Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/6JZ9UH910yHAUEGFoLesp07dQhE.roa
File: 6JZ9UH910yHAUEGFoLesp07dQhE.roa (raw, json)
Hash identifier: 6A7831IzFX8zPNnCTSH8sfKdbN8FCRKu/kOaOqRxzqQ=
Subject key identifier: E8:96:7D:50:7F:75:D3:21:C0:50:41:85:A0:B7:AC:A7:4E:DD:42:11
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 019421B24C7B857F82F2A585FE8BF27F1FEA
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/6JZ9UH910yHAUEGFoLesp07dQhE.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 178.248.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4c:7b:85:7f:82:f2:a5:85:fe:8b:f2:7f:1f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8967d507f75d321c0504185a0b7aca74edd4211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:f1:f5:98:28:b9:d9:7b:f5:c6:31:31:be:
ef:49:09:90:c4:9b:f5:b5:9f:7a:1f:46:1d:e5:83:
8a:63:7a:37:b1:fb:d9:9e:53:c8:f4:24:e2:9c:90:
f1:18:fb:2c:5d:50:c7:17:62:65:45:cb:14:e8:5e:
5d:b9:f3:9d:8e:bd:9e:b6:39:0d:19:b9:90:86:d2:
06:2a:08:01:6e:94:f8:b5:ae:f6:40:1e:f4:1e:b6:
f5:89:89:24:4d:80:79:d6:73:59:f1:47:b6:30:77:
4e:a2:ee:dc:4b:7c:74:ca:9f:7c:39:05:c4:e1:bb:
28:d5:cb:ba:df:ed:7b:14:c0:31:25:8c:2d:c8:8b:
60:35:8d:75:78:84:f1:d1:f0:9c:ec:5d:4b:cb:f0:
1c:d8:74:08:65:05:85:6d:44:dd:39:69:6f:b7:30:
92:30:9f:77:24:f2:61:62:09:0a:6e:01:1e:96:10:
1a:a7:73:12:5e:6d:47:5d:1d:c3:66:97:e7:fc:4d:
59:c8:ee:5c:3b:70:07:e6:46:2e:af:b5:5a:db:ce:
2a:e7:68:f5:74:0e:97:7e:0c:7d:49:85:14:d9:4d:
78:fe:04:37:1c:57:94:45:73:71:ba:87:56:9c:ff:
3c:c0:6b:9a:42:b7:4a:ec:01:72:b9:6e:b0:a2:06:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:96:7D:50:7F:75:D3:21:C0:50:41:85:A0:B7:AC:A7:4E:DD:42:11
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/6JZ9UH910yHAUEGFoLesp07dQhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:73:b8:4e:23:50:51:e1:e6:46:06:be:b0:2a:13:3e:c1:1e:
9e:c9:a9:27:7b:34:eb:50:90:0c:29:e2:9b:78:42:4a:4e:82:
78:92:d8:cb:52:83:24:e9:e2:a1:6e:00:61:49:d3:09:e9:ae:
9f:09:a0:b8:63:55:fb:5d:56:45:c6:57:d1:f6:7d:8f:55:d3:
39:b8:39:97:8a:8d:e9:18:39:83:2d:47:e8:a2:35:99:c7:2a:
54:3f:94:63:c4:23:71:1b:6d:02:4d:ff:cc:8a:70:09:f7:4d:
cc:be:67:1f:f6:bc:dd:65:5f:2c:c7:66:83:9a:6e:64:e8:cd:
53:59:31:70:0c:cf:f3:bb:d1:c9:28:f6:73:a0:89:24:2e:33:
81:8e:06:f0:00:6f:bd:7d:f8:a4:95:26:bc:ff:b8:99:2a:08:
f0:b8:74:e5:b3:c1:69:20:e7:0f:e5:cd:86:5e:b8:c0:c7:d1:
f2:74:2a:de:a1:62:f1:02:1e:e4:bb:00:62:54:cb:57:a0:7d:
ba:c4:33:d5:d1:b0:d9:95:41:ba:0b:26:04:17:69:35:12:e4:
a1:2c:38:69:d7:4e:e6:b6:a1:d4:82:26:02:24:6e:53:fb:cc:
ed:5c:1e:eb:1e:99:01:6d:05:8b:ba:9f:d3:75:1b:08:3b:56:
08:11:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:13 2025 by rpki-client