Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/AUB3zmLND3gK2KxotU4TUBiHLM8.roa
File: AUB3zmLND3gK2KxotU4TUBiHLM8.roa (raw, json)
Hash identifier: WxACZ3OpkzIHI7H+/cnzpXFeNKLcjDGdVXK8tYdnW+I=
Subject key identifier: 01:40:77:CE:62:CD:0F:78:0A:D8:AC:68:B5:4E:13:50:18:87:2C:CF
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018A5C7017C532BE99837A90F48120F25FF4
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/AUB3zmLND3gK2KxotU4TUBiHLM8.roa
Signing time: Sun 03 Sep 2023 19:06:04 +0000
ROA not before: Sun 03 Sep 2023 19:06:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50434
IP address blocks: 178.248.77.0/24 maxlen: 24
178.248.74.0/24 maxlen: 24
178.248.72.0/22 maxlen: 22
178.248.78.0/24 maxlen: 24
195.42.112.0/24 maxlen: 24
195.42.113.0/24 maxlen: 24
193.169.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5c:70:17:c5:32:be:99:83:7a:90:f4:81:20:f2:5f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Sep 3 19:06:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=014077ce62cd0f780ad8ac68b54e135018872ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c3:13:42:d9:b1:ab:17:92:a3:3e:b5:97:0e:
94:d7:a6:e8:77:81:19:d3:de:2b:fa:9b:9a:f9:c9:
72:b5:14:fc:3f:d7:fc:ff:5d:f7:2b:ca:ad:89:6d:
43:d0:f9:88:bd:cb:94:ac:55:b3:33:be:88:25:7d:
0c:b6:96:31:d3:46:40:9b:b9:b3:58:8f:2e:ce:ea:
a8:35:75:42:cd:2f:81:01:fa:e0:17:4c:ee:b8:54:
be:11:80:62:0d:5b:67:10:a0:07:9b:c1:0c:c3:79:
03:3b:bf:39:2a:fa:82:fe:77:14:4a:87:43:aa:66:
45:26:4c:35:68:49:48:94:ae:2d:ab:1e:fe:4f:c7:
c0:7f:02:a4:3a:de:52:88:f2:d2:c2:ce:06:08:b3:
b7:1d:f6:fa:7f:56:2d:b7:04:8b:47:08:f7:b7:d3:
9f:6c:2c:a2:a5:f9:06:3b:95:21:36:83:82:f5:87:
c9:44:6a:6a:49:91:2e:21:e1:c7:7c:32:ac:70:14:
5a:f5:23:af:2b:d1:6e:5d:eb:59:2e:ce:5c:94:ec:
cc:3f:07:4e:d0:a0:d9:bb:0a:7e:c4:25:13:39:33:
f3:9b:6c:2d:e6:03:42:fc:55:22:32:2c:6c:8e:f1:
40:8a:cb:0e:bf:98:68:a5:5e:b2:5c:44:c5:5f:2c:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:40:77:CE:62:CD:0F:78:0A:D8:AC:68:B5:4E:13:50:18:87:2C:CF
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/AUB3zmLND3gK2KxotU4TUBiHLM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.72.0/22
178.248.77.0-178.248.78.255
193.169.78.0/23
195.42.112.0/23
Signature Algorithm: sha256WithRSAEncryption
67:97:6f:24:ac:8f:99:b8:1c:3e:a7:bd:99:86:81:ea:08:71:
c6:e6:74:e8:fc:d1:69:2d:74:1f:fb:da:76:3f:03:dc:56:2c:
9e:ff:f6:81:4d:36:33:73:f6:93:50:3f:7d:c8:ef:58:48:c2:
53:9b:c3:ba:13:af:73:9a:9a:4e:c7:27:d8:ae:6d:72:93:f5:
fe:c7:0b:08:e9:e2:7b:55:13:b6:5f:90:c8:99:63:ee:80:56:
2c:8d:c7:3a:30:21:81:09:fb:ef:93:b9:30:57:d9:c5:6a:61:
31:53:39:96:9f:86:06:ec:07:8a:c5:57:47:70:05:94:17:f4:
11:f7:d6:fb:73:fe:e1:35:ec:ca:11:8b:1c:94:be:e2:3b:c5:
e5:d0:ba:90:af:72:1a:14:37:b0:38:47:90:68:31:3b:ea:9b:
1f:65:4d:e3:f8:fc:54:68:6f:c8:e6:b7:6e:31:ea:61:83:33:
c4:57:5f:3c:4e:b1:f8:2d:19:cf:1a:33:b5:58:a8:35:93:a2:
86:4c:6a:c0:fb:1d:ff:4c:1b:ab:cf:f0:6a:6a:b4:99:48:43:
41:2d:fe:e4:33:ac:23:40:2a:11:9d:57:fa:8e:9f:ac:53:70:
17:89:29:fa:33:d9:1c:d1:ee:0b:70:25:9c:93:72:da:2a:0a:
f9:88:0f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:36 2025 by rpki-client