Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/jJWPnWtQI2qxAFUlmSDot_Sr3xc.roa
File: jJWPnWtQI2qxAFUlmSDot_Sr3xc.roa (raw, json)
Hash identifier: Hq39yrXmy8b0lsDQyAYT28+gS7TtgalhpIpM7LtzlYo=
Subject key identifier: 8C:95:8F:9D:6B:50:23:6A:B1:00:55:25:99:20:E8:B7:F4:AB:DF:17
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 019421B24EBCF41E78990DA821948E4614D1
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/jJWPnWtQI2qxAFUlmSDot_Sr3xc.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214828
IP address blocks: 178.248.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4e:bc:f4:1e:78:99:0d:a8:21:94:8e:46:14:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c958f9d6b50236ab10055259920e8b7f4abdf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:a2:9f:41:ec:9e:6c:b7:a5:eb:b4:c0:1e:
5f:c5:bb:4e:58:5d:34:68:42:97:99:05:c1:8e:88:
c8:6a:84:89:e1:25:ea:16:bd:d1:c2:da:1b:a3:eb:
61:07:2d:df:e2:3b:49:23:5f:22:55:4f:a8:71:d2:
8e:83:0a:a3:75:ab:26:83:f4:c3:f0:d7:57:50:fb:
ef:f0:b3:03:16:6a:c0:61:49:3e:69:a4:c2:17:3b:
ca:bd:92:70:4d:71:18:a1:98:4a:a6:f9:55:88:dd:
ec:50:eb:ee:de:54:8d:6a:4e:7b:40:28:98:30:43:
6b:93:4c:16:0a:5d:42:cd:94:e2:cb:a3:63:38:33:
69:12:c0:7c:1e:78:cf:6d:9d:4f:db:00:fe:66:3b:
81:36:06:dc:97:3b:76:42:98:6c:86:cd:9d:df:e7:
1c:d7:53:d9:bb:6f:e0:31:12:71:08:0b:33:7d:75:
49:60:c5:4b:43:76:67:9d:b0:70:0a:de:13:5d:2e:
b3:d0:ce:79:29:50:fa:d5:ba:4a:a5:8b:ef:d4:41:
39:a4:00:c7:86:d3:d8:e4:42:eb:95:74:fd:81:3a:
d4:d3:cc:c4:e1:de:c4:38:8d:d0:ce:28:6a:ba:25:
6b:f9:61:31:1a:e2:cb:80:09:dc:f8:92:c3:86:52:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:95:8F:9D:6B:50:23:6A:B1:00:55:25:99:20:E8:B7:F4:AB:DF:17
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/jJWPnWtQI2qxAFUlmSDot_Sr3xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.77.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c7:ff:47:b7:7d:03:15:e7:5d:98:a1:24:6d:01:bf:6a:6c:
c6:29:dc:1c:dd:e1:a3:63:ca:bb:ae:15:ee:89:e8:77:94:c7:
39:aa:7c:32:6a:e8:5e:e7:52:ef:c7:88:8a:3a:89:fb:6b:d6:
54:1b:9a:1f:40:3f:0c:95:d0:f4:3e:5d:70:bc:81:db:51:a6:
ef:4c:a0:97:d9:30:d7:f0:95:44:da:c2:9c:83:5c:0c:82:43:
e2:cb:68:8e:01:bd:11:07:6d:c6:1d:77:c9:91:cc:ec:af:87:
d8:9c:3b:2c:8f:4e:f7:37:51:c6:d8:02:ff:39:89:0e:c0:56:
8c:9c:6e:82:b2:65:7a:13:82:b5:7f:0c:6c:69:22:5b:3f:ed:
1d:1b:be:88:f5:9b:fc:dd:ba:e2:bf:bb:8a:d4:70:6a:9c:c7:
98:94:c0:25:01:ef:7a:cc:ce:ba:8d:ef:c3:6f:f5:58:7c:0c:
70:52:7d:cd:d2:95:b0:4d:2f:0c:2b:f3:83:c1:93:13:94:d2:
3c:8e:42:db:f3:1c:4b:61:fa:5c:86:ca:d3:3f:69:d1:e8:cf:
03:25:51:75:88:fc:a2:08:e7:25:65:5c:8a:db:da:8a:88:5e:
66:7d:5b:02:c5:47:5c:fe:f8:f5:28:33:fd:36:73:a3:e1:a5:
e2:a4:d4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:22 2025 by rpki-client