Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/BR1Ii_38AODfT46uM_LQNIk35f0.roa
File: BR1Ii_38AODfT46uM_LQNIk35f0.roa (raw, json)
Hash identifier: pnSwgnciRzgnr7iozogNocb3NYdeZrHWudq2Bv1+yUM=
Subject key identifier: 05:1D:48:8B:FD:FC:00:E0:DF:4F:8E:AE:33:F2:D0:34:89:37:E5:FD
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 01941F8C9AB3300147E293E9557ED387DC28
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/BR1Ii_38AODfT46uM_LQNIk35f0.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44099
IP address blocks: 178.248.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9a:b3:30:01:47:e2:93:e9:55:7e:d3:87:dc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=051d488bfdfc00e0df4f8eae33f2d0348937e5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:eb:c3:e5:48:56:09:3f:0e:c6:55:bc:87:
91:c6:93:c6:30:95:dd:23:ee:36:b8:b9:2e:01:54:
33:1f:08:ef:a9:48:9f:51:bc:6d:64:0a:f6:a7:08:
89:4d:d6:ea:01:f3:37:7f:4e:6c:b7:a1:c2:f0:05:
8c:fa:49:0c:35:ac:ea:b9:dd:50:ff:69:9e:21:7a:
c6:ee:82:9c:83:b9:2a:fd:00:05:44:65:7f:40:e7:
ac:0f:c3:96:45:09:c3:88:c9:f8:bd:19:05:f0:8b:
11:c0:30:e9:ea:94:ba:b3:6f:9e:1a:b4:85:91:9f:
06:94:fe:b2:9b:dd:fe:ba:d3:bb:ac:5d:e4:36:49:
66:48:3b:38:ac:38:f9:1b:12:69:b6:32:e8:6a:1d:
23:ae:39:12:2f:87:a4:aa:be:91:59:b5:30:a5:44:
46:e4:92:7b:eb:82:72:55:cb:02:77:dc:df:1c:69:
e6:d4:d5:6a:09:db:c4:59:68:6f:fb:8b:db:be:07:
fc:0e:7b:f0:7e:1b:92:f5:42:fa:d7:7f:15:1e:c1:
17:9c:b2:f2:a2:68:45:60:0c:e2:99:34:7d:95:92:
fd:93:6c:90:33:25:a2:d2:2a:0f:53:ff:48:80:55:
12:51:b2:a8:f7:f4:cd:02:ab:62:99:ae:fc:26:d1:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1D:48:8B:FD:FC:00:E0:DF:4F:8E:AE:33:F2:D0:34:89:37:E5:FD
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/BR1Ii_38AODfT46uM_LQNIk35f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.184.0/21
Signature Algorithm: sha256WithRSAEncryption
24:cc:82:92:e9:54:81:46:40:5c:fe:f6:5f:ef:88:cc:2a:18:
d9:ec:bc:17:1f:99:bd:dc:e1:15:e7:98:cb:7c:40:e7:1b:76:
96:39:fd:47:db:0e:4b:07:25:34:89:b4:cb:05:c0:a1:ef:77:
6a:35:f3:b9:ce:ec:38:f5:7c:11:a8:85:2d:d9:db:a3:40:49:
dc:e1:57:ef:f4:42:0d:19:64:d9:d8:d1:07:db:c8:c3:4a:5b:
f0:d9:21:07:5c:9b:9e:2c:71:01:35:5d:ad:4c:bf:20:0e:1e:
f3:b2:44:c9:8f:0b:36:d8:c7:10:c7:76:07:29:ae:04:71:2a:
7e:ad:6a:52:40:e1:51:e6:88:c2:85:20:e1:02:09:55:ca:94:
6c:a8:45:87:34:1b:16:4b:65:f4:15:aa:8c:cd:b2:2b:f2:02:
5b:d6:9b:6f:a8:22:d9:05:60:59:03:e4:97:4b:d8:35:ef:a7:
79:fe:45:74:51:03:a4:ba:99:81:19:ba:02:33:32:66:84:2a:
79:20:f8:3a:ab:56:02:64:31:d0:2a:3d:1f:16:3d:17:0a:d6:
c2:fc:06:de:fa:50:bd:00:1d:ff:49:97:bd:54:6b:79:90:38:
72:f6:02:72:34:5a:7c:ba:ea:4f:df:7e:cd:43:08:2a:d3:fe:
42:44:39:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:13 2025 by rpki-client