Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/k5UWLEix1rMm3-kPDQ_LNh3wkDA.roa
File: k5UWLEix1rMm3-kPDQ_LNh3wkDA.roa (raw, json)
Hash identifier: /EuxDArQpzRfHl5kcPKqHqBf4iSRaLnjLpqBQ5z+nYQ=
Subject key identifier: 93:95:16:2C:48:B1:D6:B3:26:DF:E9:0F:0D:0F:CB:36:1D:F0:90:30
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0194F3ADCB0EFDAD31ECFE269101600B64DF
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/k5UWLEix1rMm3-kPDQ_LNh3wkDA.roa
Signing time: Tue 11 Feb 2025 06:24:00 +0000
ROA not before: Tue 11 Feb 2025 06:24:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 932
IP address blocks: 88.218.192.0/24 maxlen: 24
88.218.194.0/23 maxlen: 24
176.113.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f3:ad:cb:0e:fd:ad:31:ec:fe:26:91:01:60:0b:64:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Feb 11 06:24:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9395162c48b1d6b326dfe90f0d0fcb361df09030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:aa:a1:b2:95:69:32:83:35:03:40:e4:a8:
f2:8a:ca:dc:04:cf:35:fe:ab:93:69:0a:cf:7d:f2:
1b:82:0e:c9:bd:04:34:d5:8e:3c:6d:cb:61:a0:b0:
8c:11:1b:ea:26:70:cc:3d:be:9f:17:94:44:4a:72:
39:42:ad:52:bb:d0:ba:7b:77:ff:0f:94:9e:a0:e8:
ac:5f:f0:af:fb:23:cc:34:f0:e9:92:8f:00:f1:d1:
c6:65:44:c1:ea:3e:2b:e5:f2:85:33:ed:fe:d0:82:
bc:91:ee:e5:96:db:49:d1:e4:4e:3b:38:4a:fb:3c:
38:53:a2:5e:91:58:37:eb:f6:73:75:3d:d1:72:c0:
ae:f6:cb:4d:ce:79:e3:53:09:cf:d7:18:86:61:38:
da:ac:b1:66:98:36:4a:a2:13:44:d8:1c:fc:8e:49:
52:1f:70:5e:2f:47:cc:92:ec:88:11:17:d6:fa:25:
89:76:41:ac:60:55:38:35:d9:32:41:a1:51:50:51:
53:76:a2:11:dc:45:28:ea:6c:80:2e:fb:e8:88:3c:
8f:cd:ed:16:ce:11:97:8a:37:ec:4d:69:ae:b4:6d:
b5:eb:38:1d:d3:44:5e:24:86:fb:83:5f:a6:42:38:
4d:88:ca:0c:44:d7:e9:24:6b:2b:66:19:31:a8:f2:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:95:16:2C:48:B1:D6:B3:26:DF:E9:0F:0D:0F:CB:36:1D:F0:90:30
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/k5UWLEix1rMm3-kPDQ_LNh3wkDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.192.0/24
88.218.194.0/23
176.113.70.0/24
Signature Algorithm: sha256WithRSAEncryption
27:fb:b3:d3:a2:b2:01:e0:50:cb:11:ef:91:4b:ac:f1:ff:85:
fc:30:d7:9c:8e:85:b3:6d:53:4e:bd:cc:e2:23:ea:c2:6e:2c:
e6:12:1f:2f:93:0a:c4:d1:f1:18:89:53:10:81:0d:ab:b3:41:
a0:27:e1:76:7f:08:c8:ed:dc:a6:10:f1:02:f4:8e:2c:15:c0:
9c:2a:32:f6:83:dd:8a:10:1c:a7:77:01:17:15:b6:bd:fe:a3:
cd:48:b5:d7:dc:20:aa:57:b7:a8:b6:aa:a7:34:fb:24:94:b3:
9d:b5:81:46:85:88:b2:c8:40:e9:c7:b1:9e:6d:0d:72:10:ce:
06:d8:2c:43:4a:45:61:e3:62:83:8e:0b:57:a8:32:f4:44:c4:
0f:86:92:03:b5:10:27:50:3d:ae:5c:37:02:ec:87:61:81:9a:
0d:fa:62:3c:53:f9:34:4c:92:c6:ca:07:7f:06:0a:bd:b2:79:
2f:57:c6:3c:c1:06:25:7d:61:b0:7d:ac:1b:7c:52:e7:74:d5:
80:89:5d:2a:7a:d1:26:17:37:fc:57:31:0b:be:dc:5d:2f:cd:
0e:85:cf:cf:c0:0f:a1:ac:7c:95:2b:77:f1:77:d8:12:81:d4:
aa:d5:e5:53:66:53:94:67:92:ce:ac:c5:00:2c:86:e0:5c:22:
4e:51:e9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:42:16 2025 by rpki-client