Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/8NfaV_XmqS_ZYy68L_LOPJgl7lY.roa
File: 8NfaV_XmqS_ZYy68L_LOPJgl7lY.roa (raw, json)
Hash identifier: XjXDdwkcqC+KubDmnXL8l4LwbvrtIBMG6C49TZgEUDw=
Subject key identifier: F0:D7:DA:57:F5:E6:A9:2F:D9:63:2E:BC:2F:F2:CE:3C:98:25:EE:56
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 01857015445506506C029D800A736D1E6F26
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/8NfaV_XmqS_ZYy68L_LOPJgl7lY.roa
Signing time: Mon 02 Jan 2023 01:25:20 +0000
ROA not before: Mon 02 Jan 2023 01:25:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50434
IP address blocks: 178.248.74.0/24 maxlen: 24
178.248.72.0/21 maxlen: 21
195.42.112.0/24 maxlen: 24
195.42.113.0/24 maxlen: 24
193.169.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:44:55:06:50:6c:02:9d:80:0a:73:6d:1e:6f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 2 01:25:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0d7da57f5e6a92fd9632ebc2ff2ce3c9825ee56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:ce:ab:81:f5:07:8b:56:5c:41:f9:e2:54:
eb:d4:5c:a5:10:b7:31:30:f3:1f:6c:b4:24:bb:36:
79:ae:ea:61:53:6d:9f:89:42:37:99:74:ce:8e:26:
28:bb:c6:c9:6b:1e:49:0a:ba:73:3e:2e:24:84:ac:
47:54:ec:9b:4f:97:53:42:26:3c:44:7d:07:03:42:
f9:ff:26:dc:36:a8:5b:a9:c1:72:42:57:2e:e4:0d:
42:0c:89:48:73:42:45:2e:a6:71:e7:ee:e6:8e:1b:
0a:88:58:4b:bc:31:97:74:14:45:55:98:f1:ed:75:
7a:1b:7a:e5:82:58:9a:53:24:5d:b0:4d:cc:61:26:
a6:87:b4:83:50:1f:a8:50:9a:44:06:31:39:b9:5c:
e0:17:ee:99:35:94:47:95:96:af:fd:b4:1f:35:7a:
4f:2d:71:c0:87:a6:3c:f4:b0:63:21:ec:fd:16:8b:
2a:34:71:74:b5:a3:e2:75:fc:2f:f9:36:e9:1a:b4:
70:a2:bc:48:e6:2f:7e:be:cb:e1:90:20:86:25:19:
07:8a:45:a8:10:dd:8d:ae:5d:40:30:03:fb:ea:57:
0f:a8:ec:26:9f:5a:ff:7b:28:a7:f3:15:1e:ff:56:
46:af:cf:40:27:34:42:d5:02:21:aa:6a:0c:40:a1:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D7:DA:57:F5:E6:A9:2F:D9:63:2E:BC:2F:F2:CE:3C:98:25:EE:56
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/8NfaV_XmqS_ZYy68L_LOPJgl7lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.72.0/21
193.169.78.0/23
195.42.112.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:2d:56:1d:15:54:4f:02:e5:2d:34:28:97:cc:e4:b3:be:5d:
ba:f2:2c:e8:a9:16:02:b2:64:36:8c:ba:20:79:be:58:9f:9f:
62:dc:e1:f0:21:36:d0:a3:55:3d:8e:b6:6e:12:74:1b:9b:02:
e6:de:be:0a:00:98:af:05:70:dd:72:46:84:85:73:5c:03:3e:
3a:21:fd:26:ca:50:39:dc:51:90:30:b9:2a:01:a0:97:81:1f:
87:fb:76:8b:f3:08:bd:3d:30:1b:b8:f7:c5:15:e3:30:b4:ba:
ac:f9:87:24:8e:1d:37:d7:41:a3:22:b4:14:f1:99:ab:86:31:
50:94:87:02:77:b9:15:c1:4f:34:4d:47:9b:20:a9:78:ff:fe:
f8:60:08:b9:e6:60:0e:5c:ce:59:1d:03:70:8d:57:be:2e:bd:
3d:6c:e8:a1:15:19:da:ab:52:df:d1:ed:6f:15:6b:fa:80:b8:
a7:e1:c7:49:6f:38:d1:a7:3e:6b:e3:dc:98:f5:21:e6:e4:c7:
f1:a1:36:f9:54:6e:64:ad:38:98:af:c9:2d:86:d9:f0:7c:75:
6f:6f:03:f0:41:fa:35:82:58:36:41:d1:0f:b0:2c:5c:b8:8b:
1c:fa:f8:89:e0:6d:74:a6:d4:58:67:67:f2:78:c2:aa:ac:43:
bf:a5:13:25
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVwFURVBlBsAp2ACnNtHm8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOWVjZDI0ZjMyMTk4OGRlYjdjMTlkY2EwNTJhNGUzYzQ5
YjYwZWEwHhcNMjMwMTAyMDEyNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGQ3ZGE1N2Y1ZTZhOTJmZDk2MzJlYmMyZmYyY2UzYzk4MjVlZTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNrOq4H1B4tWXEH54lTr1FylELcx
MPMfbLQkuzZ5ruphU22fiUI3mXTOjiYou8bJax5JCrpzPi4khKxHVOybT5dTQiY8
RH0HA0L5/ybcNqhbqcFyQlcu5A1CDIlIc0JFLqZx5+7mjhsKiFhLvDGXdBRFVZjx
7XV6G3rlgliaUyRdsE3MYSamh7SDUB+oUJpEBjE5uVzgF+6ZNZRHlZav/bQfNXpP
LXHAh6Y89LBjIez9FosqNHF0taPidfwv+TbpGrRworxI5i9+vsvhkCCGJRkHikWo
EN2Nrl1AMAP76lcPqOwmn1r/eyin8xUe/1ZGr89AJzRC1QIhqmoMQKGuaQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPDX2lf15qkv2WMuvC/yzjyYJe5WMB8GA1UdIwQY
MBaAFLOezSTzIZiN63wZ3KBSpOPEm2DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczU3TkpQTWhtSTNyZkJuY29GS2s0OFNiWU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMzgyNmQtNWFkYS00ZTQzLTkwODQt
MWJhNjk1ZmFlZjI1LzEvOE5mYVZfWG1xU19aWXk2OExfTE9QSmdsN2xZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lMzgyNmQtNWFkYS00ZTQzLTkwODQtMWJhNjk1ZmFlZjI1
LzEvczU3TkpQTWhtSTNyZkJuY29GS2s0OFNiWU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDsvhIAwQB
walOAwQBwypwMA0GCSqGSIb3DQEBCwUAA4IBAQCoLVYdFVRPAuUtNCiXzOSzvl26
8izoqRYCsmQ2jLogeb5Yn59i3OHwITbQo1U9jrZuEnQbmwLm3r4KAJivBXDdckaE
hXNcAz46If0mylA53FGQMLkqAaCXgR+H+3aL8wi9PTAbuPfFFeMwtLqs+Yckjh03
10GjIrQU8ZmrhjFQlIcCd7kVwU80TUebIKl4//74YAi55mAOXM5ZHQNwjVe+Lr09
bOihFRnaq1Lf0e1vFWv6gLin4cdJbzjRpz5r49yY9SHm5MfxoTb5VG5krTiYr8kt
htnwfHVvbwPwQfo1glg2QdEPsCxcuIsc+viJ4G10ptRYZ2fyeMKqrEO/pRMl
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:58 2025 by rpki-client