Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/IZQ_3AZedOrDWEbMR1CwgsiJeuw.roa
File: IZQ_3AZedOrDWEbMR1CwgsiJeuw.roa (raw, json)
Hash identifier: QqW2fM8R0g24d0d8Ja7MoaJ5E304Iah3PeQYG1A7qYI=
Subject key identifier: 21:94:3F:DC:06:5E:74:EA:C3:58:46:CC:47:50:B0:82:C8:89:7A:EC
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 0191A913A532C5AA8FB137651720DE2B72DB
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/IZQ_3AZedOrDWEbMR1CwgsiJeuw.roa
Signing time: Sat 31 Aug 2024 15:35:22 +0000
ROA not before: Sat 31 Aug 2024 15:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 178.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a9:13:a5:32:c5:aa:8f:b1:37:65:17:20:de:2b:72:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Aug 31 15:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21943fdc065e74eac35846cc4750b082c8897aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:23:aa:9d:78:af:62:c3:5b:f9:93:3e:d0:
e3:a0:c5:66:d5:8a:16:c4:03:4b:b6:45:e4:74:42:
a6:35:79:23:96:ed:67:6e:72:1b:9f:0f:5a:13:69:
f1:3b:d6:8c:8c:6e:99:7a:fd:8f:4c:1a:e9:de:ca:
68:95:91:5b:78:58:7d:ee:f3:b8:37:5d:ef:0c:96:
c3:d4:73:05:3c:92:d9:8c:45:63:53:cf:09:c5:d5:
f3:5f:25:fb:04:fd:90:a4:8c:c0:5b:f4:63:70:2d:
b3:9a:f4:86:5e:bf:90:03:b3:88:42:86:2c:6c:90:
86:73:49:8f:61:b0:ea:e4:57:33:57:e5:52:a2:e0:
e1:57:b8:53:cb:76:73:41:34:25:ec:f9:77:60:a9:
71:73:a8:38:4e:78:85:b0:f2:c2:2d:96:65:a0:60:
33:1b:b1:6e:90:e1:d9:bc:7f:2e:ef:8e:d1:8f:d8:
3b:c8:4d:f4:ff:02:cd:0a:69:cd:fd:7f:df:11:69:
ea:ba:07:c9:51:bb:4a:ca:96:ec:47:db:de:64:b3:
3e:30:6d:b6:3a:a9:b5:73:42:f0:e2:60:ff:cd:24:
3f:76:4b:83:35:3e:59:94:6e:29:e6:9c:9a:f3:34:
af:0b:b0:69:69:fc:23:21:64:32:4d:79:e9:62:6b:
88:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:94:3F:DC:06:5E:74:EA:C3:58:46:CC:47:50:B0:82:C8:89:7A:EC
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/IZQ_3AZedOrDWEbMR1CwgsiJeuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.79.0/24
Signature Algorithm: sha256WithRSAEncryption
77:dc:4b:1d:2f:9e:6c:49:c3:a3:ae:18:66:72:78:84:c0:2e:
94:e7:80:76:87:e2:e0:3e:e1:9d:2b:0e:4d:a7:83:aa:d6:c7:
5d:fc:ee:3a:e0:43:e0:e0:91:ac:36:1c:9f:40:34:38:2b:d5:
3c:5b:49:66:9f:92:17:bd:88:07:bc:22:90:7c:fa:71:0b:60:
1f:90:af:10:29:38:01:68:46:1d:53:5b:71:cc:8b:d6:a7:36:
1e:03:7c:f1:cc:05:2f:02:be:e9:11:56:db:50:ae:92:74:a3:
15:73:bd:5d:ac:60:27:4e:cf:6f:ea:a2:72:19:96:94:1b:0a:
80:18:a3:dc:dc:f4:76:91:db:03:81:b5:e1:55:9f:c6:a5:d9:
ab:1b:35:af:21:2f:e3:ef:73:19:d7:bc:a8:75:64:e3:6d:e0:
c4:2a:0b:8c:0d:b1:82:36:64:c3:2f:6d:97:33:c0:2e:6e:30:
7a:c7:09:6c:53:e0:a0:70:d9:f2:51:5f:30:8a:92:cc:ab:0c:
4a:69:df:b5:20:5c:7e:4d:3d:1e:96:d7:ba:91:00:22:2e:e4:
34:42:fe:25:c8:40:ae:9c:c5:29:23:09:69:74:ae:6b:fa:1d:
33:f2:79:72:b5:6f:ac:49:82:61:e6:1d:f6:ec:8c:65:38:fa:
d1:d7:9c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:10 2025 by rpki-client