Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/xxKsPgjCCzCOeRXQ5c9JN3emAo4.roa
File: xxKsPgjCCzCOeRXQ5c9JN3emAo4.roa (raw, json)
Hash identifier: oMSz0fmNgukgQn52ZctmXVF20LGw4mmQgRLQnacTJMY=
Subject key identifier: C7:12:AC:3E:08:C2:0B:30:8E:79:15:D0:E5:CF:49:37:77:A6:02:8E
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018FD29D2FA07F6A2E67B17B7CE74C4D7043
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/xxKsPgjCCzCOeRXQ5c9JN3emAo4.roa
Signing time: Sat 01 Jun 2024 07:04:27 +0000
ROA not before: Sat 01 Jun 2024 07:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 178.248.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d2:9d:2f:a0:7f:6a:2e:67:b1:7b:7c:e7:4c:4d:70:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jun 1 07:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c712ac3e08c20b308e7915d0e5cf493777a6028e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:be:e2:b3:22:40:c1:9e:10:5e:68:2b:85:
a2:24:e0:22:ec:c1:84:d8:95:5c:b9:aa:62:5c:5b:
bb:1b:87:5c:04:48:c0:e5:35:8c:47:56:ee:2e:97:
b1:43:4b:7e:26:14:f6:44:8e:46:b0:3e:65:69:4d:
4f:32:3a:30:69:3a:95:3a:59:b6:e8:79:8f:f5:4a:
c2:a8:c9:eb:53:14:dc:86:3c:38:5c:93:65:72:c5:
6e:75:24:a4:a0:62:b0:14:17:db:67:cc:48:49:f4:
86:d9:05:71:1e:cf:58:f8:42:26:d0:52:2e:7f:01:
4f:bf:69:62:74:46:7f:98:a0:f0:6c:ce:cf:f2:f9:
78:c8:4c:13:19:38:7f:5d:aa:1d:1b:88:b1:c8:25:
0f:ed:4e:61:1f:56:eb:4f:9d:69:6b:f3:6d:a7:06:
2b:d0:c9:fa:bc:37:e1:87:ad:68:b8:af:e1:2a:f4:
a4:c7:5a:2e:d7:25:51:1f:a9:30:04:b5:0b:33:f9:
0e:6a:44:a8:db:c1:56:cf:97:45:1b:c4:9d:e3:65:
b4:26:0d:6b:89:52:65:ce:e5:1a:a3:fe:85:c7:3f:
a3:c2:c1:4b:22:14:78:e5:11:f5:1f:37:ec:be:ef:
70:95:d9:e8:ca:1d:09:94:24:88:79:1e:69:c8:94:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:12:AC:3E:08:C2:0B:30:8E:79:15:D0:E5:CF:49:37:77:A6:02:8E
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/xxKsPgjCCzCOeRXQ5c9JN3emAo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:7c:8e:59:f1:b9:92:54:c2:02:e1:d4:34:66:1e:3f:6a:43:
f2:15:04:ce:cd:03:21:fb:51:7c:34:7d:d9:d4:31:e6:33:92:
6a:ce:f9:7c:24:85:2c:e7:88:b4:1d:51:de:c1:af:24:05:0d:
fc:90:3e:8a:f5:08:3e:43:e3:37:37:6f:ae:41:1d:1d:1f:66:
60:f4:95:15:fe:a3:39:2e:6e:dd:07:c8:8f:d0:3a:23:45:49:
61:71:52:49:f6:d6:24:c9:6a:40:8b:c5:1f:67:1d:e9:45:4b:
b0:2e:25:68:0f:2d:e5:a7:db:dc:a6:b9:5f:89:8c:1d:4f:0a:
20:73:7f:a7:71:90:83:2e:b8:c1:8d:f5:39:4a:7a:ba:59:5f:
e6:13:8a:83:23:1e:e2:9a:99:09:ec:0b:f9:5a:15:5f:13:cf:
4b:c5:d1:c4:b8:7d:71:93:40:e5:9b:30:49:5d:46:4d:7f:ec:
13:32:9b:a4:89:86:3e:f7:35:71:43:b4:c0:d2:65:f9:16:87:
43:4d:da:61:18:b2:da:b7:54:94:37:ad:25:f0:52:f9:69:13:
92:c6:34:eb:42:f0:e0:6b:41:ea:b5:8f:ff:6b:d5:e7:66:5c:
d6:0e:49:5e:29:a7:d6:96:5d:a9:b9:a4:d1:41:87:b2:f8:2d:
79:2c:3c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:32 2025 by rpki-client