Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/NQtR5Q1ibLV46cPQXZJEkd8WR_o.roa
File: NQtR5Q1ibLV46cPQXZJEkd8WR_o.roa (raw, json)
Hash identifier: c2ltDrmYc4FTFufmILgbzLSZyB7kqFCNBGWZ/bH3ueU=
Subject key identifier: 35:0B:51:E5:0D:62:6C:B5:78:E9:C3:D0:5D:92:44:91:DF:16:47:FA
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 0192396367025BB6B9562AC5685B5D0FEDBE
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/NQtR5Q1ibLV46cPQXZJEkd8WR_o.roa
Signing time: Sat 28 Sep 2024 16:07:48 +0000
ROA not before: Sat 28 Sep 2024 16:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 178.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:63:67:02:5b:b6:b9:56:2a:c5:68:5b:5d:0f:ed:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Sep 28 16:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=350b51e50d626cb578e9c3d05d924491df1647fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:b8:bb:27:a5:b8:7f:df:ab:fa:4d:42:83:
32:19:99:fa:fe:a6:4d:e0:16:46:39:77:63:5f:d2:
29:cc:3f:c5:b0:5b:2b:5f:18:20:bf:ac:4f:e0:58:
b5:69:92:11:13:73:32:15:d0:26:cf:41:37:71:14:
62:c0:fd:d8:27:33:39:18:17:12:7a:ab:36:27:35:
41:4c:c1:70:45:11:e1:bf:3c:4f:64:85:fa:c6:ff:
17:46:d5:8b:50:7a:e3:42:48:c3:7a:a9:a9:5a:9c:
84:27:e2:93:1d:2c:50:f1:d9:b3:2c:72:1d:60:47:
bd:9d:cd:94:3d:e7:68:54:7e:6e:2d:5b:91:32:8d:
e3:ea:a4:d7:13:75:6d:26:8f:65:cb:7e:10:3e:13:
4c:89:bb:a1:8a:4c:5c:75:2f:15:15:b2:e6:66:06:
4d:1d:6b:4c:88:22:49:09:ab:09:5f:e1:10:66:1f:
e9:01:e3:0e:d1:24:a0:fc:00:e5:c8:b2:ae:31:07:
94:e0:7c:62:c2:b7:bf:7b:51:29:f0:16:92:97:dd:
79:53:95:7b:38:ac:2c:f5:b2:3b:d5:1c:1c:df:c5:
b8:e1:6f:b2:8e:92:1d:f2:f6:6c:7f:6b:56:6e:82:
5d:76:c1:48:65:1b:96:86:c6:40:8d:8d:7f:9b:d9:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0B:51:E5:0D:62:6C:B5:78:E9:C3:D0:5D:92:44:91:DF:16:47:FA
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/NQtR5Q1ibLV46cPQXZJEkd8WR_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:12:3f:3f:54:9e:c5:90:4f:2b:64:de:f1:02:5d:f9:a7:50:
40:6c:9d:e6:00:7e:0a:7d:10:f1:f3:57:a1:af:70:7a:84:df:
c7:fa:a6:29:87:96:5f:2e:56:7d:3c:ec:5f:be:ea:f8:c6:47:
2e:44:40:8d:e2:74:46:70:f2:7b:7b:1d:be:5a:43:f3:e3:7c:
f6:38:34:8e:74:8b:c9:fb:ca:43:db:30:ac:29:c1:5e:97:be:
db:82:18:4a:df:4a:3f:2b:3d:63:8d:ce:79:48:2e:c9:36:a4:
0e:16:c0:3f:43:2a:8a:e1:b8:d0:36:a5:f7:8f:90:8a:47:69:
57:8a:ad:ff:17:bd:ca:8b:2a:b5:3c:e1:8b:4d:c0:88:e1:77:
d5:23:fd:88:a6:f7:f9:67:68:37:e6:b2:6b:58:d1:d0:1d:e3:
8f:6e:83:4a:f2:f5:22:f7:4c:c9:2b:b5:33:56:35:5c:54:0e:
9b:79:6c:f7:61:bb:9b:5e:19:d1:3c:47:53:df:81:f7:00:66:
0d:1d:e3:b8:81:37:12:36:c4:71:65:6d:e2:73:3b:c5:21:ef:
0c:2f:3a:d2:3e:6d:56:45:d6:58:a8:91:c9:61:99:83:9a:80:
fc:99:d4:12:1d:c8:f5:1c:8e:b4:fb:7e:00:70:7f:ea:1c:d9:
53:ce:6e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:41 2025 by rpki-client