Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/M7xhXekYekq32h6GRN3su8MG6bg.roa
File: M7xhXekYekq32h6GRN3su8MG6bg.roa (raw, json)
Hash identifier: JhvsZBbSCtPK5SDbthMbXS2XgSe4bT8CxLpFjbFlBnE=
Subject key identifier: 33:BC:61:5D:E9:18:7A:4A:B7:DA:1E:86:44:DD:EC:BB:C3:06:E9:B8
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018D49CABB9AE653D8DC2FBEA620C440669A
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/M7xhXekYekq32h6GRN3su8MG6bg.roa
Signing time: Sat 27 Jan 2024 07:20:39 +0000
ROA not before: Sat 27 Jan 2024 07:20:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3214
IP address blocks: 178.248.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:49:ca:bb:9a:e6:53:d8:dc:2f:be:a6:20:c4:40:66:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 27 07:20:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33bc615de9187a4ab7da1e8644ddecbbc306e9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:77:5d:26:65:be:e3:c2:30:f2:01:68:c7:
00:8f:6f:b4:ce:23:4c:05:85:7d:81:4d:71:4c:bc:
c2:ec:36:cb:71:20:95:27:eb:b2:f8:df:35:55:94:
9b:98:67:a8:56:cb:e3:43:f8:51:14:da:14:c2:19:
13:2d:ef:2c:b2:0b:0c:ef:11:63:d9:45:f0:20:0d:
b7:e5:f0:29:66:bc:ab:87:2a:86:cf:75:70:2d:d5:
45:a8:5d:0d:36:69:da:4d:71:84:ea:37:7c:f4:fa:
4b:bd:f8:ee:49:5d:62:83:25:04:34:81:9c:42:8e:
b6:e2:6a:71:33:89:f7:0c:39:ca:d2:7c:f5:43:e7:
84:45:ae:b1:98:be:df:e0:9a:b9:16:0a:b4:b6:89:
4e:d7:1b:09:60:d0:df:29:8d:d2:f3:3f:ee:cc:10:
2a:31:26:39:9a:1f:de:b4:88:be:3e:ba:31:54:32:
5b:23:a8:8a:a0:65:13:6c:b3:c2:31:73:28:f2:9e:
25:66:2b:65:f5:b4:a5:2a:83:2f:60:5a:b8:4e:4d:
50:21:f1:0c:8e:45:9f:a0:7a:f4:53:d7:41:61:d4:
85:89:d8:4c:25:2b:4d:b6:8b:50:1d:2e:7e:27:76:
6e:8d:63:af:2a:55:aa:20:cb:4d:5d:f5:92:39:e2:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BC:61:5D:E9:18:7A:4A:B7:DA:1E:86:44:DD:EC:BB:C3:06:E9:B8
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/M7xhXekYekq32h6GRN3su8MG6bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.75.0/24
Signature Algorithm: sha256WithRSAEncryption
59:08:ff:75:19:02:68:7f:7f:1f:63:24:f4:9e:3c:6e:64:ce:
ef:c3:bb:55:9e:a8:5a:ef:61:43:1c:db:7b:fd:7f:c0:0b:cd:
d0:d9:c8:34:ad:f7:f4:26:4c:da:71:f7:96:b4:8f:46:e0:9c:
52:3b:c0:ca:f7:86:61:63:26:50:75:9e:0c:ff:fc:18:a0:02:
31:b9:48:c2:3e:0a:d4:8d:8f:9e:8e:9e:7a:86:21:39:2f:48:
1b:74:e3:9f:1b:7f:0a:d7:37:48:3d:cd:a4:a0:45:26:05:a5:
29:20:5a:40:f1:9a:73:20:81:0b:05:84:a7:2b:be:5f:12:2a:
72:53:c4:34:29:18:3d:e1:d2:07:3c:fc:dd:11:31:56:98:21:
89:84:9e:5b:d6:66:33:65:31:cb:14:e8:5c:c9:75:da:ee:5a:
e9:f9:53:c2:95:fd:1b:52:9c:b7:e8:6a:70:ac:49:0d:eb:dd:
a8:0e:fd:f1:07:2a:3e:2a:d0:f8:82:10:ab:41:8b:9c:11:87:
3d:b0:aa:8e:30:2b:5d:53:ad:cd:60:53:7f:dd:30:1b:5c:d3:
f8:2a:43:e0:3b:a6:dd:41:a1:fe:bd:3b:5f:0a:97:ab:76:d6:
f9:70:55:21:0f:b4:5f:f2:c1:21:3a:21:87:69:f8:20:44:13:
c3:07:34:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:40 2025 by rpki-client