Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/Vx6H7RIXtk4DmonUsVIUeXASDLI.roa
File: Vx6H7RIXtk4DmonUsVIUeXASDLI.roa (raw, json)
Hash identifier: KTrfZ6M84lOW1V7PKFR4/x/7iesu5y5hVs/v9BRx8Ls=
Subject key identifier: 57:1E:87:ED:12:17:B6:4E:03:9A:89:D4:B1:52:14:79:70:12:0C:B2
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018CC6B9243E7C3E6A511CB8C20B9DAF865A
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/Vx6H7RIXtk4DmonUsVIUeXASDLI.roa
Signing time: Mon 01 Jan 2024 20:31:11 +0000
ROA not before: Mon 01 Jan 2024 20:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 178.248.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:24:3e:7c:3e:6a:51:1c:b8:c2:0b:9d:af:86:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=571e87ed1217b64e039a89d4b152147970120cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:74:c3:3c:9e:90:a2:9b:fc:28:0b:df:28:
38:57:13:42:22:32:4a:26:7e:24:c9:47:dc:80:a5:
97:61:59:8e:14:d0:11:31:c9:18:f9:32:5e:54:0b:
87:5e:0b:13:90:05:89:66:7c:d2:ac:40:49:40:dc:
b6:8c:2c:2f:2f:14:b7:53:ab:c7:7f:07:4f:6d:b5:
db:1d:8b:78:2d:3a:55:48:b0:dc:80:80:30:da:fb:
9c:56:70:6f:a7:33:0c:03:6f:8d:0b:3d:80:f6:7a:
9b:d3:7e:b0:dd:a1:ef:d7:2b:df:41:64:05:01:78:
8a:5f:60:aa:f3:8d:8b:40:7d:b9:25:c1:01:eb:d8:
66:99:36:a3:70:a8:cd:5a:75:f1:77:49:5f:74:46:
ee:ac:a6:6a:cf:5f:86:5b:47:69:d9:d6:47:f6:41:
ce:ac:43:19:fd:d0:fd:9d:29:cc:44:06:5c:bc:30:
a3:ff:14:bd:17:c0:e3:84:d7:62:f5:6e:74:f4:38:
a3:ff:74:54:e7:95:24:2d:3b:ad:a0:d1:03:6e:56:
d7:a8:98:73:1d:cf:69:46:28:b6:2b:a9:a0:2d:be:
49:45:65:84:8e:2d:de:b2:f4:2c:b6:ef:36:44:f8:
32:bd:72:93:8a:d9:69:61:e7:40:8d:42:14:f0:b2:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1E:87:ED:12:17:B6:4E:03:9A:89:D4:B1:52:14:79:70:12:0C:B2
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/Vx6H7RIXtk4DmonUsVIUeXASDLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.77.0/24
Signature Algorithm: sha256WithRSAEncryption
29:9f:bb:8f:69:46:37:b0:0b:d3:c7:a5:03:75:11:91:9f:5f:
5e:b8:96:3e:f3:6f:e7:8e:b8:ba:a0:e7:61:88:73:96:a1:3b:
75:0c:6f:39:c1:64:bd:cd:bd:b2:8e:52:a5:7c:bc:95:71:19:
b5:68:91:17:b7:97:50:78:e6:f9:84:98:4e:ea:fd:61:35:ac:
3b:c0:7a:44:e9:79:ed:02:b8:9e:1e:8a:a4:fc:94:24:c9:c5:
d7:e5:dd:36:49:17:0d:39:0e:6e:6d:c9:8a:93:0f:5d:b1:d1:
61:0d:05:88:a9:0a:43:43:a8:0e:19:76:90:60:2d:23:8c:38:
af:9e:6d:14:e7:38:87:e0:55:b6:55:07:6e:27:4f:d1:8b:66:
62:34:04:5a:e5:7b:e9:85:2b:8f:e9:37:ea:ec:32:c8:45:7a:
39:87:24:0c:ed:1c:17:aa:d5:90:a2:37:35:60:86:03:75:bf:
f5:44:ec:c6:33:5a:23:7f:62:f0:e9:44:d3:1d:1c:0c:2c:4a:
95:17:1f:ad:ee:3d:45:9f:6d:b2:84:99:11:f7:1c:91:3e:d1:
3b:cc:a5:ee:36:66:10:68:1e:8b:27:ee:ed:0b:db:4c:09:2a:
8d:e6:60:1c:41:d1:cf:61:a2:64:1f:2f:81:a4:dd:0c:83:f3:
4a:a2:3e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:38 2025 by rpki-client