Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/8vYyf_AzecQzz3g4hh33aZDClr4.roa
File: 8vYyf_AzecQzz3g4hh33aZDClr4.roa (raw, json)
Hash identifier: YUtQ6ph8NqgoBYPksVSYe+8Pc3aG45COC7stYgvo270=
Subject key identifier: F2:F6:32:7F:F0:33:79:C4:33:CF:78:38:86:1D:F7:69:90:C2:96:BE
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018FE1E91ECF30DD0747E1C19CDEF8195003
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/8vYyf_AzecQzz3g4hh33aZDClr4.roa
Signing time: Tue 04 Jun 2024 06:21:42 +0000
ROA not before: Tue 04 Jun 2024 06:21:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 178.248.75.0/24 maxlen: 24
178.248.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e1:e9:1e:cf:30:dd:07:47:e1:c1:9c:de:f8:19:50:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jun 4 06:21:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2f6327ff03379c433cf7838861df76990c296be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:a0:62:77:9b:bc:39:db:25:64:fb:d8:bd:
88:c9:9b:ed:b7:02:d4:f2:68:da:4a:4e:94:e2:df:
47:38:08:91:cc:e4:ce:f7:0f:7d:82:b3:ee:93:77:
36:40:e7:ff:d4:41:86:1a:7c:a9:68:a9:be:64:6d:
a8:31:8d:a8:4e:c6:a4:de:ba:b0:a9:46:81:9e:6f:
05:cb:1e:b6:e2:b7:b3:5c:3d:f9:6d:4a:1a:99:07:
e1:cc:28:82:77:66:95:5c:4a:4e:ea:18:15:82:75:
6b:4f:5e:1c:49:e0:c4:0e:f7:b6:87:d1:6a:78:48:
2f:cc:59:b5:a4:94:ec:66:e6:0f:47:7c:e3:a5:3a:
c5:63:3c:48:d5:6a:12:8e:6e:9f:b2:68:63:b2:e8:
ff:38:ea:ea:77:36:6e:81:a9:a5:af:c5:57:a9:b8:
cb:8e:82:72:7f:bb:58:c5:1d:cb:4f:99:4d:00:d5:
18:e6:17:d1:37:06:37:62:19:ca:ce:3f:f0:bb:2e:
20:0d:9e:d1:54:d3:1c:1a:21:fd:95:99:77:88:ee:
0c:47:0e:a3:bc:0f:47:3f:c8:14:4e:c5:82:e0:46:
11:5b:f8:43:9e:42:b8:6c:c6:f7:f5:ec:ca:33:ed:
b0:e1:38:76:2c:81:bb:63:f6:ae:1f:91:70:fd:9c:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F6:32:7F:F0:33:79:C4:33:CF:78:38:86:1D:F7:69:90:C2:96:BE
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/8vYyf_AzecQzz3g4hh33aZDClr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.75.0-178.248.76.255
Signature Algorithm: sha256WithRSAEncryption
93:e3:59:c7:3e:ea:e1:2e:aa:bc:81:ec:fb:a6:3c:fd:f9:5f:
14:ac:b2:cd:16:4c:6d:74:3e:c1:b4:18:0a:1d:38:a4:71:31:
06:76:f2:12:c9:ba:3d:d0:d9:cc:cc:9f:d2:35:4e:97:08:38:
e3:ab:5d:d1:f2:30:45:36:25:06:6e:83:8a:19:b6:aa:00:21:
da:35:ae:99:24:4d:cb:e7:30:15:83:6e:34:70:56:4c:63:8c:
b9:a7:7b:97:32:69:3e:1a:f2:ed:07:49:1d:4f:e7:9f:69:35:
25:75:f3:07:88:2d:88:3f:0c:8e:de:9d:36:14:b6:29:86:6d:
1d:97:38:59:29:1b:ff:93:bd:f6:65:3d:5e:3a:e5:08:8e:01:
fe:b1:19:b5:39:9d:8c:51:b6:2b:10:48:43:41:4d:31:c0:d3:
55:04:05:ae:92:93:dc:c5:2c:6a:b2:02:29:23:b1:5a:67:b6:
be:0b:98:72:c9:c1:0e:20:fa:e3:69:49:1c:ce:4b:96:97:f6:
8a:0e:d4:58:aa:74:7d:1f:78:61:e4:c6:1f:8a:4e:9e:54:b8:
6f:ee:fa:c3:87:8c:62:2c:08:4e:d5:50:7c:a0:ff:51:dd:14:
62:b8:9a:6e:dc:c8:87:33:f9:96:8f:cf:2e:a0:a7:ca:ab:55:
3c:00:1d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:08 2025 by rpki-client