Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/T97UX4Uq9y6N-zJZhLh7pMJEMfw.roa
File: T97UX4Uq9y6N-zJZhLh7pMJEMfw.roa (raw, json)
Hash identifier: fEIEogo6fFp1dWqGf/R1E4yooEFlCkMfaeWIpzr+n0I=
Subject key identifier: 4F:DE:D4:5F:85:2A:F7:2E:8D:FB:32:59:84:B8:7B:A4:C2:44:31:FC
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018C30EE6F1F19FB6196CF02CDEF8F1D3ABA
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/T97UX4Uq9y6N-zJZhLh7pMJEMfw.roa
Signing time: Sun 03 Dec 2023 18:26:21 +0000
ROA not before: Sun 03 Dec 2023 18:26:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 178.248.76.0/24 maxlen: 24
178.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:30:ee:6f:1f:19:fb:61:96:cf:02:cd:ef:8f:1d:3a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Dec 3 18:26:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fded45f852af72e8dfb325984b87ba4c24431fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:80:63:07:df:e8:c4:74:7a:7f:85:ae:96:
5e:fb:33:ab:51:24:8d:fd:56:9a:fb:86:b0:58:4a:
54:48:38:13:d1:cb:d3:5e:cf:84:a7:bd:00:9f:54:
3e:90:78:f8:46:3d:af:67:02:0f:60:12:86:50:20:
2c:21:b9:77:6d:73:c3:c5:df:1b:62:34:83:9e:b0:
b2:09:90:43:e2:ad:d0:55:8e:e8:5b:71:ae:c7:80:
ae:0d:de:df:aa:ee:1a:08:4f:7d:14:53:bd:f5:49:
25:6b:2b:63:a3:d8:4d:48:17:33:20:21:f2:95:72:
69:e2:30:6c:b5:44:82:87:9e:b8:97:55:b7:05:ea:
27:c7:2b:1a:ac:5e:7d:42:55:48:93:06:d7:1e:4e:
b4:3f:da:35:d9:95:ff:62:df:45:70:01:6b:d7:07:
96:b4:32:54:42:f1:37:b8:2b:3a:66:24:e8:b9:b0:
5e:9f:7f:09:4c:54:65:21:b5:ac:6e:60:06:e6:38:
45:2e:32:41:50:a8:33:8f:ee:69:82:f3:23:53:8c:
e2:00:3d:94:f6:99:85:17:13:16:42:3a:28:a8:87:
65:57:b5:a1:88:dd:85:70:2b:fe:ea:c2:61:76:2f:
49:b3:cf:59:70:86:20:ea:cc:66:16:fa:10:95:4d:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:D4:5F:85:2A:F7:2E:8D:FB:32:59:84:B8:7B:A4:C2:44:31:FC
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/T97UX4Uq9y6N-zJZhLh7pMJEMfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.76.0/24
178.248.79.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ef:33:09:98:91:ef:6c:f1:2e:31:7b:e4:af:9a:a3:d8:41:
f1:9c:32:1a:d4:07:76:f7:1d:7f:a2:d6:b4:8e:7f:94:ae:25:
2c:26:7c:15:14:c5:8b:c3:3d:8e:ca:11:9c:76:99:bc:02:40:
5d:42:75:7b:45:e6:f8:f2:0c:4f:72:dc:86:34:31:2d:1c:18:
cf:ed:6e:00:74:f7:ee:8b:45:6e:54:29:af:9c:7b:59:95:ce:
d4:16:57:7e:d6:1c:ea:3b:40:3b:b8:bf:eb:ed:ad:e4:1b:3e:
17:d7:20:5a:6d:78:4b:a7:e3:45:ac:e0:58:f3:4c:17:6c:2a:
e3:78:e4:4b:09:fa:38:2a:c3:17:61:13:8d:0b:9f:e7:9f:dc:
ff:b6:06:f9:90:53:c8:a4:e5:e2:4b:66:fd:e5:79:16:99:55:
db:23:a2:1e:78:f8:8e:70:e4:53:f0:23:24:da:d8:b1:ad:28:
3c:f4:5e:d5:2b:06:6d:1a:42:2d:a5:c3:71:ba:5d:1f:2c:b7:
36:c6:ea:71:35:00:2a:20:b6:92:7d:80:bf:7b:60:7f:1a:59:
ed:58:b5:3b:71:44:06:6b:d2:d2:d3:8b:fd:54:ad:27:08:35:
5f:c6:f7:f8:8e:f9:d5:ac:7d:fa:fc:90:39:db:3b:44:30:7b:
75:d4:49:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:40 2025 by rpki-client