Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/ByD92wNMYH2K1vC4VhU8FipcPYs.roa
File: ByD92wNMYH2K1vC4VhU8FipcPYs.roa (raw, json)
Hash identifier: AfRpj4Glco29lofjKViFUP7ktdlhJfgqouFBbsvskIM=
Subject key identifier: 07:20:FD:DB:03:4C:60:7D:8A:D6:F0:B8:56:15:3C:16:2A:5C:3D:8B
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018DE4B11A9F49BA6FAB180B1DDC14A7BF06
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/ByD92wNMYH2K1vC4VhU8FipcPYs.roa
Signing time: Mon 26 Feb 2024 09:13:48 +0000
ROA not before: Mon 26 Feb 2024 09:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56913
IP address blocks: 178.248.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:b1:1a:9f:49:ba:6f:ab:18:0b:1d:dc:14:a7:bf:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Feb 26 09:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0720fddb034c607d8ad6f0b856153c162a5c3d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:5a:30:94:65:fb:99:71:84:0f:ee:04:6a:
16:f5:27:8c:4c:9d:71:00:c2:bb:ef:72:59:3d:26:
cd:12:74:5d:2b:6b:e3:83:3e:5c:4e:c9:3c:d0:e5:
f5:27:93:21:63:83:51:4c:3a:5f:c6:41:5d:42:90:
63:c1:8c:2e:6e:94:71:e4:c6:71:d2:3c:85:a2:f6:
16:68:8e:d7:d3:fe:ef:3c:1f:09:fc:a5:7c:07:fc:
1c:00:54:72:74:5a:aa:c4:67:32:0b:4d:ba:f2:37:
30:50:79:df:a2:6f:cd:b5:b5:d3:f2:07:ad:22:b2:
0d:f5:67:d8:e6:3c:7f:0d:13:2d:2c:3a:cb:2c:ba:
70:5c:6d:f6:c0:11:97:61:41:c3:4e:c5:3e:1a:3c:
02:20:c2:35:09:b1:27:ed:55:35:1f:47:62:e0:96:
38:41:cf:25:d4:12:54:e0:2a:5f:5e:d2:24:bd:c0:
54:38:3f:67:62:48:98:53:ac:cf:52:f7:e4:42:c3:
95:c7:d5:bd:38:bd:f6:94:05:48:f7:d0:d2:f3:99:
83:41:c1:c5:cc:d8:43:6e:0e:c6:25:05:67:35:51:
f8:6e:59:16:9d:ee:a2:00:57:89:02:ab:28:09:41:
81:96:bc:da:92:82:3b:de:58:50:5a:17:ec:95:33:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:20:FD:DB:03:4C:60:7D:8A:D6:F0:B8:56:15:3C:16:2A:5C:3D:8B
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/ByD92wNMYH2K1vC4VhU8FipcPYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.77.0/24
Signature Algorithm: sha256WithRSAEncryption
26:79:bb:e9:04:78:53:b4:92:42:97:39:15:d1:a9:1b:56:c8:
b4:27:50:85:cc:8e:6d:be:cf:6f:f7:db:36:60:f7:ca:e5:89:
ca:20:24:ac:87:05:d4:04:2f:6a:e7:98:56:62:f3:51:95:76:
3e:b2:12:b5:1a:36:86:cf:94:35:98:f6:b3:8e:7f:b2:6b:15:
7c:d5:82:03:1e:ec:bc:a5:0e:db:10:fa:b8:b1:66:b8:db:3f:
2a:87:0e:6a:0b:72:ea:b5:06:be:da:80:ab:17:b4:0c:d4:25:
ab:3a:f9:dd:ab:6e:8b:e0:f0:43:ed:9b:80:4c:54:5f:6b:31:
5c:1d:84:8b:ea:87:dc:48:ce:74:30:63:10:22:0a:e4:96:26:
11:79:98:c5:bd:38:e8:66:c0:a2:0c:71:ba:66:ad:e9:f0:7e:
15:6b:84:63:9f:ef:62:83:7d:57:24:42:e0:3f:16:c6:d1:e1:
6e:a4:fb:29:cf:56:bc:51:93:5d:0a:bd:f9:eb:93:85:4f:f3:
a8:00:de:a3:b1:9b:a1:9c:84:5f:10:ed:4c:96:c0:f8:ea:8c:
cc:3c:0b:67:1c:1a:22:47:81:19:b3:6f:c1:fa:31:5c:de:e2:
d1:07:97:53:18:00:6d:8b:10:d9:ee:de:bf:06:ee:b0:2f:8f:
dd:6b:46:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3ksRqfSbpvqxgLHdwUp78GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOWVjZDI0ZjMyMTk4OGRlYjdjMTlkY2EwNTJhNGUzYzQ5
YjYwZWEwHhcNMjQwMjI2MDkxMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzIwZmRkYjAzNGM2MDdkOGFkNmYwYjg1NjE1M2MxNjJhNWMzZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCRaMJRl+5lxhA/uBGoW9SeMTJ1x
AMK773JZPSbNEnRdK2vjgz5cTsk80OX1J5MhY4NRTDpfxkFdQpBjwYwubpRx5MZx
0jyFovYWaI7X0/7vPB8J/KV8B/wcAFRydFqqxGcyC0268jcwUHnfom/NtbXT8get
IrIN9WfY5jx/DRMtLDrLLLpwXG32wBGXYUHDTsU+GjwCIMI1CbEn7VU1H0di4JY4
Qc8l1BJU4CpfXtIkvcBUOD9nYkiYU6zPUvfkQsOVx9W9OL32lAVI99DS85mDQcHF
zNhDbg7GJQVnNVH4blkWne6iAFeJAqsoCUGBlrzakoI73lhQWhfslTOyiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAcg/dsDTGB9itbwuFYVPBYqXD2LMB8GA1UdIwQY
MBaAFLOezSTzIZiN63wZ3KBSpOPEm2DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczU3TkpQTWhtSTNyZkJuY29GS2s0OFNiWU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMzgyNmQtNWFkYS00ZTQzLTkwODQt
MWJhNjk1ZmFlZjI1LzEvQnlEOTJ3Tk1ZSDJLMXZDNFZoVThGaXBjUFlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lMzgyNmQtNWFkYS00ZTQzLTkwODQtMWJhNjk1ZmFlZjI1
LzEvczU3TkpQTWhtSTNyZkJuY29GS2s0OFNiWU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsvhNMA0G
CSqGSIb3DQEBCwUAA4IBAQAmebvpBHhTtJJClzkV0akbVsi0J1CFzI5tvs9v99s2
YPfK5YnKICSshwXUBC9q55hWYvNRlXY+shK1GjaGz5Q1mPazjn+yaxV81YIDHuy8
pQ7bEPq4sWa42z8qhw5qC3LqtQa+2oCrF7QM1CWrOvndq26L4PBD7ZuATFRfazFc
HYSL6ofcSM50MGMQIgrkliYReZjFvTjoZsCiDHG6Zq3p8H4Va4Rjn+9ig31XJELg
PxbG0eFupPspz1a8UZNdCr3565OFT/OoAN6jsZuhnIRfEO1MlsD46ozMPAtnHBoi
R4EZs2/B+jFc3uLRB5dTGABtixDZ7t6/Bu6wL4/da0ak
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:47 2025 by rpki-client