Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/pRwBrazrJL-9W04kNUtmMlWKqtM.roa
File: pRwBrazrJL-9W04kNUtmMlWKqtM.roa (raw, json)
Hash identifier: lhapKlYhEgUgwSqtKubdorW7Wm+aKmbwT08+Gyh4qi4=
Subject key identifier: A5:1C:01:AD:AC:EB:24:BF:BD:5B:4E:24:35:4B:66:32:55:8A:AA:D3
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 0191A913A5D7CB36F5A367610B0EA5E5EF12
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/pRwBrazrJL-9W04kNUtmMlWKqtM.roa
Signing time: Sat 31 Aug 2024 15:35:22 +0000
ROA not before: Sat 31 Aug 2024 15:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 178.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a9:13:a5:d7:cb:36:f5:a3:67:61:0b:0e:a5:e5:ef:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Aug 31 15:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a51c01adaceb24bfbd5b4e24354b6632558aaad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:ed:09:a5:4a:15:f8:f5:bc:06:39:2d:78:
f0:f0:c8:d3:4a:14:f5:f7:1c:4f:0d:80:b6:54:14:
68:11:10:a8:b2:9a:4e:a5:d4:cd:24:31:58:46:5e:
73:80:62:00:b9:57:79:7a:d3:c4:3b:98:9a:5a:24:
e3:3a:4c:a1:84:52:23:44:8f:fa:0e:30:47:29:01:
33:2d:ab:0c:45:1b:e5:c3:d1:f1:21:c2:8f:90:34:
54:e8:79:aa:a7:27:7b:b3:c9:7d:b4:8f:9e:17:b8:
ff:70:04:90:a7:cf:15:9a:f5:b0:7d:f1:8b:a9:45:
26:50:35:34:2a:71:62:22:dd:06:0d:86:28:76:78:
ec:74:58:80:bf:0e:b2:22:b4:ae:95:88:cd:2e:5b:
b2:fa:24:87:94:b3:07:6f:06:2a:0e:a3:2d:fe:ba:
0e:f4:96:fb:b3:07:b0:ea:ff:4f:54:09:43:1f:28:
b4:53:c3:aa:80:ca:83:43:b9:e5:5a:d8:3f:22:fa:
4d:64:d1:99:86:b9:da:eb:1f:b5:db:fc:ad:e8:3b:
50:70:f3:57:b3:4f:48:a0:86:e4:83:22:b7:5f:58:
0d:af:db:b4:d1:1f:af:df:ad:d8:56:1f:14:f5:f0:
23:cf:09:4c:e3:65:26:54:f1:10:b7:04:5a:c2:3e:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1C:01:AD:AC:EB:24:BF:BD:5B:4E:24:35:4B:66:32:55:8A:AA:D3
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/pRwBrazrJL-9W04kNUtmMlWKqtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.79.0/24
Signature Algorithm: sha256WithRSAEncryption
69:4f:35:52:1a:ef:93:24:33:43:dd:81:a3:de:29:5f:b6:d0:
4f:15:77:f6:7e:7f:84:9d:30:6b:9f:e4:64:7d:de:50:a8:05:
2d:d6:35:fb:46:d7:6c:e1:e5:ef:33:fc:0a:06:d1:d7:11:b7:
2a:15:85:06:e3:80:a7:8d:b6:d7:99:2d:da:f7:c9:51:34:12:
04:fb:d1:d8:fc:60:9c:a4:2b:19:55:f0:25:84:2b:86:8e:e3:
a8:29:f7:dd:91:06:4e:ef:3d:94:8d:19:e8:a1:77:8d:a0:aa:
5f:e7:24:af:32:30:ee:ed:b2:a3:a2:2b:66:76:e8:43:ad:6c:
1a:ed:60:9e:39:17:da:12:b6:4c:c5:02:b7:13:c5:ad:84:6b:
1d:10:e3:d0:f0:e0:db:1b:d0:43:f1:2c:fe:94:4b:a6:cd:fe:
08:4d:b5:77:b6:88:90:65:e4:04:58:c5:ad:da:9a:9d:68:b0:
f9:16:14:ed:39:91:81:e0:79:ab:c6:c0:94:61:5c:aa:10:73:
7d:00:f7:64:9a:46:b1:81:14:e3:f1:01:f3:1d:3c:03:b5:75:
fe:33:bb:9d:b9:75:e8:c6:6b:cd:de:4c:b1:bc:e0:13:ef:22:
12:f5:10:34:2f:e9:ef:96:ef:0c:8e:5a:52:c9:24:50:dd:d8:
26:5d:a4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:29 2025 by rpki-client