Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/toM7ndZEmf5hVsFiKbNIvcdRCr0.roa
File: toM7ndZEmf5hVsFiKbNIvcdRCr0.roa (raw, json)
Hash identifier: 4h1Ku+30F/KgrpNv4afjiV7GCeCl9Tm1UHm5uZt+Nus=
Subject key identifier: B6:83:3B:9D:D6:44:99:FE:61:56:C1:62:29:B3:48:BD:C7:51:0A:BD
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 019431BEDACC60837C629D9DC596AEA21D71
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/toM7ndZEmf5hVsFiKbNIvcdRCr0.roa
Signing time: Sat 04 Jan 2025 14:36:18 +0000
ROA not before: Sat 04 Jan 2025 14:36:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 178.248.73.0/24 maxlen: 24
178.248.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:31:be:da:cc:60:83:7c:62:9d:9d:c5:96:ae:a2:1d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 4 14:36:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6833b9dd64499fe6156c16229b348bdc7510abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:18:7d:78:f5:1f:19:9d:f2:d2:b9:93:13:
6a:70:e1:42:c8:ef:12:d7:4e:60:63:36:95:94:4f:
e7:e6:c1:ea:a7:37:d9:c4:db:55:cf:73:38:f0:ac:
29:a9:a7:82:bb:41:19:61:f1:30:4f:f6:5b:68:86:
fc:48:71:26:12:c0:d3:62:72:e7:a0:ff:52:65:8b:
c3:00:3d:74:23:25:17:66:e0:17:03:e0:f9:f2:7e:
27:9b:99:15:4d:8b:98:37:31:63:de:8f:49:0c:cf:
b7:46:39:48:06:3d:29:d3:5d:da:ac:ff:d8:84:fa:
36:c2:7b:84:54:85:5e:7a:ea:57:d5:ee:87:a5:83:
38:e4:05:e1:cf:b5:cf:8d:db:69:b7:f2:e1:8d:76:
8f:0e:d7:a1:3b:17:2d:60:c2:4e:0d:de:a2:31:b8:
18:9f:8f:e7:ac:12:c3:89:f3:c9:aa:ea:d9:b0:84:
8b:d2:67:e0:93:13:9d:30:36:f4:f0:da:90:4b:be:
a1:04:eb:d0:c8:57:65:6d:e4:fd:e2:c6:6d:38:82:
34:cf:da:0c:43:4a:44:8a:07:48:8b:b6:30:42:3b:
44:a2:f3:da:89:50:28:8f:9b:20:3b:d5:a8:29:a7:
8e:43:09:6f:46:80:c8:f1:0b:94:6b:ce:8f:53:a6:
fc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:83:3B:9D:D6:44:99:FE:61:56:C1:62:29:B3:48:BD:C7:51:0A:BD
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/toM7ndZEmf5hVsFiKbNIvcdRCr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.73.0-178.248.74.255
Signature Algorithm: sha256WithRSAEncryption
33:19:f1:02:37:a6:b1:72:6c:b4:ae:cd:4e:be:31:a7:be:65:
dd:3b:32:10:1e:b3:66:e9:39:2a:e5:ec:bf:03:93:54:e4:cb:
69:f8:2a:9d:df:d2:93:6d:70:5d:3d:91:5f:31:5e:e1:f5:72:
3c:b3:c8:1a:60:53:fc:bf:11:49:c0:81:7a:b9:ac:ed:36:19:
7e:7f:72:20:63:bc:3f:cb:c1:fe:14:f6:ca:82:43:a2:a2:c1:
ac:ac:b8:68:7f:2d:c5:14:14:16:fd:4d:0b:e4:58:b4:69:1a:
3b:2b:33:7c:97:ba:a3:1a:74:5d:0b:02:48:2b:f0:65:f9:95:
c4:db:3c:12:7f:ad:31:43:54:62:80:fa:3e:80:db:70:f6:6b:
b2:62:81:5d:53:60:07:0f:2d:5e:f5:9e:64:31:bf:e0:b2:ae:
77:c1:a7:95:4f:81:2f:30:2c:0f:96:a1:1c:61:55:a7:6d:08:
ad:28:e4:f9:00:79:82:7b:ea:9f:73:72:44:45:03:4f:cc:09:
d4:e0:f5:73:a9:8b:18:34:a8:81:a0:6b:7f:a2:fc:2d:24:df:
c3:0a:5a:e3:de:a8:49:7e:58:84:dd:20:2b:d2:db:1a:db:89:
26:2c:9f:75:58:dd:cc:08:83:f6:08:cd:7a:c6:67:c6:dc:00:
5b:21:b2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:54 2025 by rpki-client