Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/owEbXHkutLmZs9Tkvu71EM7ippM.roa
File: owEbXHkutLmZs9Tkvu71EM7ippM.roa (raw, json)
Hash identifier: tFFaZtKMibQTvErnXCCFFLF0HOoNfSySAu2ZM+Ow8zo=
Subject key identifier: A3:01:1B:5C:79:2E:B4:B9:99:B3:D4:E4:BE:EE:F5:10:CE:E2:A6:93
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018E7982E546E0E9C07A6BBA904A24A8088E
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/owEbXHkutLmZs9Tkvu71EM7ippM.roa
Signing time: Tue 26 Mar 2024 06:46:45 +0000
ROA not before: Tue 26 Mar 2024 06:46:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 178.248.75.0/24 maxlen: 24
178.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:79:82:e5:46:e0:e9:c0:7a:6b:ba:90:4a:24:a8:08:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Mar 26 06:46:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3011b5c792eb4b999b3d4e4beeef510cee2a693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1e:d4:d7:d4:f5:09:41:f1:39:ad:37:17:f2:
1e:b1:ac:3e:83:e6:e1:bf:5f:f1:f6:97:d4:4b:6f:
19:e7:47:5e:22:92:5e:21:6a:19:ca:74:23:fa:99:
d9:19:9e:bb:a2:c5:aa:88:f0:eb:87:69:fb:45:5c:
72:f9:3c:4c:c7:ca:3b:17:36:c8:a4:5f:30:f2:69:
25:9b:c5:08:9e:8d:1d:8d:6f:51:ca:6b:f9:17:c5:
9a:19:88:ce:de:06:f7:b6:f1:ef:33:80:88:9c:70:
04:a2:63:ff:42:4e:6c:e1:de:84:69:d7:b4:e1:db:
83:61:ed:ee:95:d8:83:4b:c3:63:25:2a:cf:f0:fb:
f2:53:2e:7d:5a:5f:66:6a:05:09:d9:30:44:1f:07:
bb:ff:23:06:13:af:90:20:85:94:a0:96:0c:f7:c1:
9e:ad:bc:4b:c2:ed:fa:82:d0:62:07:4d:f9:6a:39:
b9:2e:f2:3e:f7:2f:9b:04:6e:d3:8f:a6:7e:bb:95:
1c:14:98:4f:55:ee:09:19:f5:ca:d0:80:06:ef:8a:
80:3b:56:a5:0f:c1:84:47:dc:db:4c:0d:49:10:ae:
3e:04:fd:e8:81:16:cd:bf:d2:20:12:3c:26:b6:8d:
a8:6b:17:f2:58:2f:51:0c:87:49:79:35:28:f0:91:
1f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:01:1B:5C:79:2E:B4:B9:99:B3:D4:E4:BE:EE:F5:10:CE:E2:A6:93
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/owEbXHkutLmZs9Tkvu71EM7ippM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.75.0/24
178.248.79.0/24
Signature Algorithm: sha256WithRSAEncryption
69:cd:be:76:ce:ed:e2:66:b4:50:a5:af:50:41:66:69:d6:d2:
f7:4c:19:28:47:ff:78:a7:24:8d:7d:ce:e0:bd:40:1c:3c:f2:
60:3f:08:a0:06:1f:08:8f:f5:6d:e1:23:60:ac:1c:b6:a1:4d:
9e:79:53:6a:25:bd:c4:3f:59:2e:f6:fd:a1:30:c1:7b:59:55:
48:88:ab:93:96:e2:ec:5a:60:37:e4:77:0f:4a:be:a6:b8:1b:
fa:1d:cd:70:01:e0:da:b8:2a:a4:4d:8b:fd:80:60:dd:7c:0c:
78:8d:51:e5:28:c4:4a:eb:d1:84:72:3d:28:7b:93:8a:cb:b2:
65:b8:a2:de:d6:09:96:99:a2:ea:be:59:31:af:93:2f:b3:8b:
7e:73:df:b5:46:97:3f:74:2e:b1:2c:37:f6:7f:cc:8a:21:f5:
d4:95:48:73:29:d2:c8:22:0a:92:1b:db:c2:7c:36:7b:81:62:
43:2e:f3:2d:62:60:9b:cd:1a:e6:30:c3:5a:04:ee:2d:84:8f:
ec:3b:d6:60:ac:3e:a1:ae:b9:f1:d3:fc:8c:23:f6:66:7e:70:
2d:4b:5d:23:0c:49:1c:34:52:31:9e:e6:1e:0d:d5:f5:41:30:
c1:e2:08:72:a8:81:b0:36:b8:1b:43:38:71:b8:72:c6:4c:d5:
11:b6:47:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:48 2025 by rpki-client