Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/uTTbqnMKjjWsTP_pFyOWqVsFHxM.roa
File: uTTbqnMKjjWsTP_pFyOWqVsFHxM.roa (raw, json)
Hash identifier: NCC2En8qT6TdQfDObKUu47NG0SjMNMWEnrcUn2wnB2w=
Subject key identifier: B9:34:DB:AA:73:0A:8E:35:AC:4C:FF:E9:17:23:96:A9:5B:05:1F:13
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E61ADD1ECBCFB3B14F8BE7C55A6F2B36E
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/uTTbqnMKjjWsTP_pFyOWqVsFHxM.roa
Signing time: Thu 21 Mar 2024 15:42:45 +0000
ROA not before: Thu 21 Mar 2024 15:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 88.221.28.0/22 maxlen: 22
88.221.100.0/22 maxlen: 22
95.100.128.0/22 maxlen: 22
95.101.68.0/22 maxlen: 22
2a02:26f0:9700::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:ad:d1:ec:bc:fb:3b:14:f8:be:7c:55:a6:f2:b3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 21 15:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b934dbaa730a8e35ac4cffe9172396a95b051f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:f6:ec:21:6a:c2:0e:43:61:8a:24:f4:3c:
27:9e:b3:53:bb:d2:81:09:de:46:82:78:c4:5d:7c:
73:d9:52:4f:72:4e:21:96:e3:91:70:e4:87:ee:cb:
c6:80:c2:25:b0:ff:c3:0f:6e:5e:a5:81:34:82:ac:
08:95:6d:d3:8d:2f:2d:32:a9:02:54:f8:04:4a:fe:
88:07:f6:7a:fb:3a:97:70:4a:48:62:bc:39:7d:0b:
08:ec:17:bf:3c:2d:1d:73:33:3c:24:69:f7:28:61:
2a:05:3a:ee:7a:27:91:9d:7e:ed:4d:d8:33:c2:5e:
bd:eb:e3:92:4d:e8:4d:66:80:f7:90:d5:0b:5c:25:
0b:f5:06:ff:af:7f:25:af:a1:77:8f:f0:94:40:81:
03:f5:42:cf:ff:35:07:ff:be:03:a3:17:81:60:1f:
4a:c1:28:fb:b3:9b:dd:68:c5:9e:cf:2d:ea:75:75:
73:d8:32:1a:e2:65:46:f5:86:5d:f1:92:98:e9:35:
29:6c:99:e3:cd:52:9b:de:af:3f:85:99:f3:68:62:
c6:5c:a2:c1:9b:bd:5a:a5:61:f2:67:d6:0d:24:13:
63:d5:e7:56:41:0f:cb:03:8a:42:48:89:0c:c0:eb:
40:9e:7f:b6:27:52:16:da:21:0e:f5:83:21:34:8a:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:34:DB:AA:73:0A:8E:35:AC:4C:FF:E9:17:23:96:A9:5B:05:1F:13
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/uTTbqnMKjjWsTP_pFyOWqVsFHxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.221.28.0/22
88.221.100.0/22
95.100.128.0/22
95.101.68.0/22
IPv6:
2a02:26f0:9700::/48
Signature Algorithm: sha256WithRSAEncryption
02:d2:05:94:bc:87:ff:76:ba:16:46:25:b0:98:93:27:ec:bc:
ae:10:3b:7c:26:01:5d:36:07:d0:29:57:50:f9:b8:df:9f:e7:
39:61:1c:4c:84:f5:41:19:31:cc:3d:ca:b4:23:7f:6a:34:c9:
26:4e:34:87:c4:ab:e5:92:06:7b:7a:ab:41:45:54:00:18:51:
10:ad:0a:c2:b1:0b:7e:2a:d5:b4:f7:3c:4b:08:07:3b:00:ed:
09:c4:0a:71:1a:b0:05:66:ab:77:54:1a:fc:8f:c4:bd:95:53:
e8:51:41:69:77:0c:b6:bb:24:0a:c7:09:27:be:e2:68:8a:c6:
a2:a1:21:67:bd:fd:54:d7:ac:e3:aa:55:07:f9:5a:7d:4a:d2:
e5:92:81:85:c7:65:60:9c:b6:13:1b:1a:3f:42:5b:89:61:f6:
f1:6f:1b:43:7a:ba:0e:e3:4f:3b:e6:0c:93:88:d8:06:55:cf:
b9:1a:20:10:e1:96:fc:91:39:3a:55:93:56:73:a8:29:fb:b2:
b4:11:92:03:3b:bd:7d:94:c0:20:ff:3b:b6:b9:0e:ff:9c:1f:
9c:93:92:8e:e1:57:71:37:f0:dc:c6:d1:a1:e2:cd:8f:0a:6c:
c2:bd:32:99:4b:a4:40:6e:9b:cf:dd:ca:93:d9:06:50:31:e0:
66:35:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:24:26 2025 by rpki-client