Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/DkTJIonmp_suJwb5pqJP6P0-zbo.roa
File: DkTJIonmp_suJwb5pqJP6P0-zbo.roa (raw, json)
Hash identifier: humphMUmLTyeM2PQZqfW0pcKzMqGvBY0N6u8S4xSyMI=
Subject key identifier: 0E:44:C9:22:89:E6:A7:FB:2E:27:06:F9:A6:A2:4F:E8:FD:3E:CD:BA
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 0193920F819B59244CE8DE73451E02AE28C1
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/DkTJIonmp_suJwb5pqJP6P0-zbo.roa
Signing time: Wed 04 Dec 2024 14:25:09 +0000
ROA not before: Wed 04 Dec 2024 14:25:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135392
IP address blocks: 178.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:92:0f:81:9b:59:24:4c:e8:de:73:45:1e:02:ae:28:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Dec 4 14:25:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e44c92289e6a7fb2e2706f9a6a24fe8fd3ecdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ec:ad:34:13:9c:7a:5f:24:b6:25:34:25:2f:
d1:c3:47:62:c3:17:5e:7c:60:93:6a:1c:eb:4d:35:
63:f8:46:e8:a1:14:97:97:33:36:bd:f6:96:30:8e:
b6:b2:fe:8c:d7:59:5a:dc:9d:1b:f8:11:23:d2:90:
f7:70:9b:51:95:83:29:d7:fa:1c:07:ae:a4:1e:61:
42:c5:c9:4d:db:1f:e9:31:38:68:54:47:b6:5a:a8:
19:0a:73:80:03:79:89:98:ab:23:4f:6f:4a:e1:f2:
fe:7d:0f:80:0e:7a:c4:eb:a5:73:73:1f:56:d8:84:
f4:62:ab:a2:b6:2a:5d:44:9b:8d:3d:bd:46:67:ce:
82:46:09:de:2c:e2:c3:23:64:53:8e:e6:2a:cd:a2:
88:90:6d:89:f1:e6:4a:20:b3:36:05:2d:61:0b:50:
b5:6f:a0:6f:16:5b:09:49:2c:23:3d:b3:3d:92:c4:
67:3a:18:c5:84:95:0c:25:bc:97:5b:05:b3:fe:5c:
1c:a2:94:d1:fd:fb:95:df:17:06:19:03:0c:99:48:
06:3e:41:0f:b5:5c:bd:af:9c:bf:89:ed:14:21:43:
56:0f:22:8d:07:64:2b:bc:91:c1:00:67:61:a5:a0:
2c:78:14:eb:43:72:15:8a:8d:f4:21:af:8c:9a:a8:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:C9:22:89:E6:A7:FB:2E:27:06:F9:A6:A2:4F:E8:FD:3E:CD:BA
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/DkTJIonmp_suJwb5pqJP6P0-zbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.79.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:08:e2:c8:88:fa:a6:c6:3f:59:71:89:21:a9:c4:dd:78:9e:
53:70:4b:5e:22:c9:80:27:78:5d:e3:f1:40:44:26:fa:fb:de:
ab:9a:e4:36:3d:7f:a8:e4:fd:02:e5:d8:72:0a:0a:33:27:c4:
b2:1e:29:3d:ac:35:b2:5b:b9:ad:bb:bf:1c:81:ad:e3:66:d7:
ca:67:ab:9b:01:cc:98:90:cd:1c:8a:74:ff:24:b6:1c:23:45:
f6:3b:cf:04:2f:18:e0:05:89:9a:95:ac:91:ed:ed:c7:c0:5a:
c0:71:5f:9c:99:29:af:de:08:fa:4c:13:24:7b:ac:17:9d:17:
28:b0:e1:b0:3b:af:0f:9e:b7:c9:81:23:8e:0e:d4:20:bb:cd:
4b:dc:c0:76:ef:a0:8b:d9:d6:5f:8b:4e:13:5d:92:1e:1b:d3:
01:c8:a2:95:02:b9:58:51:f2:fb:04:72:2f:71:0b:a1:f5:3a:
77:e8:5c:4f:a2:9d:c0:5d:95:f8:71:cc:8c:04:51:7f:d6:62:
9b:1a:a3:b6:ad:2e:42:ed:26:2f:95:6f:5b:de:0c:a7:1f:12:
4b:d7:9c:a4:d4:2a:84:e0:4a:e6:e4:f4:cc:56:b4:53:89:c5:
67:0c:44:ef:9c:97:18:28:28:71:94:4e:5c:6d:ae:f7:dd:d3:
38:b4:e3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:59 2025 by rpki-client