Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/cqbwQE3Oh6Gy7XrxR3mcWQgejWk.roa
File: cqbwQE3Oh6Gy7XrxR3mcWQgejWk.roa (raw, json)
Hash identifier: nP2msMsxUuritQR66V+/akcyjt5VseRUQxGcu5X4pMU=
Subject key identifier: 72:A6:F0:40:4D:CE:87:A1:B2:ED:7A:F1:47:79:9C:59:08:1E:8D:69
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018C62AFF07475D2C70635C0A410250329BB
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/cqbwQE3Oh6Gy7XrxR3mcWQgejWk.roa
Signing time: Wed 13 Dec 2023 10:19:06 +0000
ROA not before: Wed 13 Dec 2023 10:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27884
IP address blocks: 178.248.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:af:f0:74:75:d2:c7:06:35:c0:a4:10:25:03:29:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Dec 13 10:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72a6f0404dce87a1b2ed7af147799c59081e8d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:18:ad:83:fe:73:10:09:55:f1:96:74:9e:
26:b7:08:66:20:05:4d:bb:20:4c:fd:f5:6f:d9:c7:
d3:4a:12:1c:c5:2b:3c:00:c7:2d:76:5b:27:9d:fe:
18:82:43:91:8d:c0:50:b8:01:82:d8:96:ff:c7:c9:
d5:9d:88:d2:a7:66:8f:46:95:2b:92:93:62:65:91:
d3:34:2a:91:05:53:0a:a0:e2:1d:9a:2a:d3:02:3d:
0a:94:76:96:aa:34:34:fe:5b:ee:2d:3a:1b:cf:77:
92:f0:31:35:ba:78:92:2f:c8:ae:aa:be:2d:29:dc:
8c:01:a9:1e:ca:88:67:12:4c:c1:68:14:75:4a:42:
cb:a5:0c:33:cd:2b:b7:32:cc:3e:19:5c:52:1a:29:
83:79:e2:eb:0f:e6:33:63:cf:1c:d8:36:f4:41:cf:
ef:1e:e4:3f:4e:24:2b:0e:5a:8b:cc:3a:9f:69:50:
ec:c6:fe:5e:92:30:2b:b8:a9:8d:8c:e6:32:ab:32:
f9:40:f0:34:d9:57:56:f1:51:2d:46:54:94:ee:44:
fa:78:93:a0:06:1c:94:49:1f:84:69:50:89:6e:56:
25:45:9d:33:6c:7f:9b:67:69:d3:5f:82:f4:d9:63:
21:da:2d:16:5d:31:71:2f:90:b1:6e:7f:56:fc:83:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A6:F0:40:4D:CE:87:A1:B2:ED:7A:F1:47:79:9C:59:08:1E:8D:69
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/cqbwQE3Oh6Gy7XrxR3mcWQgejWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
57:66:e5:24:80:d4:bd:d6:1a:cf:bb:81:e4:98:d4:ab:cc:d3:
54:43:09:cf:61:81:7f:a8:ef:53:b5:18:7c:86:cb:17:94:73:
22:5f:b6:2c:1d:7a:91:5f:bc:2f:a9:23:d4:8f:b4:9b:58:86:
dd:ba:4b:71:78:16:df:d9:58:4f:6d:fa:76:75:dc:17:f9:b4:
0b:b3:ab:cd:04:c2:51:ed:04:82:c4:58:bd:ad:d4:91:88:ac:
40:5e:c5:60:8e:82:ea:b5:5f:6c:7f:02:69:c0:1a:8a:4e:b2:
09:12:71:f0:f9:ba:94:b7:6a:b6:a0:49:7d:38:07:0e:92:93:
03:68:4e:62:3c:3a:f3:de:cb:5e:fa:ed:5c:44:9f:10:f8:2e:
8e:00:a7:bc:bd:05:83:59:ca:73:a0:b6:b4:c3:56:50:87:b0:
b4:ce:46:15:fa:5d:b5:2c:3d:3f:89:e5:91:79:c2:58:5d:50:
41:0d:02:18:51:c1:1a:da:63:68:58:4b:87:fc:50:be:e0:93:
c1:b7:cc:bc:a9:a5:d8:30:96:b2:7d:9b:62:94:0d:86:73:0d:
1f:87:fb:48:c8:1c:f2:58:e2:a2:7b:96:1a:4a:33:4f:fc:48:
77:3d:dd:43:7f:dd:1e:75:45:03:7a:54:95:69:32:c8:ea:a6:
9e:a0:c4:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxir/B0ddLHBjXApBAlAym7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOWVjZDI0ZjMyMTk4OGRlYjdjMTlkY2EwNTJhNGUzYzQ5
YjYwZWEwHhcNMjMxMjEzMTAxOTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmE2ZjA0MDRkY2U4N2ExYjJlZDdhZjE0Nzc5OWM1OTA4MWU4ZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlAYrYP+cxAJVfGWdJ4mtwhmIAVN
uyBM/fVv2cfTShIcxSs8AMctdlsnnf4YgkORjcBQuAGC2Jb/x8nVnYjSp2aPRpUr
kpNiZZHTNCqRBVMKoOIdmirTAj0KlHaWqjQ0/lvuLTobz3eS8DE1uniSL8iuqr4t
KdyMAakeyohnEkzBaBR1SkLLpQwzzSu3Msw+GVxSGimDeeLrD+YzY88c2Db0Qc/v
HuQ/TiQrDlqLzDqfaVDsxv5ekjAruKmNjOYyqzL5QPA02VdW8VEtRlSU7kT6eJOg
BhyUSR+EaVCJblYlRZ0zbH+bZ2nTX4L02WMh2i0WXTFxL5Cxbn9W/IObSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHKm8EBNzoehsu168Ud5nFkIHo1pMB8GA1UdIwQY
MBaAFLOezSTzIZiN63wZ3KBSpOPEm2DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczU3TkpQTWhtSTNyZkJuY29GS2s0OFNiWU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMzgyNmQtNWFkYS00ZTQzLTkwODQt
MWJhNjk1ZmFlZjI1LzEvY3Fid1FFM09oNkd5N1hyeFIzbWNXUWdlaldrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lMzgyNmQtNWFkYS00ZTQzLTkwODQtMWJhNjk1ZmFlZjI1
LzEvczU3TkpQTWhtSTNyZkJuY29GS2s0OFNiWU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsvhMMA0G
CSqGSIb3DQEBCwUAA4IBAQBXZuUkgNS91hrPu4HkmNSrzNNUQwnPYYF/qO9TtRh8
hssXlHMiX7YsHXqRX7wvqSPUj7SbWIbduktxeBbf2VhPbfp2ddwX+bQLs6vNBMJR
7QSCxFi9rdSRiKxAXsVgjoLqtV9sfwJpwBqKTrIJEnHw+bqUt2q2oEl9OAcOkpMD
aE5iPDrz3ste+u1cRJ8Q+C6OAKe8vQWDWcpzoLa0w1ZQh7C0zkYV+l21LD0/ieWR
ecJYXVBBDQIYUcEa2mNoWEuH/FC+4JPBt8y8qaXYMJayfZtilA2Gcw0fh/tIyBzy
WOKie5YaSjNP/Eh3Pd1Df90edUUDelSVaTLI6qaeoMRu
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:38 2025 by rpki-client