:a3:e3:8a:02:b0:8e:8b:16:6a:2c:93:71:47:9c:
c8:0e:4d:c4:6b:a7:87:48:0a:2c:48:f4:c9:27:90:
9d:79:3d:d5:e2:7a:85:57:c3:69:f7:72:86:29:62:
d0:00:6a:5f:32:d3:ef:8f:ba:2c:12:75:2f:0e:be:
ab:72:4f:16:8a:0d:2a:53:dd:0b:52:0c:c0:75:99:
96:1d:a7:12:c6:6f:23:6c:74:a7:3b:e4:07:5c:7f:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:66:C9:07:36:33:AB:F4:D2:D8:59:57:45:FF:8B:F3:E4:18:00:FC
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/1-WbJBzYzq_TS2FlXRf-L8-QYAPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.79.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f2:f6:7d:fa:ae:75:32:c0:b7:10:3c:6a:61:b4:4a:f8:36:
41:b5:49:2c:0b:e9:9f:29:e8:cb:cf:22:c2:79:1e:ae:7d:01:
c7:8a:9b:ee:a4:89:ff:06:f3:96:f4:c3:72:5b:74:cf:fc:a9:
e0:eb:da:bf:87:5c:29:19:84:89:7e:4a:66:cf:fb:4f:b4:6e:
5c:35:ee:91:ac:62:cb:0e:69:84:c9:83:16:63:27:f9:1c:67:
14:d6:26:8a:26:e7:15:44:54:ef:b1:8a:9a:b4:64:85:30:61:
28:33:06:db:61:62:30:ab:0f:95:f6:a2:bc:08:b7:42:13:c5:
a6:23:fa:72:20:0b:54:6a:24:4b:54:db:c5:be:a9:8d:58:4c:
f3:2b:4b:cd:4a:a5:fa:f1:97:00:e3:f5:0d:ae:e0:96:bc:bb:
1a:cd:62:b3:19:d6:b1:95:4b:57:de:19:03:f6:1f:ad:af:e4:
a8:fe:6d:2d:9c:e9:8f:46:19:9d:53:74:3b:01:18:23:46:c9:
93:df:b8:c1:b0:d1:1d:71:81:2c:ba:70:0a:fd:af:03:a7:37:
45:7b:06:4b:a3:bb:5c:8c:57:d9:e3:05:48:57:9c:1f:57:87:
e6:1b:e1:94:39:06:d2:1a:74:f1:02:96:c6:69:3d:1f:b3:22:
b4:56:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:09 2025 by rpki-client