Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/RN8zDY4s-YXMUVDyShxQjDYBvZ0.roa
File: RN8zDY4s-YXMUVDyShxQjDYBvZ0.roa (raw, json)
Hash identifier: YDyijeyoipx7xYqAFeQ2v9w3DgSWuauAUDxnvK8o1GE=
Subject key identifier: 44:DF:33:0D:8E:2C:F9:85:CC:51:50:F2:4A:1C:50:8C:36:01:BD:9D
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018C6CD71DE5BF63C75F54999EEC4A027311
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/RN8zDY4s-YXMUVDyShxQjDYBvZ0.roa
Signing time: Fri 15 Dec 2023 09:38:06 +0000
ROA not before: Fri 15 Dec 2023 09:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50434
IP address blocks: 178.248.74.0/24 maxlen: 24
178.248.72.0/22 maxlen: 22
178.248.78.0/24 maxlen: 24
195.42.112.0/24 maxlen: 24
195.42.113.0/24 maxlen: 24
193.169.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:d7:1d:e5:bf:63:c7:5f:54:99:9e:ec:4a:02:73:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Dec 15 09:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44df330d8e2cf985cc5150f24a1c508c3601bd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:ed:df:98:32:23:4e:bf:99:69:0d:8f:45:
dd:4e:d9:b7:e7:43:65:38:f5:57:ee:b1:7a:21:3e:
c9:60:8c:7d:21:9f:7d:36:72:de:b6:59:b0:49:db:
74:10:12:b6:52:1b:92:a4:7a:08:4b:32:70:36:3a:
dc:c2:b0:a8:be:4c:62:fe:2c:e2:49:0d:bc:07:f1:
fe:e6:ee:67:53:00:d6:80:9b:8d:c1:e4:14:5f:f5:
18:43:03:42:33:3f:c4:5e:04:0c:fa:74:fb:8a:17:
90:c7:17:9f:e2:2f:a2:19:ff:0a:c1:3b:0e:a4:9f:
3c:32:01:5d:bb:48:df:78:fc:c2:53:62:81:e7:12:
fa:4a:bf:be:7d:ca:38:6b:f4:ae:bd:cc:c1:46:89:
3b:9f:cc:8f:38:88:3c:15:5e:18:69:d4:7a:36:32:
98:17:a1:18:d1:8d:a6:bf:77:70:b8:92:15:fb:27:
f0:fc:4c:55:ce:e4:17:a6:26:5e:8e:da:ca:07:9b:
09:33:af:13:5b:23:3f:86:78:6e:ea:73:37:ed:1d:
49:15:f3:46:78:22:be:f0:da:7f:81:3c:24:73:94:
85:75:d9:08:c6:fc:5f:29:46:ac:a0:b0:a7:8b:07:
4b:03:85:ce:76:95:04:cd:24:51:67:eb:20:c9:a1:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DF:33:0D:8E:2C:F9:85:CC:51:50:F2:4A:1C:50:8C:36:01:BD:9D
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/RN8zDY4s-YXMUVDyShxQjDYBvZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.72.0/22
178.248.78.0/24
193.169.78.0/23
195.42.112.0/23
Signature Algorithm: sha256WithRSAEncryption
33:50:58:79:84:bb:d6:65:88:44:39:77:ac:ec:fe:5d:b9:78:
7a:d7:d8:f7:d2:5c:ef:c6:e7:d9:98:28:47:7a:9b:90:89:09:
3b:73:7c:70:78:e5:00:67:93:11:06:0b:62:a7:26:1c:7f:fe:
d1:9e:70:18:1d:20:92:10:43:b0:68:38:93:27:bd:df:94:e1:
74:dc:bf:ba:07:72:ff:cd:9d:c4:d8:57:45:97:47:51:6e:95:
df:bc:74:dd:08:25:25:fd:34:6c:5f:91:1d:a4:d4:6d:a8:5e:
7f:dd:d9:45:76:8d:29:d0:f6:36:ef:4b:34:6f:b3:67:f8:9c:
16:0e:dc:ed:cd:0e:30:f1:e0:f7:08:59:94:89:c2:7b:7e:27:
7a:3b:d0:a2:69:ce:05:7c:d8:2d:d8:d6:4c:28:19:e3:a0:77:
03:d2:61:43:70:6c:fb:bd:03:52:d6:6b:34:a7:79:d0:8f:71:
89:bb:97:15:0b:d0:d6:c8:f3:a5:c5:1a:30:95:d5:74:cb:49:
cd:19:e0:32:6f:68:e8:45:80:e2:a9:c7:0f:8d:35:7f:d7:51:
d1:b2:7d:62:65:0b:d9:54:41:da:63:bd:f1:80:c5:c2:12:49:
54:51:d3:93:8d:18:97:8e:1a:07:23:7c:74:eb:04:67:e1:ae:
25:ec:09:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:14 2025 by rpki-client