Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/lUQ1FH6G-yJ4b721Qj5M-uG26xw.roa
File: lUQ1FH6G-yJ4b721Qj5M-uG26xw.roa (raw, json)
Hash identifier: CQikSA1l8/Ip96cTAFPBw0d9/eW1EZ2bSqH4wLAZehE=
Subject key identifier: 95:44:35:14:7E:86:FB:22:78:6F:BD:B5:42:3E:4C:FA:E1:B6:EB:1C
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 0191BB5654EC1D45005FC040AE0743B1F2BB
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/lUQ1FH6G-yJ4b721Qj5M-uG26xw.roa
Signing time: Wed 04 Sep 2024 04:41:22 +0000
ROA not before: Wed 04 Sep 2024 04:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 178.248.75.0/24 maxlen: 24
178.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:56:54:ec:1d:45:00:5f:c0:40:ae:07:43:b1:f2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Sep 4 04:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=954435147e86fb22786fbdb5423e4cfae1b6eb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:0c:9e:c7:83:14:66:03:75:4c:73:b8:a9:
99:82:5f:7d:7e:6a:6e:1a:88:3f:a0:a1:28:23:38:
c0:52:4e:c0:d8:67:13:65:1a:e1:cf:7d:35:3b:3d:
9e:1c:8c:89:59:e5:84:dd:31:0b:d8:11:62:ce:85:
84:2e:7a:0f:8c:d2:81:05:f9:e5:cf:c5:e3:bc:44:
6a:54:79:d1:49:e0:9a:f0:8a:42:7a:46:ec:47:39:
fb:ad:6b:4c:fd:39:37:0f:b4:fa:16:65:4f:88:c8:
23:76:eb:02:3a:8c:46:12:ac:ed:9a:b1:c0:b2:76:
0b:35:2e:41:cf:46:f1:6d:59:ac:cf:3f:16:cf:84:
6e:e1:4d:ba:c0:96:92:34:9f:a5:f3:bd:c7:fb:e7:
f4:10:04:c6:53:91:ef:1e:7b:d6:a1:7f:df:8e:a4:
81:02:33:55:2a:62:cf:c3:39:65:bb:07:1b:8c:25:
d6:13:17:7e:c7:0c:fc:22:bd:2b:7d:36:46:07:40:
19:9e:c8:99:76:31:bd:8b:b7:a1:d1:23:91:9d:db:
f6:a4:20:1c:2d:02:f0:dd:ad:d1:5e:78:8f:af:50:
65:fc:8b:4f:e4:6f:10:22:fc:c0:9c:4a:ae:5c:0a:
62:68:d5:12:d9:ea:b2:f0:19:19:16:23:a3:c3:a6:
53:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:44:35:14:7E:86:FB:22:78:6F:BD:B5:42:3E:4C:FA:E1:B6:EB:1C
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/lUQ1FH6G-yJ4b721Qj5M-uG26xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.75.0/24
178.248.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1d:13:ec:07:ae:2c:69:d0:45:39:7b:4e:f4:2f:e9:d0:13:
83:e7:fc:24:12:ab:eb:c2:52:2c:88:45:41:a3:21:a2:cb:44:
68:6e:90:7d:8e:31:89:f3:cf:bb:05:78:28:65:61:35:11:b4:
52:d9:70:a9:d8:b2:6e:68:94:0c:ba:8d:24:ee:92:aa:8e:1b:
e5:f5:60:47:33:e7:32:9b:08:ad:51:17:73:dc:ab:c5:68:1e:
85:bf:46:84:0d:2d:df:26:99:a4:04:05:31:22:bf:9a:cf:bb:
b9:f7:73:5a:85:93:51:73:6b:f2:31:4d:6a:1f:d1:c0:e8:c8:
c8:f7:b8:4e:95:c7:37:ce:8c:d5:8b:e8:fb:fd:f4:ed:80:96:
9f:98:20:e0:f4:17:f4:c7:86:af:4a:8d:13:fe:a0:14:f5:81:
69:b6:97:f5:b1:13:9f:1e:33:6b:0d:b1:be:66:63:e6:9d:ce:
05:39:d6:6e:f3:00:6a:5b:1c:7e:c5:b4:34:7f:a4:3e:ce:ce:
96:96:ca:6f:15:00:ed:34:64:2d:0e:4d:d8:a2:26:ee:ee:38:
20:99:37:04:b5:35:5e:62:75:f0:0a:08:db:36:dc:89:c0:8f:
96:84:b2:d9:c1:ed:ff:48:f6:e5:06:12:be:95:b7:7f:fd:57:
c4:61:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:23 2025 by rpki-client