Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/EQJks9tR72b2RrSjmNO_DamjTqk.roa
File: EQJks9tR72b2RrSjmNO_DamjTqk.roa (raw, json)
Hash identifier: kE4SDN8OmjbF/VelJLDWeOeKgMmUAgJXPb6ZJDUqfVk=
Subject key identifier: 11:02:64:B3:DB:51:EF:66:F6:46:B4:A3:98:D3:BF:0D:A9:A3:4E:A9
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 0193CB55DE4A0E447549C4EFC1B973F876C8
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/EQJks9tR72b2RrSjmNO_DamjTqk.roa
Signing time: Sun 15 Dec 2024 17:20:22 +0000
ROA not before: Sun 15 Dec 2024 17:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214828
IP address blocks: 178.248.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cb:55:de:4a:0e:44:75:49:c4:ef:c1:b9:73:f8:76:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Dec 15 17:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=110264b3db51ef66f646b4a398d3bf0da9a34ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:fa:c2:ab:9d:e7:c9:6b:45:88:a1:f6:6b:
aa:00:7f:16:10:cb:01:70:3f:80:0b:ca:ea:4a:5c:
59:ca:81:2a:c8:0f:87:f3:5f:2a:86:cd:33:39:57:
f7:0e:b2:32:b6:c8:15:81:d5:df:3b:c2:3b:3c:e4:
c5:d3:36:49:c8:ed:81:0c:8c:ce:0e:b7:a3:c7:9f:
53:1e:6e:a5:11:81:6f:ac:e5:a7:ca:53:e1:2a:39:
db:06:63:30:a1:d3:91:c4:b8:01:9a:ba:26:b8:d3:
9b:4a:d5:0b:2a:ca:fc:72:33:b2:7d:4b:87:db:17:
92:a1:86:22:4f:da:d5:ac:1d:06:20:6f:b0:a3:35:
7f:32:f6:fb:fa:ca:2e:00:f0:94:73:70:81:0d:a7:
dd:6d:9f:f7:e4:61:0d:8e:2c:11:9d:ec:39:4d:ba:
bf:e2:67:f8:8c:da:81:72:87:56:2c:9e:90:34:3a:
87:77:80:5b:a9:69:b5:b5:04:e0:a1:e3:bf:73:2f:
c6:aa:cd:ac:81:85:f1:39:e2:8d:28:63:19:06:66:
a8:58:52:6d:2e:b8:c0:f9:cc:a6:95:e5:a5:5e:c4:
3a:19:2d:57:20:47:6c:80:2d:f3:c5:65:96:9a:e9:
cf:d7:f5:db:66:a9:e0:34:93:88:93:17:cb:21:aa:
3c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:02:64:B3:DB:51:EF:66:F6:46:B4:A3:98:D3:BF:0D:A9:A3:4E:A9
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/EQJks9tR72b2RrSjmNO_DamjTqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.77.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:57:c7:2a:4b:d2:18:f6:0d:3c:28:e6:74:73:31:dc:d5:72:
72:2b:7f:f6:1a:51:b3:a8:eb:c1:a3:e9:08:9b:35:95:99:05:
bc:34:e0:a8:cf:74:c1:60:4c:eb:ad:1b:f1:a2:1a:a4:09:9f:
d2:cd:6d:91:e4:98:ec:61:41:b7:b4:af:aa:d1:a2:79:a9:7b:
ee:1d:bb:c8:6f:af:82:56:0c:d3:80:ab:1c:0b:aa:ee:05:2e:
5e:1f:80:d4:12:e3:fb:0a:98:ec:22:d5:d8:c7:ee:68:e4:35:
31:af:f8:73:90:9c:c4:1f:f9:37:41:96:d3:89:88:06:15:b9:
36:72:b9:e6:17:ff:65:c5:69:80:8c:34:a0:18:46:f9:78:79:
57:ac:65:cf:84:65:71:3c:09:f5:7d:5e:c9:36:85:ce:c3:7b:
42:b6:9b:88:44:6d:65:41:72:79:06:66:e1:50:3b:21:0a:ce:
4f:b0:3f:a8:eb:c0:69:fc:7c:fe:99:e2:1b:47:ce:c2:c6:61:
1f:7f:3f:b7:6d:00:a3:92:b6:90:80:f9:ef:a6:5a:f0:2f:11:
58:45:53:36:74:fc:4d:b7:a7:43:f0:98:17:71:b4:3c:0e:3f:
03:fa:7d:1b:59:7e:5c:e9:5b:a8:ce:36:61:1e:b7:b3:0c:da:
51:e3:d5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:32 2025 by rpki-client