Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/E-_zcUpN6FEXh2wThdAinsY3zEc.roa
File: E-_zcUpN6FEXh2wThdAinsY3zEc.roa (raw, json)
Hash identifier: oaMug7l00YTehNUghQKGYFuC9RliwtRY3CaK/wKr/Qk=
Subject key identifier: 13:EF:F3:71:4A:4D:E8:51:17:87:6C:13:85:D0:22:9E:C6:37:CC:47
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018CC6B924EE7877B1594F1C1EE979D6D4C4
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/E-_zcUpN6FEXh2wThdAinsY3zEc.roa
Signing time: Mon 01 Jan 2024 20:31:11 +0000
ROA not before: Mon 01 Jan 2024 20:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24768
IP address blocks: 178.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:24:ee:78:77:b1:59:4f:1c:1e:e9:79:d6:d4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13eff3714a4de85117876c1385d0229ec637cc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:8c:f7:98:07:f8:c4:1d:06:a2:2e:2c:6f:
0e:aa:45:8c:b1:bb:cf:2f:95:ae:a9:c9:14:3a:13:
de:5a:e8:40:a5:8b:76:b8:eb:de:54:cb:2f:98:7e:
38:4c:2e:b3:0a:d8:f9:83:a2:7d:7f:09:00:e8:03:
a5:39:79:fb:83:33:f8:2f:a5:32:80:93:32:fe:28:
d2:35:26:41:63:48:5d:81:3d:47:f7:fe:f2:58:4b:
bb:9d:11:dc:65:e0:88:c1:3d:ae:80:4c:9b:dd:26:
f7:b7:cc:02:a4:16:51:14:49:c4:58:c0:d7:ed:0a:
c4:1d:12:a3:04:9b:bd:3c:7a:24:46:3b:b5:d3:e3:
12:f4:93:48:89:0b:c9:f7:d5:2f:10:c2:b7:78:3a:
7a:a1:91:d7:15:df:99:c7:7a:8a:94:21:52:f2:81:
9f:78:f5:9d:76:02:b9:73:cc:39:40:ee:a3:1f:33:
32:a4:ef:8f:db:e5:b8:55:6d:95:d6:b6:d5:f7:fe:
ce:75:93:73:02:04:4b:3d:a6:7c:76:ec:7f:8e:b7:
46:d3:5a:14:b2:e9:61:5d:b7:83:bf:18:50:be:a8:
7f:5d:1e:1f:b9:9d:41:d8:ec:8a:91:a7:66:3c:2f:
75:b8:50:57:a6:b5:27:ed:cd:d1:01:b1:e3:b5:cd:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EF:F3:71:4A:4D:E8:51:17:87:6C:13:85:D0:22:9E:C6:37:CC:47
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/E-_zcUpN6FEXh2wThdAinsY3zEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.79.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2b:5c:ca:68:0d:ad:d5:a4:80:21:83:27:1b:09:97:ed:23:
19:50:6a:f3:ef:2a:82:ce:a5:a4:9c:f7:5d:77:5d:f7:92:e1:
ae:91:ae:ee:de:fe:60:6d:00:a0:32:c7:49:84:a8:97:2a:95:
ea:a9:ac:54:6d:61:b3:5d:55:ff:b5:74:63:25:b4:3a:f2:c7:
9b:bc:d7:2a:41:9d:36:f4:24:71:7a:5e:41:0b:13:ae:a2:f8:
0b:40:22:8b:45:ce:b9:b4:6f:6c:6f:81:71:e5:a5:a2:44:9b:
8e:a5:55:31:a9:85:7e:13:cf:64:ff:d8:eb:1f:52:45:2e:b2:
88:73:91:f4:d3:6a:cc:5e:48:c1:6d:56:3f:7c:e0:a2:57:bb:
93:ce:20:f7:9e:c9:88:d8:42:cf:f8:e5:19:0a:2a:77:7c:2a:
b5:7e:81:48:03:e9:17:1e:34:66:4e:9a:e8:48:53:fe:34:60:
40:99:62:33:90:a1:4b:b7:e7:57:6a:4c:ef:a3:c1:f0:c4:fd:
c9:49:e1:f5:ba:ad:bb:a1:99:c1:42:d9:0a:2c:59:fe:52:78:
9d:aa:63:bb:d5:3f:7c:64:68:37:29:2b:99:89:55:96:53:2e:
3b:0b:1a:fd:e5:4b:a9:a6:20:fc:c9:ac:cc:57:92:b7:e3:73:
70:f2:4e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:12 2025 by rpki-client