Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/ev01UlTf8xnmaZcDqeNnJaY8mDw.roa
File: ev01UlTf8xnmaZcDqeNnJaY8mDw.roa (raw, json)
Hash identifier: bBrSvTSN1a9z7klG5jouNd18ngFrGD6DYe0uz0gXvaQ=
Subject key identifier: 7A:FD:35:52:54:DF:F3:19:E6:69:97:03:A9:E3:67:25:A6:3C:98:3C
Certificate issuer: /CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Certificate serial: 019424B3BCA6E5DEA2DCEFD9DFABB4B2290B
Authority key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/ev01UlTf8xnmaZcDqeNnJaY8mDw.roa
Signing time: Thu 02 Jan 2025 01:49:06 +0000
ROA not before: Thu 02 Jan 2025 01:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54574
IP address blocks: 45.88.192.0/22 maxlen: 24
2a07:aec0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:bc:a6:e5:de:a2:dc:ef:d9:df:ab:b4:b2:29:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Validity
Not Before: Jan 2 01:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7afd355254dff319e6699703a9e36725a63c983c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:89:5a:cc:e0:97:fe:98:2e:6b:4d:8a:01:
15:37:77:b2:71:89:73:24:c3:d2:73:49:43:8e:39:
4f:21:c9:f3:15:b7:bd:10:d2:a4:bd:4c:98:6c:81:
cf:70:ad:4c:3c:9c:e0:ac:b0:41:7e:f3:88:f3:7b:
c1:09:b6:3f:94:1d:5e:a0:50:10:a1:46:a5:3c:1a:
86:f7:8a:bb:d1:be:75:cb:25:57:c2:68:76:14:f9:
16:47:df:17:b5:33:ff:1d:7f:8b:24:e6:d5:e2:17:
3e:bd:48:60:e2:bf:5d:8d:af:7d:b1:c2:19:27:31:
f4:de:90:59:a5:ea:93:d5:c9:11:1a:88:7d:76:04:
a2:fe:44:cf:b0:94:67:ce:33:a0:61:5c:86:ba:dd:
f2:c4:dc:34:72:47:a3:04:d2:89:fd:33:34:8d:e8:
d3:a2:3b:6b:5f:00:c4:bf:30:6b:25:36:4b:80:95:
e1:44:65:a1:c0:b4:23:cc:ba:b3:26:24:16:a8:ef:
14:cc:cb:5d:35:2c:9c:dc:94:e2:bc:9c:40:bf:ee:
c1:62:dc:3e:d2:75:8b:5d:b6:e4:47:56:c6:c0:4e:
ea:f6:06:e8:ed:a9:20:1b:8f:58:cd:02:8e:76:f9:
87:13:dd:17:ef:8d:b9:f4:ff:15:62:70:7f:ee:83:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FD:35:52:54:DF:F3:19:E6:69:97:03:A9:E3:67:25:A6:3C:98:3C
X509v3 Authority Key Identifier:
keyid:38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/ev01UlTf8xnmaZcDqeNnJaY8mDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.192.0/22
IPv6:
2a07:aec0::/29
Signature Algorithm: sha256WithRSAEncryption
88:f1:c3:97:0b:a5:fc:b4:c0:4c:1b:2a:3c:f1:c6:24:3f:5b:
aa:18:92:78:58:ac:bc:3e:51:bc:61:5d:3a:a4:fb:48:04:44:
1a:e7:99:76:42:91:db:f4:7f:89:6c:b7:76:37:27:02:56:1f:
dd:ac:2a:53:e8:6d:05:0f:e7:0a:c5:e2:7d:f2:a8:ed:23:13:
6f:6f:f4:b8:4f:aa:83:a7:4a:50:75:06:d3:d7:c8:3c:b2:03:
b4:39:ca:ab:3c:2d:3e:27:a3:b1:f6:3b:95:74:87:d1:91:1e:
b7:68:17:cb:6f:2e:0c:c3:17:3e:af:da:f7:4e:b8:87:7e:34:
1c:88:4b:ba:ef:f0:9a:f4:ef:21:0e:5e:63:2a:95:5a:71:2f:
de:f4:74:8c:64:c2:f7:26:5a:00:22:79:fb:30:30:64:ec:ba:
d5:3b:8e:1c:01:38:dc:91:0d:b8:20:ab:c6:58:86:0d:88:42:
ae:da:f1:7b:92:fc:74:d4:b8:81:5e:19:ca:35:fb:27:9e:86:
ca:af:23:96:db:ee:99:49:70:e8:b4:8e:85:2a:b4:0f:44:a3:
38:2c:21:f7:99:a6:fa:ea:42:30:37:9b:cf:8a:25:3b:71:9b:
aa:5f:ec:a5:a7:16:3d:29:5d:5e:97:3f:b8:e1:d7:fc:17:77:
7b:31:94:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:36 2025 by rpki-client