Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/aDDMo9Vj3LSI6syqna_JMnFfea4.roa
File: aDDMo9Vj3LSI6syqna_JMnFfea4.roa (raw, json)
Hash identifier: JF/mEQDnI5tJBs9HgmQNAhOTIGEX1Exk34j0hsFwgnI=
Subject key identifier: 68:30:CC:A3:D5:63:DC:B4:88:EA:CC:AA:9D:AF:C9:32:71:5F:79:AE
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018D5001ECF49CDF1385BFA8DEB3AB2A183D
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/aDDMo9Vj3LSI6syqna_JMnFfea4.roa
Signing time: Sun 28 Jan 2024 12:18:39 +0000
ROA not before: Sun 28 Jan 2024 12:18:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215638
IP address blocks: 178.248.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:50:01:ec:f4:9c:df:13:85:bf:a8:de:b3:ab:2a:18:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 28 12:18:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6830cca3d563dcb488eaccaa9dafc932715f79ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:49:97:77:52:d5:ec:2b:8f:2c:91:39:5c:41:
66:e0:16:b4:84:33:7c:95:9c:2f:e6:10:c5:32:a2:
7e:32:ef:5c:b2:4a:bc:04:f4:4f:f1:26:66:c9:f2:
83:5a:ef:56:f3:74:f2:af:e2:a6:89:dc:c5:f5:96:
ed:95:63:ac:aa:3a:1e:01:1d:a6:d4:85:d8:26:a0:
03:f0:ad:ac:4c:84:88:af:bd:a0:02:cd:55:2e:b1:
c2:96:f3:eb:29:cc:c4:a5:a1:53:f3:cb:24:65:cd:
3a:52:10:90:00:3d:df:45:ac:f7:39:73:c3:4d:30:
2d:79:07:81:a7:41:3d:01:0a:1d:f2:23:33:a8:0c:
3f:7a:13:38:ec:6c:c5:bf:58:28:f5:90:8a:16:27:
08:2b:85:ff:f5:19:94:33:0d:ac:38:6c:c6:23:0d:
7e:c8:17:26:57:a2:80:8c:10:86:df:87:77:0d:ae:
74:2f:79:64:4c:6d:53:44:2f:54:0a:12:2e:aa:b7:
59:45:d5:10:42:8a:c0:0e:8d:28:ae:52:46:71:28:
5d:7f:55:39:5c:e3:25:58:8b:be:77:97:54:df:c2:
64:e0:b7:05:92:d4:f6:05:94:46:96:b2:01:3b:d8:
4e:31:4c:92:81:80:21:73:fd:e9:2b:57:4d:bd:e9:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:30:CC:A3:D5:63:DC:B4:88:EA:CC:AA:9D:AF:C9:32:71:5F:79:AE
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/aDDMo9Vj3LSI6syqna_JMnFfea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.72.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:99:bb:f9:ab:85:4e:16:84:71:51:ed:0e:6d:0b:be:2c:29:
bb:eb:7f:9b:bc:ef:45:20:59:08:ba:38:0b:c3:16:fd:e3:bb:
d8:e5:39:97:b8:ea:e4:67:ed:75:5a:4b:82:dd:9e:8e:48:de:
8a:de:35:7f:a3:21:5d:04:a9:fd:28:7e:f9:6f:1d:c5:16:54:
d6:5c:a3:ca:68:7f:33:24:05:5f:64:5d:2a:8d:c2:97:76:e5:
d8:bc:12:1b:ee:6a:2a:98:ce:dc:43:09:ec:e6:88:ce:54:51:
2d:fc:a1:38:85:8a:77:0b:3f:e2:53:53:72:18:4f:25:ea:ec:
8a:2d:59:25:27:36:f5:74:86:27:6c:13:2d:8c:6f:ea:b3:4f:
01:dd:96:bc:69:4c:85:00:e5:38:19:0e:82:a0:a8:f7:ef:3d:
e1:6f:69:60:dd:9d:ed:7f:b6:4d:96:a3:5b:4c:0c:ce:be:e4:
e9:d0:83:aa:08:e3:35:01:d4:73:b0:97:df:f5:b1:d1:37:46:
76:87:8a:04:b6:d6:11:3a:f5:ad:4d:7f:fa:57:bf:d1:44:52:
0f:f5:b8:67:03:9f:ef:d7:d7:33:95:44:88:a4:ab:f0:87:97:
fb:00:a8:47:e8:ee:bb:39:c2:1d:c3:13:27:28:2e:41:16:7b:
9b:5e:d2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:39 2025 by rpki-client