Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/OItafVoscno7FuyNNvGBp-DW6j0.roa
File: OItafVoscno7FuyNNvGBp-DW6j0.roa (raw, json)
Hash identifier: GX87BGesq0ZALsrb7s01c+j4Bu2tQMGcbQCDBFji5sQ=
Subject key identifier: 38:8B:5A:7D:5A:2C:72:7A:3B:16:EC:8D:36:F1:81:A7:E0:D6:EA:3D
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 019421B24C3D71A43EA94AAB1BB1153B3328
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/OItafVoscno7FuyNNvGBp-DW6j0.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 178.248.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4c:3d:71:a4:3e:a9:4a:ab:1b:b1:15:3b:33:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=388b5a7d5a2c727a3b16ec8d36f181a7e0d6ea3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:b6:f0:53:74:93:7c:92:fe:eb:75:a5:06:
34:bc:9b:78:29:21:8c:04:9f:2a:a5:07:a2:6e:08:
a7:4b:01:b5:7c:10:d8:6d:20:fb:20:f4:30:e1:84:
1a:33:44:23:f9:01:aa:6f:6a:f3:d9:a3:1c:0c:13:
73:47:d0:e4:6e:50:9c:65:28:b2:b3:16:3c:af:23:
36:85:cd:43:01:b9:ac:29:d4:85:3e:0d:48:4c:0b:
2b:3e:c3:a8:45:04:25:d5:74:24:57:69:12:9d:7a:
cc:9b:db:8e:b1:61:58:0f:6e:af:54:68:92:1d:11:
b9:f5:eb:c4:03:e5:cc:8c:e3:33:2e:c0:56:d5:70:
6d:5e:46:37:ad:9e:a9:52:52:58:05:55:b9:c6:c4:
ba:bf:d4:4f:50:d0:46:1b:76:b7:f2:05:e3:52:19:
b6:89:73:00:32:28:bc:56:29:aa:cc:59:53:26:e3:
27:6a:5b:89:b3:c8:2b:85:d0:7f:e6:67:45:c5:56:
ef:7c:f9:61:3c:8b:04:ce:aa:8e:e6:b7:5c:fe:f0:
7d:2a:00:2b:3a:db:3e:56:84:e0:4e:73:73:d8:24:
d2:37:ad:65:e4:62:34:1f:ed:16:ce:ac:8f:ac:52:
6e:df:12:9c:d4:8b:c6:35:a9:bc:ca:e4:20:97:7d:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8B:5A:7D:5A:2C:72:7A:3B:16:EC:8D:36:F1:81:A7:E0:D6:EA:3D
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/OItafVoscno7FuyNNvGBp-DW6j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e0:3b:ef:27:bc:f8:b1:cb:06:70:ec:8f:da:a4:58:89:7d:
a1:4f:42:dc:c5:b4:4e:65:16:0c:0a:59:8c:c3:dc:04:87:ac:
c6:b3:14:33:96:df:5d:5d:2b:78:66:5e:d6:31:b2:97:82:52:
ac:86:08:0c:72:8c:73:51:34:ae:7f:95:a6:58:c3:de:c3:d2:
6d:a1:04:d5:38:d1:7d:c2:74:e3:33:2d:f9:ed:c3:63:8e:ed:
01:61:a1:ef:9a:8d:62:75:ea:6a:ef:14:93:43:7b:6e:08:b5:
2f:39:82:80:87:78:34:39:0b:fe:b9:ad:51:f8:b2:46:9f:da:
81:12:3f:5e:84:c8:f3:f5:29:25:68:76:48:e1:40:9f:36:0d:
ea:ec:99:c9:f4:3d:9d:c4:a6:f5:49:db:3a:c3:ed:67:2c:0b:
0f:cc:61:9a:da:2a:1e:00:03:f1:1d:aa:3e:fe:99:d2:83:f4:
95:7c:ae:89:ae:3d:eb:29:24:94:92:a6:e2:da:9f:6b:c8:8f:
83:d6:ab:56:45:37:c3:03:a1:48:90:03:6b:df:6f:9a:03:a0:
54:06:7d:35:b8:02:b8:3d:db:d7:58:35:db:3d:2e:a2:56:a9:
3f:e6:20:6e:55:72:f5:c4:80:3d:ac:af:50:6c:e7:b5:0c:4e:
31:99:d9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:32 2025 by rpki-client