Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/sRuWgdpECnz9C6zRY70hsxWaV1c.roa
File: sRuWgdpECnz9C6zRY70hsxWaV1c.roa (raw, json)
Hash identifier: SCHvxZ+L/yVvdUWMbHOeFpJU2RT4qjRQj6rVaaZPdxk=
Subject key identifier: B1:1B:96:81:DA:44:0A:7C:FD:0B:AC:D1:63:BD:21:B3:15:9A:57:57
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018B9855B5ED01A0D66762C8F7E1308F4D27
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/sRuWgdpECnz9C6zRY70hsxWaV1c.roa
Signing time: Sat 04 Nov 2023 03:17:15 +0000
ROA not before: Sat 04 Nov 2023 03:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207787
IP address blocks: 178.248.76.0/24 maxlen: 24
178.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:98:55:b5:ed:01:a0:d6:67:62:c8:f7:e1:30:8f:4d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Nov 4 03:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b11b9681da440a7cfd0bacd163bd21b3159a5757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:5d:f1:de:7a:6f:e5:d5:c5:2e:1a:d4:03:
01:3d:85:46:f8:b9:fa:79:60:e1:f4:5c:a1:e2:76:
31:46:44:0f:09:f2:80:b9:64:66:45:29:da:5c:45:
87:72:bd:13:30:d6:39:57:e3:37:56:03:6d:25:51:
86:1f:e4:97:46:0d:5f:b8:f6:d2:31:9a:7b:e9:6c:
26:db:cc:f2:a1:af:86:69:c2:2f:e3:21:d4:8c:2f:
0d:ed:62:50:cf:07:8a:dc:bc:cd:1d:08:7a:e3:a1:
e7:96:0c:01:84:42:a1:ee:12:43:c9:17:b1:08:40:
3e:c5:ef:f8:cc:3d:6d:e4:3b:92:73:04:59:78:bd:
de:8b:9e:65:5b:e8:47:2e:39:77:4a:df:f2:37:8b:
04:08:52:e1:dc:78:46:0c:8b:51:04:12:cb:43:8e:
0a:5c:9d:3c:b5:d1:e6:b7:f5:16:34:13:7a:3f:4e:
e5:04:7b:8a:50:f7:31:31:9f:f8:9a:fa:1d:37:fc:
fd:08:c8:18:b3:5e:6e:0a:60:5f:ff:45:9e:88:c7:
5c:c1:91:9a:cc:63:b2:1e:e5:ef:f3:1b:6b:88:d8:
3f:88:55:2b:52:1b:b2:f7:d5:21:c9:6f:1a:dc:6f:
c7:30:53:c8:72:4f:49:0a:5b:4d:d5:8b:83:36:4c:
b7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1B:96:81:DA:44:0A:7C:FD:0B:AC:D1:63:BD:21:B3:15:9A:57:57
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/sRuWgdpECnz9C6zRY70hsxWaV1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.76.0/24
178.248.79.0/24
Signature Algorithm: sha256WithRSAEncryption
04:09:ba:48:74:60:50:58:52:5f:b2:5d:01:86:33:11:50:a4:
fb:e2:a1:72:16:1f:1f:88:13:6b:82:56:d1:c8:28:81:fd:56:
90:27:5b:c3:f6:a4:62:29:ca:40:26:b7:4c:4e:85:83:a3:7e:
f3:3b:42:51:bf:4f:4b:f7:04:52:e7:f8:07:70:11:77:e3:8e:
b0:ef:e4:13:c3:31:be:df:2b:30:26:cd:5e:44:07:6f:29:53:
4e:d9:3c:3e:bf:39:09:e2:79:f7:b5:65:66:e3:aa:02:7d:2f:
36:44:02:af:00:2d:12:7e:58:58:39:66:0e:9d:33:f1:fc:f8:
9d:6c:bd:a2:ab:9c:f8:ca:99:0c:3f:cc:11:e6:42:35:64:40:
a2:20:54:ec:43:89:1f:fb:05:93:da:88:33:a6:1d:7e:08:1f:
f0:c7:75:2f:b0:0b:c8:e8:3e:6b:40:e1:97:19:89:77:de:46:
42:88:4a:a0:6a:eb:66:6f:07:27:5b:ca:e6:71:3b:52:5c:a2:
31:4c:d4:b1:d1:00:f2:bf:50:e1:9b:f9:e7:6a:e6:fd:a8:70:
c4:ea:c4:16:18:ba:a2:e0:1b:3a:ae:14:49:6f:93:03:a5:8b:
7d:ab:5a:c0:b5:9f:f1:f5:c4:36:91:fb:54:d1:f2:ef:c9:97:
fc:a1:eb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:02 2025 by rpki-client