Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/VN0k6yfEZA_YpYt2-qXzOqFy8qg.roa
File: VN0k6yfEZA_YpYt2-qXzOqFy8qg.roa (raw, json)
Hash identifier: DllKxkCiZ34U2E9u3rtpMODApu4y08IjH7rTb3huuPk=
Subject key identifier: 54:DD:24:EB:27:C4:64:0F:D8:A5:8B:76:FA:A5:F3:3A:A1:72:F2:A8
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018D32B000045BD540BDF7FFE3BD4D6F48EE
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/VN0k6yfEZA_YpYt2-qXzOqFy8qg.roa
Signing time: Mon 22 Jan 2024 19:40:11 +0000
ROA not before: Mon 22 Jan 2024 19:40:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50434
IP address blocks: 178.248.74.0/24 maxlen: 24
178.248.78.0/24 maxlen: 24
193.169.78.0/23 maxlen: 23
195.42.112.0/24 maxlen: 24
195.42.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:32:b0:00:04:5b:d5:40:bd:f7:ff:e3:bd:4d:6f:48:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 22 19:40:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54dd24eb27c4640fd8a58b76faa5f33aa172f2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:ec:27:58:85:8b:bc:a5:0b:19:47:a6:ac:
74:79:7f:ed:9d:15:46:b5:14:11:fd:cd:0c:2e:1f:
bb:58:a9:a5:e6:31:30:61:01:16:62:21:20:cb:f5:
90:60:e5:72:b1:c2:18:61:8b:18:d5:c7:d9:24:f4:
6a:6b:e0:e6:55:a9:f6:8e:e8:78:aa:1e:68:96:25:
7c:7b:ad:ff:b3:ca:44:30:08:85:7a:47:98:78:37:
ab:8f:3a:f4:02:78:fe:59:93:35:0a:fd:5e:34:38:
b3:0b:97:c9:c8:aa:7f:40:a9:d9:2e:a9:d0:22:27:
57:87:df:6e:53:71:ba:ec:54:90:e3:70:04:ce:1a:
16:46:68:ef:e6:f5:19:16:73:2e:88:38:fa:68:de:
0d:3a:57:2c:5f:7e:96:0d:48:67:de:df:1d:c0:a6:
dd:3a:f6:d4:2e:f6:15:e8:80:ae:de:b3:f4:f4:7d:
bb:81:f7:cb:39:30:54:a9:e2:3b:42:21:e0:03:8d:
4a:63:3f:b4:10:24:b0:87:c9:17:37:75:23:47:4a:
53:c8:73:5c:51:8b:a0:5f:46:20:04:57:7c:5c:45:
d5:36:c5:7f:7b:39:d4:12:bb:0c:e1:8c:2e:84:20:
c5:bb:1c:53:cc:41:6b:f5:8e:63:79:8d:e0:37:d5:
8e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DD:24:EB:27:C4:64:0F:D8:A5:8B:76:FA:A5:F3:3A:A1:72:F2:A8
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/VN0k6yfEZA_YpYt2-qXzOqFy8qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.74.0/24
178.248.78.0/24
193.169.78.0/23
195.42.112.0/23
Signature Algorithm: sha256WithRSAEncryption
88:55:4f:74:74:65:65:98:9d:0d:50:78:a7:b2:30:b3:5e:b9:
e6:de:b9:e3:4c:2c:67:2d:b0:0f:81:d6:d1:53:0e:57:3b:7d:
c9:60:fe:0b:e0:43:5e:81:5e:07:c6:2a:55:f1:87:98:03:64:
12:82:76:85:7a:9a:5c:57:40:b7:9c:db:f1:b5:04:73:cd:3e:
bd:0d:b3:e9:55:65:19:22:ad:5e:86:33:9c:33:11:10:0e:1c:
88:07:3c:1a:95:9d:68:37:1d:e1:70:78:d9:c8:91:1c:19:a3:
fc:4a:57:3b:5d:49:74:1e:0f:ea:b3:3a:d6:aa:e1:41:46:15:
f6:62:7e:fa:94:67:29:8a:73:07:6c:e3:bf:6e:93:bb:b4:29:
70:b9:54:01:a7:3d:26:7e:b8:3e:ff:a4:ca:6f:d7:25:3d:4e:
f5:b2:0a:4c:cc:d0:01:32:82:87:77:ae:e4:e8:96:e8:01:92:
b4:e4:33:33:88:06:e6:4d:93:45:d4:7f:7b:04:8b:5d:42:06:
0f:e8:47:84:35:74:c4:5e:89:5b:99:15:b5:81:dc:69:4c:43:
5d:8c:a1:cf:95:eb:21:6a:4f:28:6f:a4:71:46:89:3e:1c:de:
43:ea:9a:88:98:22:72:94:26:55:81:b1:5d:d4:ed:6f:90:3e:
1c:a9:67:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:24 2025 by rpki-client