Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/sXWIj36k708R0U8TkO3Qwc-YErw.roa
File: sXWIj36k708R0U8TkO3Qwc-YErw.roa (raw, json)
Hash identifier: Wneh6dP0fUhuZI9TmC88sv/3gH/CPZYwb01y0hTwu18=
Subject key identifier: B1:75:88:8F:7E:A4:EF:4F:11:D1:4F:13:90:ED:D0:C1:CF:98:12:BC
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 0191A99C1054771DF44C91CD6CFB3816EA2B
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/sXWIj36k708R0U8TkO3Qwc-YErw.roa
Signing time: Sat 31 Aug 2024 18:04:22 +0000
ROA not before: Sat 31 Aug 2024 18:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 178.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a9:9c:10:54:77:1d:f4:4c:91:cd:6c:fb:38:16:ea:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Aug 31 18:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b175888f7ea4ef4f11d14f1390edd0c1cf9812bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:32:8b:bb:e2:05:6c:20:0f:f5:e7:56:2b:3c:
aa:25:44:fa:9e:79:bc:f3:51:ce:22:55:cf:34:4c:
1a:32:11:74:1b:a2:09:b4:d4:f4:4f:76:04:59:da:
f5:ab:9e:df:1b:89:17:a4:81:ac:ad:94:64:75:c7:
7a:df:7e:ac:58:78:83:7d:53:15:56:df:dd:a2:c0:
80:71:b0:60:2d:42:a5:fc:23:41:a9:4b:c1:57:71:
be:ad:a0:0d:ff:4b:ba:fe:2c:b3:a7:3f:95:e9:ae:
f4:a2:4c:29:d1:69:52:0f:66:96:67:00:77:d1:de:
64:b7:be:42:ee:71:c9:66:c2:19:85:0b:d3:35:7f:
35:d9:3e:f4:2a:ac:b5:49:85:b1:12:4e:66:41:a3:
04:1b:f6:4f:36:9b:b7:96:87:f0:82:e7:ca:de:62:
94:c4:04:97:79:ac:a6:47:b0:08:10:61:47:9f:98:
95:a1:9b:8f:79:96:5d:9f:fe:87:75:e2:6c:dc:78:
a3:48:83:06:b4:1a:81:9b:c4:92:1c:d0:e8:9f:e4:
34:56:b1:45:56:15:f0:fd:ac:3d:22:0c:4a:fd:e9:
02:b2:71:cc:69:d9:74:9e:2e:16:33:c8:d7:0c:9d:
4d:f9:03:1a:f0:61:ff:e9:9a:ed:ec:41:37:ea:c8:
1e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:75:88:8F:7E:A4:EF:4F:11:D1:4F:13:90:ED:D0:C1:CF:98:12:BC
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/sXWIj36k708R0U8TkO3Qwc-YErw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.79.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:33:40:7d:e7:4d:80:29:fc:d7:b1:eb:80:96:98:95:67:c7:
be:fa:98:4d:3f:96:73:91:1a:e3:c2:87:1f:3c:73:a4:8a:f8:
59:2a:93:ee:73:0b:42:bd:97:35:64:dc:b5:89:04:3c:9c:bc:
52:9d:d0:08:f0:20:fa:53:62:44:9b:5f:fd:46:5e:c6:ca:bd:
87:39:10:8b:96:6b:b6:a2:e3:fe:3d:c4:08:0b:c9:93:22:c2:
45:1d:a3:a4:c2:23:15:7d:2e:38:9c:a4:4b:4f:8a:a0:16:f8:
94:85:51:47:fa:f7:56:88:81:2a:cf:e0:46:64:52:c3:03:9a:
77:d6:ec:2a:5a:c8:4f:b9:ac:5f:a2:86:ea:4c:2e:92:5b:d1:
c5:6c:20:e4:84:fd:b2:2c:04:a2:b0:52:a4:a5:c8:0e:00:66:
2f:86:58:bb:ba:a0:1b:0a:9e:62:8d:62:cd:e1:a4:be:36:1a:
fa:56:7f:0f:8b:cc:a7:87:88:45:74:6a:05:49:ec:74:04:d7:
b1:73:b2:59:db:62:20:38:69:13:90:8d:02:82:e7:ea:9d:3f:
6e:2a:da:b0:f0:5e:4a:f1:bc:f6:41:64:ca:f9:3e:d2:0a:4d:
4d:84:8f:6b:2b:b5:76:12:88:2c:5a:f0:d1:56:d5:15:f6:03:
32:f0:85:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:25 2025 by rpki-client