Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/1p2IHKBs7ISSi1a7YtArIEDpOjM.roa
File: 1p2IHKBs7ISSi1a7YtArIEDpOjM.roa (raw, json)
Hash identifier: OxYqa3A6Y3cUaAv/fOWO/Iz94WVv+/H8KFLrKdfZ28g=
Subject key identifier: D6:9D:88:1C:A0:6C:EC:84:92:8B:56:BB:62:D0:2B:20:40:E9:3A:33
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 01950EE23CEE5751E4E4A734D0900545EC11
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/1p2IHKBs7ISSi1a7YtArIEDpOjM.roa
Signing time: Sun 16 Feb 2025 13:11:02 +0000
ROA not before: Sun 16 Feb 2025 13:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 178.248.74.0/24 maxlen: 24
178.248.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0e:e2:3c:ee:57:51:e4:e4:a7:34:d0:90:05:45:ec:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Feb 16 13:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d69d881ca06cec84928b56bb62d02b2040e93a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:34:42:d3:0f:37:5f:e5:1b:5a:9b:18:66:
46:fc:66:90:c6:56:55:9b:36:eb:26:04:91:2c:ea:
93:bb:58:79:7a:15:61:9a:bf:f9:9a:ed:d4:44:5d:
13:ba:cf:af:e2:a0:7c:ec:06:e4:28:7b:e5:7d:25:
98:7e:9a:5f:b5:b8:45:63:7d:d5:9e:a2:46:1d:1e:
68:86:e2:cc:57:53:39:a3:04:ac:83:a5:b2:29:3e:
ba:be:c7:61:1c:21:3a:13:40:a8:48:19:06:ce:03:
07:43:8e:e2:c3:87:98:f2:62:cc:6b:5f:26:a9:34:
cf:73:eb:24:43:ce:19:75:46:c3:ff:11:64:40:42:
fb:30:22:c0:9e:0a:67:65:f7:e5:46:7b:bd:3b:1c:
df:c8:f3:d3:2c:33:5a:b5:e6:3f:51:76:37:38:6f:
50:2a:e8:7c:be:fc:c8:c9:65:3f:b8:a1:60:80:c7:
8b:f6:d1:23:d7:60:29:9a:a2:55:86:3e:c3:f6:4a:
f4:8c:3a:3c:c2:f7:4b:d6:cf:4d:05:28:93:08:3d:
ac:fa:85:20:dc:c6:b8:4c:35:b1:b9:94:85:c8:bf:
47:c9:90:7c:af:d0:0c:5e:69:15:bc:a1:3f:2a:2f:
05:d9:12:eb:01:3e:59:91:6d:36:c8:de:e0:79:21:
18:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9D:88:1C:A0:6C:EC:84:92:8B:56:BB:62:D0:2B:20:40:E9:3A:33
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/1p2IHKBs7ISSi1a7YtArIEDpOjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.74.0/24
178.248.77.0/24
Signature Algorithm: sha256WithRSAEncryption
76:50:28:33:20:d1:d4:e0:59:4c:c9:08:45:45:32:c8:fd:aa:
de:45:9b:96:f4:6f:b9:ea:0c:b3:e8:66:47:d4:de:c2:6c:d3:
4f:7f:18:1f:0c:1f:a2:c4:e8:3e:9e:49:32:40:70:6b:3f:3b:
64:81:0f:d3:2e:80:61:96:ba:aa:91:43:fb:2a:eb:6d:52:9f:
1c:4e:a1:3e:cd:c5:4c:62:98:cc:f3:3f:7c:b6:81:17:ac:80:
52:9e:82:bd:98:a1:73:53:d9:9b:c9:db:03:c3:70:fe:6c:45:
97:6e:60:d1:34:63:05:e5:28:87:02:81:2a:6a:94:04:3b:75:
f3:e7:b9:e3:0f:ca:7c:4c:3a:2e:e9:f4:fa:8d:b5:9d:e8:20:
34:7d:8a:f5:18:ef:a0:81:61:b2:d8:ab:a2:df:f2:5a:a8:72:
67:f8:da:a8:89:a6:b5:b3:48:ca:de:4a:c5:1e:ec:bf:00:2b:
ba:c8:88:f6:a5:a8:ea:04:7f:44:27:f3:f3:04:49:6f:bd:5e:
1f:ca:5e:bd:8e:2e:b2:78:cc:12:b6:65:0c:91:66:e3:2c:a4:
27:98:4d:da:10:2d:30:91:5a:78:8a:b8:a0:d6:1f:12:97:17:
e5:23:af:43:96:b3:74:be:0b:4f:49:05:cb:a2:96:ea:20:7b:
a9:3d:39:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:17 2025 by rpki-client