Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/jK0lAu3E9UrjLX-_l521xgX1y2Y.roa
File: jK0lAu3E9UrjLX-_l521xgX1y2Y.roa (raw, json)
Hash identifier: e5N+tzeQ6unUiJJxwMR1bGbSdkqsNkhLj5tWEFkQh8o=
Subject key identifier: 8C:AD:25:02:ED:C4:F5:4A:E3:2D:7F:BF:97:9D:B5:C6:05:F5:CB:66
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 01911EDB28979B6BBEA23C9F707F7762B983
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/jK0lAu3E9UrjLX-_l521xgX1y2Y.roa
Signing time: Sun 04 Aug 2024 19:26:04 +0000
ROA not before: Sun 04 Aug 2024 19:26:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 178.248.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1e:db:28:97:9b:6b:be:a2:3c:9f:70:7f:77:62:b9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Aug 4 19:26:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cad2502edc4f54ae32d7fbf979db5c605f5cb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:56:ad:ec:19:08:5c:9c:a9:9d:71:50:09:18:
b4:b4:07:50:84:8b:19:37:b1:7c:e4:00:f7:d3:b4:
f3:03:ed:17:9e:07:fd:8c:09:74:09:30:38:f9:9d:
54:d9:3b:5e:f6:6d:12:b0:7e:b6:27:d4:9c:47:22:
76:c7:d2:02:31:2b:64:20:45:29:34:89:75:23:aa:
31:4e:a5:96:7c:95:f8:63:4c:06:df:88:aa:a9:25:
81:24:4b:2d:f2:bc:93:e5:da:52:8d:54:74:49:d7:
77:3a:e3:f5:65:71:51:84:9f:9b:f8:80:45:5d:5f:
dc:f9:f6:5f:cc:47:3c:90:79:91:31:fb:65:41:7e:
a7:56:78:83:4f:19:65:76:20:d0:4e:1b:05:08:96:
f2:f1:70:e2:a4:49:3d:3e:75:f4:ce:60:4a:51:bd:
fb:7c:e2:65:87:b0:94:1e:58:80:45:4b:23:82:07:
c9:d2:0b:20:40:1d:65:04:4f:65:86:f6:27:c2:d5:
3f:6c:82:5d:7b:54:ff:d0:d9:4e:fe:3c:eb:db:17:
90:b0:4c:62:26:db:b5:c5:40:91:0b:93:1a:47:81:
91:3c:d1:c0:75:bf:0d:8e:5a:7a:18:2e:17:74:28:
c9:bc:e8:a1:87:67:75:a0:43:a5:ac:ed:19:39:39:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AD:25:02:ED:C4:F5:4A:E3:2D:7F:BF:97:9D:B5:C6:05:F5:CB:66
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/jK0lAu3E9UrjLX-_l521xgX1y2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.75.0/24
Signature Algorithm: sha256WithRSAEncryption
59:bf:f9:14:bc:d6:09:21:01:f3:43:19:ff:44:76:1d:fb:96:
9e:51:f6:73:39:39:f4:d0:77:d0:ed:ef:88:fa:d3:7d:e9:8d:
4b:06:4e:d8:c4:1a:d7:23:80:ea:9a:ab:db:e6:29:4e:25:06:
8e:16:c8:62:00:7a:8e:e5:68:56:26:97:e7:50:50:70:ba:ae:
1c:0b:84:4c:31:9c:a3:ad:8e:04:48:b7:b5:ca:6d:62:04:88:
be:f9:27:89:ac:f4:e7:31:23:ba:0b:a4:33:c6:9b:5c:6f:13:
19:a5:1f:fa:fe:a0:b7:c2:c0:f5:ad:6d:7d:dd:d8:54:43:58:
00:71:44:03:75:4c:17:ce:98:2b:23:dd:c7:d0:59:e5:1d:75:
7a:78:91:cb:32:f0:e0:e0:50:26:17:f0:c5:0d:fc:68:c8:00:
f2:65:00:fc:49:a1:18:88:a5:78:8a:67:e4:59:6a:f0:8c:55:
b2:ba:86:42:b0:05:ef:4b:32:79:9e:3e:7c:51:90:09:7d:6b:
f0:14:fb:26:22:5f:24:f3:2e:59:0d:5b:1b:a3:ec:50:7d:71:
dc:14:0b:e3:59:e3:31:04:24:8a:38:22:af:97:6b:66:9f:9c:
da:d0:71:cd:25:4a:9d:16:2f:47:72:0c:6b:0f:d5:32:a3:d2:
20:07:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:21 2025 by rpki-client