Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/vxr4EtiOimA83wuDhwQe23cDY7A.roa
File: vxr4EtiOimA83wuDhwQe23cDY7A.roa (raw, json)
Hash identifier: mwnxnUGYBW/A8xU6Uv1FbCuK17e24XXd3FyI69rlxrc=
Subject key identifier: BF:1A:F8:12:D8:8E:8A:60:3C:DF:0B:83:87:04:1E:DB:77:03:63:B0
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018FE1E91F2D2787D2114B282C2CB8344AAC
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/vxr4EtiOimA83wuDhwQe23cDY7A.roa
Signing time: Tue 04 Jun 2024 06:21:42 +0000
ROA not before: Tue 04 Jun 2024 06:21:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 178.248.75.0/24 maxlen: 24
178.248.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e1:e9:1f:2d:27:87:d2:11:4b:28:2c:2c:b8:34:4a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jun 4 06:21:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf1af812d88e8a603cdf0b8387041edb770363b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:a2:28:77:da:39:7c:34:c5:aa:52:4e:be:
46:eb:28:37:d8:78:30:15:25:7a:6a:cf:c0:0e:e8:
2b:a9:1b:d7:d4:01:2f:b4:6e:14:8e:9f:94:41:38:
94:f4:e4:c5:5a:84:86:47:cf:e1:6a:68:83:c0:0f:
ae:1d:b7:5c:2f:91:c9:62:15:3b:7a:4c:75:07:ac:
20:88:f6:09:19:3d:69:a2:39:dd:6c:e8:9d:db:ac:
4c:34:39:a0:07:f9:9c:18:50:73:74:8a:c7:04:7b:
5a:32:e5:52:71:d2:b0:a8:d1:4e:6b:dc:83:aa:d8:
8b:db:c7:6c:c8:3c:4b:b6:01:e6:9d:25:7f:64:d3:
38:b2:92:50:a9:b6:ad:15:2f:35:2a:88:ac:b7:20:
12:43:2b:48:30:61:f1:e0:c8:38:33:0b:17:8a:a3:
de:f4:86:fe:81:a4:e8:a4:51:2e:8c:1c:26:cf:60:
00:44:16:63:d4:cb:19:3f:23:9e:17:35:3a:f1:0e:
13:e9:d5:00:04:48:e5:cf:38:a9:8e:cf:fc:1e:f2:
f6:7f:46:51:6f:fa:d4:53:7b:f8:10:09:6d:11:0b:
7e:bd:e2:75:4b:86:a8:2f:5e:e6:c0:86:17:e3:ba:
86:c2:5d:05:f6:96:83:66:49:3d:ea:fd:a1:11:07:
cf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1A:F8:12:D8:8E:8A:60:3C:DF:0B:83:87:04:1E:DB:77:03:63:B0
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/vxr4EtiOimA83wuDhwQe23cDY7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.75.0-178.248.76.255
Signature Algorithm: sha256WithRSAEncryption
5e:59:51:5e:2a:c7:df:76:4e:06:16:7c:56:77:68:4a:8d:67:
ba:60:b5:29:63:ab:07:e0:1f:fa:b6:26:a7:b6:9f:b0:06:3a:
ed:b6:9f:dd:86:a0:aa:f7:42:3a:3f:2a:9f:56:8c:41:4f:9e:
5b:ea:12:af:9d:4e:19:fd:5d:3e:6a:d2:67:04:1d:10:a9:5b:
86:22:15:aa:f4:bf:27:0d:ce:16:b4:05:fd:6a:87:09:cb:d3:
99:71:a1:cf:e8:5c:13:4d:cd:05:8b:12:ff:9b:ce:13:b2:29:
f3:c2:9c:10:88:f8:81:57:33:91:e5:5d:30:7b:98:79:d8:80:
ba:44:a7:c2:b7:b6:07:9c:4d:d5:56:81:21:30:29:e1:9e:d6:
ca:de:4c:5e:d4:a9:3e:cf:4e:e1:38:a8:23:10:06:a9:4b:fe:
60:7f:6b:c6:ff:ce:fc:49:1a:2b:6c:51:00:84:1b:8e:0b:8a:
5f:76:69:80:a5:b6:74:4f:83:f4:bd:1c:ab:68:0f:dc:08:4c:
37:5e:01:8e:50:e8:b2:6b:c8:e3:b9:a4:ba:3d:e8:d3:c9:ba:
4f:8c:42:a7:3b:db:90:4e:d8:c9:de:cd:7e:04:bd:cb:d7:ba:
1f:4d:3f:7b:31:3c:c4:46:d6:8e:3c:8e:bc:78:16:d6:3f:47:
da:ae:cb:4a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY/h6R8tJ4fSEUsoLCy4NEqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOWVjZDI0ZjMyMTk4OGRlYjdjMTlkY2EwNTJhNGUzYzQ5
YjYwZWEwHhcNMjQwNjA0MDYyMTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjFhZjgxMmQ4OGU4YTYwM2NkZjBiODM4NzA0MWVkYjc3MDM2M2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV6iKHfaOXw0xapSTr5G6yg32Hgw
FSV6as/ADugrqRvX1AEvtG4Ujp+UQTiU9OTFWoSGR8/hamiDwA+uHbdcL5HJYhU7
ekx1B6wgiPYJGT1pojndbOid26xMNDmgB/mcGFBzdIrHBHtaMuVScdKwqNFOa9yD
qtiL28dsyDxLtgHmnSV/ZNM4spJQqbatFS81KoistyASQytIMGHx4Mg4MwsXiqPe
9Ib+gaTopFEujBwmz2AARBZj1MsZPyOeFzU68Q4T6dUABEjlzzipjs/8HvL2f0ZR
b/rUU3v4EAltEQt+veJ1S4aoL17mwIYX47qGwl0F9paDZkk96v2hEQfPtQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFL8a+BLYjopgPN8Lg4cEHtt3A2OwMB8GA1UdIwQY
MBaAFLOezSTzIZiN63wZ3KBSpOPEm2DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczU3TkpQTWhtSTNyZkJuY29GS2s0OFNiWU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMzgyNmQtNWFkYS00ZTQzLTkwODQt
MWJhNjk1ZmFlZjI1LzEvdnhyNEV0aU9pbUE4M3d1RGh3UWUyM2NEWTdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lMzgyNmQtNWFkYS00ZTQzLTkwODQtMWJhNjk1ZmFlZjI1
LzEvczU3TkpQTWhtSTNyZkJuY29GS2s0OFNiWU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACy+EsD
BACy+EwwDQYJKoZIhvcNAQELBQADggEBAF5ZUV4qx992TgYWfFZ3aEqNZ7pgtSlj
qwfgH/q2Jqe2n7AGOu22n92GoKr3Qjo/Kp9WjEFPnlvqEq+dThn9XT5q0mcEHRCp
W4YiFar0vycNzha0Bf1qhwnL05lxoc/oXBNNzQWLEv+bzhOyKfPCnBCI+IFXM5Hl
XTB7mHnYgLpEp8K3tgecTdVWgSEwKeGe1sreTF7UqT7PTuE4qCMQBqlL/mB/a8b/
zvxJGitsUQCEG44Lil92aYCltnRPg/S9HKtoD9wITDdeAY5Q6LJryOO5pLo96NPJ
uk+MQqc725BO2MnezX4EvcvXuh9NP3sxPMRG1o48jrx4FtY/R9quy0o=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:50 2025 by rpki-client