Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/8z8XE_zuJT7iRxfD3Nm7JW35RaM.roa
File: 8z8XE_zuJT7iRxfD3Nm7JW35RaM.roa (raw, json)
Hash identifier: Awo7zmRR7YufMgqjiQFtGr6JAX7ENjcIdiPBtAhhV30=
Subject key identifier: F3:3F:17:13:FC:EE:25:3E:E2:47:17:C3:DC:D9:BB:25:6D:F9:45:A3
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 019421B24BC3DB9F68E25065ADCFF6E71BF7
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/8z8XE_zuJT7iRxfD3Nm7JW35RaM.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 178.248.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4b:c3:db:9f:68:e2:50:65:ad:cf:f6:e7:1b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f33f1713fcee253ee24717c3dcd9bb256df945a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:58:04:c9:b0:bb:2d:5f:0c:2f:b0:cd:a1:
b0:ec:07:74:99:fa:f8:de:84:cb:af:f7:d4:5a:49:
43:c9:f5:ee:f0:76:99:d2:be:f3:2b:11:e4:4e:b9:
ca:45:c6:37:91:53:5b:35:6c:a5:1a:1f:4e:02:e0:
22:c6:2f:c2:a7:ba:a0:5e:d8:63:48:1a:e5:cd:1f:
35:f2:1a:6b:60:a7:68:5e:56:c7:54:38:8a:e6:0e:
f0:a8:49:d5:17:fe:b0:81:83:eb:51:5e:bd:7a:b9:
1c:6b:4c:a5:b9:d4:bf:e9:65:b6:2f:7a:a3:2e:35:
12:37:e2:cd:35:7c:f0:a0:39:cb:ff:9c:c0:95:a7:
2b:e8:d2:ee:36:37:20:e2:2b:73:09:04:a3:e2:14:
a0:a5:0f:05:bb:f5:f8:0b:db:3d:52:26:9a:47:d4:
04:19:d4:fe:b7:04:e0:fc:d0:7c:b3:20:66:4c:d8:
2f:70:8e:72:3d:c7:94:0e:b1:c5:10:d1:cd:1e:1d:
7f:44:21:0b:33:99:a5:07:19:aa:18:d6:4c:75:bb:
2a:6b:81:79:01:d0:9d:ee:5e:e2:63:c0:03:51:21:
04:77:02:bb:86:04:21:06:18:60:00:21:b8:ee:64:
4e:a4:75:7f:2c:a0:40:be:c2:32:9e:77:03:5a:50:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3F:17:13:FC:EE:25:3E:E2:47:17:C3:DC:D9:BB:25:6D:F9:45:A3
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/8z8XE_zuJT7iRxfD3Nm7JW35RaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
38:3b:14:e2:99:d5:36:ff:e5:eb:9c:1b:44:73:14:b8:5a:94:
dd:7e:81:56:cf:e3:62:4f:51:63:35:f0:0f:e1:6a:1c:a8:95:
53:b4:61:50:68:28:a9:2e:40:1a:64:15:fd:67:11:56:33:1f:
22:d0:3c:a4:9e:4c:66:ba:82:19:a9:5d:7f:0c:fe:db:5d:27:
ed:30:e3:25:ae:38:62:10:aa:3d:5c:f8:41:af:9f:e0:7f:b7:
3d:3e:04:fd:e3:c7:d8:4b:e0:20:be:1d:62:9d:55:ed:e5:af:
7f:d1:44:b4:03:26:29:80:f0:eb:b8:fb:de:70:91:57:be:ba:
65:28:ab:75:bf:b0:89:2d:ae:7c:41:0d:51:cd:63:53:02:ff:
1a:c7:df:33:af:45:b7:ca:2d:8d:8e:2b:f1:2c:4c:1e:4d:69:
33:fd:8f:09:de:9e:24:c0:73:3c:07:ae:d4:0c:75:fc:00:30:
6f:28:ba:27:8b:44:4f:8e:b6:b2:25:50:5f:33:1c:95:ab:d2:
a0:1a:7f:d2:68:4b:b1:6d:56:0a:1a:e6:43:75:4d:11:09:93:
11:32:00:6a:29:41:e0:9e:e7:04:77:5d:92:96:3c:b0:70:94:
f7:88:bc:e0:6f:8f:d0:49:c5:4c:c3:fa:01:da:fe:11:34:2a:
02:de:0e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:15 2025 by rpki-client