Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/IC03l1XMgbhoUOb0-GCXp6G38s4.roa
File: IC03l1XMgbhoUOb0-GCXp6G38s4.roa (raw, json)
Hash identifier: lMHFs2f9SOX4UlQgc5rVzdtxqJ64Sp1gUBEEbkujbnc=
Subject key identifier: 20:2D:37:97:55:CC:81:B8:68:50:E6:F4:F8:60:97:A7:A1:B7:F2:CE
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2E3FC85BEAFB1F416450D209333E9
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/IC03l1XMgbhoUOb0-GCXp6G38s4.roa
Signing time: Thu 02 Jan 2025 01:48:11 +0000
ROA not before: Thu 02 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 188.64.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:e3:fc:85:be:af:b1:f4:16:45:0d:20:93:33:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=202d379755cc81b86850e6f4f86097a7a1b7f2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:6c:cc:61:21:11:42:b8:0d:4d:39:e3:d7:
6b:7f:71:4f:be:e4:84:ee:e3:a4:2e:c3:1b:4a:04:
12:fa:dc:0c:d1:55:8b:b0:89:94:b2:3e:68:d6:a8:
44:80:ea:c4:8b:dd:d5:87:dc:f5:a3:d9:78:f4:7d:
ba:a2:57:70:37:cf:5f:a0:a4:aa:55:a5:4b:84:d0:
9e:ca:94:32:63:a2:c4:3a:d5:c2:11:a7:9f:03:43:
a3:d7:76:af:4a:86:1a:dd:22:69:c8:d1:1d:c2:f4:
c9:bf:97:b4:67:d9:50:4c:05:4b:64:55:11:95:3a:
8e:99:13:04:00:6e:9e:ab:56:6f:9e:7b:ee:11:b4:
99:ed:4c:2f:5e:db:a8:6f:ef:63:ea:99:99:f3:d4:
49:93:45:e4:28:44:71:e0:89:9f:11:79:eb:6b:fe:
78:ce:55:9b:ff:62:1d:d7:cb:72:6d:f3:ba:13:0a:
69:5e:fb:57:f4:69:87:91:69:c7:4e:a2:79:18:f2:
7e:1b:da:a6:2b:f1:4c:0b:6e:c9:f2:55:2c:43:15:
22:36:f7:d7:49:1c:9e:5f:8f:82:f7:79:30:a2:9a:
cf:6c:e2:f3:30:43:a9:f4:2c:78:17:2f:e2:d5:2b:
b6:f9:d4:b0:08:8e:e5:6b:89:dd:14:4e:6f:f3:ae:
76:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2D:37:97:55:CC:81:B8:68:50:E6:F4:F8:60:97:A7:A1:B7:F2:CE
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/IC03l1XMgbhoUOb0-GCXp6G38s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.176.0/21
Signature Algorithm: sha256WithRSAEncryption
74:d8:d4:fc:e2:58:26:22:e2:d9:c5:d8:4c:ff:c9:38:71:93:
dc:84:32:68:56:0b:0d:06:c1:11:7e:aa:51:a1:21:46:82:a2:
a6:fe:86:7f:dd:34:64:af:37:cd:dc:74:f6:45:24:8e:35:eb:
10:5e:d1:78:1e:dc:dc:d9:45:c8:ac:47:b4:c5:8a:dc:d8:f4:
c9:fb:22:b9:30:db:76:0f:a8:fe:c4:9b:1b:80:a1:d7:5c:87:
f9:e5:5d:9f:f1:c4:0f:72:66:63:71:d3:3c:88:79:a4:71:3e:
8a:41:9a:06:59:58:c7:79:e0:dd:f4:07:de:9d:b5:94:b6:d5:
45:75:b6:17:af:66:2a:5f:51:fd:78:0f:1e:73:96:b8:45:30:
73:4c:04:9a:bd:89:c3:15:45:59:6b:e5:86:6f:fc:21:22:84:
be:ca:7d:91:57:28:76:3e:59:9a:df:82:c1:f7:30:12:7f:97:
c1:4b:fc:18:3e:6b:87:70:27:29:ec:fb:18:5c:a5:cd:e6:cf:
3e:aa:ed:10:08:77:f7:92:c4:47:fd:4c:01:2a:98:35:f8:85:
1e:89:ec:30:9e:08:f2:05:22:5f:d0:cc:56:b7:d0:55:b7:e7:
68:d3:f7:fd:23:f9:7c:a6:16:d4:a2:3b:97:04:d9:0d:b6:12:
64:75:fb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:32 2025 by rpki-client