Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/ptIzMM5pGR32qdt6NWym3eUNiak.roa
File: ptIzMM5pGR32qdt6NWym3eUNiak.roa (raw, json)
Hash identifier: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=
Subject key identifier: A6:D2:33:30:CE:69:19:1D:F6:A9:DB:7A:35:6C:A6:DD:E5:0D:89:A9
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019428260FB46F67C640B226F0A44B27CE89
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/ptIzMM5pGR32qdt6NWym3eUNiak.roa
Signing time: Thu 02 Jan 2025 17:52:50 +0000
ROA not before: Thu 02 Jan 2025 17:52:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 188.191.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:0f:b4:6f:67:c6:40:b2:26:f0:a4:4b:27:ce:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 17:52:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6d23330ce69191df6a9db7a356ca6dde50d89a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:d1:27:ce:0b:cd:80:eb:90:59:e8:2b:b0:
ba:56:cd:18:21:8e:d4:5d:4e:a8:e1:9b:42:7a:ab:
14:b6:ba:7a:3e:8f:65:db:10:b1:6e:b9:93:f2:9d:
ff:46:38:89:8d:4e:88:9a:eb:c8:91:18:b3:c3:35:
3e:11:99:6c:75:46:f0:bf:e0:60:0e:c4:c5:d5:3c:
ab:cc:89:91:f8:61:6d:1e:4a:28:65:74:19:03:c2:
3c:ce:65:66:19:98:fa:af:3c:73:9a:f7:4d:ae:61:
2a:56:e7:3a:e6:b2:bc:6a:b1:96:02:ca:a0:e2:e1:
05:c0:b2:73:5d:12:46:f3:1d:02:f0:40:df:b4:a5:
4e:2f:b6:70:0d:51:27:92:80:74:51:63:28:a6:bb:
97:cd:96:54:39:ee:f6:da:d1:84:ef:7e:73:23:d1:
b1:9b:2e:61:27:65:5d:13:31:ee:f2:db:5c:9f:0c:
88:e4:8e:e5:6a:5c:fa:83:e3:51:38:f3:e8:69:4d:
b3:53:b4:8a:8b:aa:78:35:f8:aa:81:b0:35:30:4a:
7e:ba:d8:4a:8c:2b:2b:b6:3f:14:14:d5:29:dd:3f:
39:22:3d:63:3a:1b:7e:3d:9b:fc:8b:65:41:b5:72:
d1:29:9c:45:d1:4c:f7:8b:fe:37:33:3b:e0:f8:aa:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D2:33:30:CE:69:19:1D:F6:A9:DB:7A:35:6C:A6:DD:E5:0D:89:A9
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/ptIzMM5pGR32qdt6NWym3eUNiak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.102.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f7:88:78:1b:7d:ad:8e:71:6f:3d:68:12:59:e1:e1:8c:21:
16:4a:89:c0:7f:19:37:bb:d5:69:c1:f2:5e:95:1e:50:eb:3b:
ac:53:64:da:f1:ce:f5:2f:3d:57:75:71:8e:ac:7d:c3:17:10:
19:5e:4f:92:23:e7:d9:ce:e8:31:2b:6a:f5:24:d8:e9:5d:3a:
f1:36:6b:a9:b7:ba:f4:92:cc:44:93:3c:32:fe:a4:b1:44:04:
0e:b4:5e:ec:58:4d:50:18:c1:73:ec:24:55:e9:d1:ca:c9:80:
66:f7:0b:2f:bc:99:a7:53:50:57:5b:f0:1d:bd:b5:3c:99:d2:
51:37:c5:38:f7:9c:cd:df:4b:f5:bb:c0:eb:4d:df:43:90:0f:
5b:31:51:1d:dc:a8:31:47:05:b8:36:3e:b2:06:77:dd:76:e7:
59:87:b9:93:7c:65:e4:b3:49:6b:2e:63:40:15:08:ba:32:53:
2f:35:5d:11:5c:37:d0:6b:66:6a:9b:b2:21:8c:63:db:ea:e3:
4d:7f:19:d3:2d:15:04:16:1e:95:e0:79:a6:ef:37:e4:28:ce:
b5:1d:a9:de:1a:b3:69:74:27:67:ed:2d:aa:08:bf:8c:ad:70:
da:77:72:76:06:ac:9e:f5:60:dc:2a:4b:5e:3b:db:8b:37:89:
f3:f1:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:56 2025 by rpki-client