Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/ctHXsDR_l0kbx7MPbbb-PwBCJ5E.roa
File: ctHXsDR_l0kbx7MPbbb-PwBCJ5E.roa (raw, json)
Hash identifier: RR2KjgsJpZ/PGwbnD2OsxEDBI+PcUg7HPvxp0O0JOOg=
Subject key identifier: 72:D1:D7:B0:34:7F:97:49:1B:C7:B3:0F:6D:B6:FE:3F:00:42:27:91
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018FCD8EA0C9D354B311D90672A26B6AB9D5
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/ctHXsDR_l0kbx7MPbbb-PwBCJ5E.roa
Signing time: Fri 31 May 2024 07:30:27 +0000
ROA not before: Fri 31 May 2024 07:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 178.248.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cd:8e:a0:c9:d3:54:b3:11:d9:06:72:a2:6b:6a:b9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: May 31 07:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72d1d7b0347f97491bc7b30f6db6fe3f00422791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:fd:fe:aa:f1:a9:4d:a4:f7:85:1e:ff:a0:
45:df:5a:71:60:dc:f7:44:72:c9:54:e2:0b:42:6f:
fa:fa:8b:ad:8a:8e:f8:ea:f5:9d:7b:51:07:cc:f4:
8e:50:95:36:70:e9:8e:28:6e:9a:da:4e:9f:5c:b4:
18:94:51:6a:65:1d:a4:c5:14:cb:92:74:e8:d4:86:
ca:45:e1:22:c9:a8:e5:08:35:f8:d7:1f:d6:0b:dc:
2a:10:6e:e0:a0:8f:60:c3:e2:f6:07:ef:38:71:2b:
af:44:c3:6c:5d:11:04:b2:e5:c8:af:47:0a:07:5f:
2d:10:d6:39:0a:16:21:ae:aa:38:ba:e8:52:1c:7b:
15:60:7c:c9:18:7d:95:e6:40:2f:9d:02:14:d6:39:
35:58:90:e8:05:ae:d2:14:28:c5:a7:c9:ad:93:f4:
a5:1a:d6:8b:11:5a:6a:71:b5:c0:ca:c1:b4:2b:cd:
06:d0:04:ed:da:0a:94:2f:bb:40:56:13:0e:ed:77:
7d:8e:c5:88:66:10:d5:33:dd:61:64:91:60:3b:2a:
b1:2d:d1:90:a3:ee:bf:9f:17:c1:57:e0:87:25:69:
92:d6:2d:92:21:8e:b8:56:7d:99:d9:a0:c8:71:f3:
dc:90:01:3b:29:5e:0b:76:14:df:55:82:d2:e9:c2:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D1:D7:B0:34:7F:97:49:1B:C7:B3:0F:6D:B6:FE:3F:00:42:27:91
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/ctHXsDR_l0kbx7MPbbb-PwBCJ5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
37:07:14:8c:d1:7a:1b:b1:73:bf:d1:86:5e:52:c0:43:78:02:
6f:a9:0f:52:70:55:9d:69:48:f6:2b:95:fe:90:4e:80:81:2b:
56:69:89:94:19:74:24:a8:61:91:76:fc:e8:0c:a9:b9:ee:1e:
b3:54:71:ba:6e:78:76:cc:c5:de:25:8f:52:73:1f:df:79:b8:
17:78:87:32:12:49:ba:92:af:72:99:df:63:9f:76:81:e7:61:
83:1a:fc:8b:59:d5:87:20:25:3a:92:85:66:73:ec:97:16:f5:
89:df:52:c0:af:ed:de:b2:e0:8d:ca:07:5c:52:13:64:96:06:
91:71:d0:8c:1d:0d:47:2c:0f:d7:24:55:e0:4a:53:44:1f:7a:
32:18:51:77:2d:9a:a9:21:8f:b0:ac:71:8b:17:9a:c1:09:e5:
20:ee:9a:c4:5a:7c:0e:9d:8c:01:c6:68:d3:07:8c:d6:f6:62:
d4:68:86:45:f0:01:cf:c7:53:69:61:5b:8b:e4:2a:de:89:ad:
45:7b:07:6a:4b:c0:2f:21:21:92:95:87:75:5b:43:b1:51:e9:
d8:e3:51:01:58:9a:e6:6d:0c:46:b2:28:46:e0:0e:83:e6:b9:
6f:4b:4b:a8:9f:d6:fd:6d:2c:e4:ce:1d:57:3d:71:33:01:37:
34:ea:10:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:15 2025 by rpki-client