Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/eKcUXzKRlN-9jIjYbIWBwRXfQBY.roa
File: eKcUXzKRlN-9jIjYbIWBwRXfQBY.roa (raw, json)
Hash identifier: yOShjgWdwtM7iT6Y36YvaooRB2oL7UBxUG/1sRFyaCg=
Subject key identifier: 78:A7:14:5F:32:91:94:DF:BD:8C:88:D8:6C:85:81:C1:15:DF:40:16
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 0193904B6F1773B0697D155F8E4665838A76
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/eKcUXzKRlN-9jIjYbIWBwRXfQBY.roa
Signing time: Wed 04 Dec 2024 06:11:22 +0000
ROA not before: Wed 04 Dec 2024 06:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 178.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:90:4b:6f:17:73:b0:69:7d:15:5f:8e:46:65:83:8a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Dec 4 06:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78a7145f329194dfbd8c88d86c8581c115df4016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:61:12:f9:6d:64:9e:f4:33:5a:04:97:38:
c5:5f:d9:1f:55:61:fa:63:3a:af:87:f3:6f:94:10:
10:86:84:0c:c5:9e:79:78:56:e9:93:b1:95:ef:62:
42:9d:e9:57:10:c8:85:e9:c9:28:e0:5c:c1:ab:f5:
56:d4:c9:07:3e:15:08:6d:39:1a:27:96:93:89:ce:
55:8e:3d:58:28:6f:6e:75:7a:05:fa:70:c4:54:2e:
9b:e4:c3:b4:fa:db:91:e3:65:6a:06:53:fc:ae:58:
e1:d8:3c:64:26:36:20:d8:61:95:15:2e:7c:47:ea:
c0:a9:78:7d:1c:c5:36:ec:51:6f:27:01:1f:ad:48:
19:2b:d8:5d:da:c7:7e:bb:d0:4a:e2:29:78:0c:97:
ed:dc:12:87:ef:23:65:a8:b8:69:29:d9:c1:5c:ee:
72:de:f8:67:87:b3:e1:48:cf:fd:eb:41:74:e6:96:
74:e4:52:dc:03:43:76:63:1f:95:33:ba:48:f9:02:
b4:36:0e:f1:38:db:dd:b6:55:b6:23:37:74:98:08:
a3:73:19:5b:74:1f:6a:09:a1:72:82:01:76:f0:08:
80:3e:d7:38:60:bc:2d:c3:78:27:9b:05:14:0c:f4:
32:a6:02:0a:09:2d:f2:b1:0f:b0:93:de:43:67:52:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A7:14:5F:32:91:94:DF:BD:8C:88:D8:6C:85:81:C1:15:DF:40:16
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/eKcUXzKRlN-9jIjYbIWBwRXfQBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.79.0/24
Signature Algorithm: sha256WithRSAEncryption
02:1f:26:cd:c0:b8:2e:50:de:2f:17:a4:c6:86:2b:63:c2:30:
77:fa:ea:b9:7a:11:bf:7f:b1:0d:27:89:03:90:6e:22:02:9f:
cd:75:4c:db:2d:88:e0:7a:d7:ea:56:61:29:47:6e:25:c7:2e:
72:27:8d:99:a6:42:78:cd:4e:26:4a:d3:0b:5b:8e:ff:d8:98:
1e:29:a1:d1:31:f9:2c:27:b5:4b:71:a7:0f:f9:be:51:38:05:
91:20:9f:69:1f:6b:11:0f:3b:25:7d:5f:dc:26:ad:3b:c1:67:
f3:86:d1:b5:d1:ff:a4:80:4d:13:84:eb:90:47:05:9f:e8:95:
73:d6:9e:2a:f5:07:b5:9b:c8:29:20:eb:ad:2b:e5:7f:81:11:
d6:c2:ef:6b:96:4c:98:db:56:49:fa:ca:92:a0:ef:bd:63:14:
12:01:4d:94:99:e0:9a:3a:35:fe:e7:9b:ee:90:f9:2c:f3:63:
7f:f7:c3:a5:13:60:f5:67:84:77:a2:0e:f7:22:d2:c9:6a:d0:
ad:3c:f2:87:85:39:ea:95:e5:49:41:1c:3e:e7:d9:1b:3a:29:
b3:f5:27:21:51:f9:eb:7c:db:88:45:22:32:e7:fa:b7:f5:4b:
5d:d2:28:8f:19:9b:db:fa:34:89:5b:dc:77:1c:e1:93:8d:08:
7f:78:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:44 2025 by rpki-client