Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/aSysxnkmwlKt5KafMm9eaom1Mes.roa
File: aSysxnkmwlKt5KafMm9eaom1Mes.roa (raw, json)
Hash identifier: WLfi1/mK1I3HkwHidkvn9gv6UB5TEtKdlEgaiWslQF0=
Subject key identifier: 69:2C:AC:C6:79:26:C2:52:AD:E4:A6:9F:32:6F:5E:6A:89:B5:31:EB
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 019421B24E5FA670C8474FABB2B30AB6C90C
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/aSysxnkmwlKt5KafMm9eaom1Mes.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199058
IP address blocks: 178.248.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4e:5f:a6:70:c8:47:4f:ab:b2:b3:0a:b6:c9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=692cacc67926c252ade4a69f326f5e6a89b531eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:22:0e:ae:59:60:ae:01:05:69:08:eb:8c:
bd:ce:76:33:85:3e:70:f2:ad:d8:6c:aa:54:a0:3a:
08:42:84:e8:17:2f:d0:d4:7c:c3:8f:b4:84:ed:2e:
e2:b5:6b:59:6e:80:12:2d:f3:35:69:36:96:a8:6f:
e1:29:d2:fc:f0:c2:e1:81:93:40:bc:5d:75:2d:45:
68:66:74:f4:37:98:1f:a1:11:f4:5c:94:7c:5b:bf:
b6:fb:85:b9:66:1c:22:89:d3:c3:b0:e1:d1:9b:e8:
5b:cd:97:66:ff:e8:2c:c0:bb:f8:c6:2e:ba:d6:06:
16:48:60:fb:22:d2:21:60:16:af:8c:7c:e8:5d:91:
eb:17:07:99:de:7a:52:60:e6:05:7d:22:30:3b:c3:
fc:b6:4c:ef:35:f4:ce:ce:db:e3:2c:f9:b7:a3:ac:
c8:cc:19:b1:3c:90:fa:01:f6:9a:3b:09:ba:7e:ba:
ae:89:a3:25:94:6d:43:63:f4:35:5b:64:dc:4f:8f:
52:fd:a8:ad:18:cd:33:72:ce:06:bd:9b:12:46:ff:
cc:97:31:b5:ce:a1:81:ac:e2:89:98:a7:d2:2c:b6:
48:72:5a:b8:95:25:4b:d0:03:b9:99:43:fc:a0:14:
32:0f:c6:0a:72:2b:61:ae:0b:42:87:55:93:4b:e9:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2C:AC:C6:79:26:C2:52:AD:E4:A6:9F:32:6F:5E:6A:89:B5:31:EB
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/aSysxnkmwlKt5KafMm9eaom1Mes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:58:69:52:ff:a2:eb:0e:9c:e9:cf:50:d9:13:06:2d:da:04:
6e:ae:aa:69:c3:c4:70:a8:6c:a7:38:91:d6:6e:50:80:b8:48:
fb:5e:25:b7:42:68:79:69:9d:1a:ab:e2:cc:f3:13:3e:46:61:
ca:25:df:9f:1c:01:8a:48:c2:2f:6f:c6:44:c1:90:03:43:4a:
0d:e9:43:4b:f7:c1:2a:53:bc:bc:33:04:85:8a:aa:2b:d3:3f:
de:ba:b7:a2:a0:ec:bb:a6:2a:7b:fa:f1:5a:28:f5:42:4a:cf:
cc:61:a6:fa:91:7a:34:9d:a4:0f:5e:91:96:dd:c0:91:03:4f:
62:bc:90:a3:a8:7d:60:55:a4:7f:07:24:1b:58:a3:cd:61:54:
81:cc:fd:f0:e4:65:01:cd:51:25:59:ca:1e:1f:7f:4b:e3:6f:
2f:58:8e:1d:dc:22:c0:92:56:02:2b:49:ca:d9:bc:f2:53:cd:
ec:e0:16:f6:03:0b:87:c0:e3:d0:53:ea:e4:07:33:51:7b:78:
36:59:b9:8b:cd:ef:1e:3c:d1:9f:fd:db:da:24:43:c5:a1:3d:
57:dd:87:7d:10:59:51:ec:f5:71:07:44:fd:cd:c3:9f:c0:d4:
b5:8b:eb:79:76:7c:8e:d2:4b:25:d4:13:6c:f3:70:df:34:e3:
9b:6e:1d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:04 2025 by rpki-client