Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/vOFudBdxiFDJEx5NtI5aOWe6eqk.roa
File: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (raw, json)
Hash identifier: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=
Subject key identifier: BC:E1:6E:74:17:71:88:50:C9:13:1E:4D:B4:8E:5A:39:67:BA:7A:A9
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 0194266C0C3CAFB581AD3E47D28F125D83C6
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/vOFudBdxiFDJEx5NtI5aOWe6eqk.roa
Signing time: Thu 02 Jan 2025 09:50:02 +0000
ROA not before: Thu 02 Jan 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58273
IP address blocks: 88.97.112.0/20 maxlen: 24
88.97.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0c:3c:af:b5:81:ad:3e:47:d2:8f:12:5d:83:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Jan 2 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bce16e7417718850c9131e4db48e5a3967ba7aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:1b:cd:fb:be:ae:bb:50:78:b2:cd:9c:8d:
d2:c8:cd:ec:e1:40:78:da:25:32:79:4e:3d:5f:9f:
60:e7:03:5e:2b:21:0f:70:38:ce:ac:62:8a:f1:9a:
5e:85:17:fe:e9:92:86:e9:8a:70:14:70:57:a1:fa:
d7:0f:aa:aa:d6:26:6e:bd:98:d4:fe:2e:31:7c:6c:
00:6c:21:f6:76:d1:47:33:12:51:01:ac:de:4e:63:
41:9f:98:6d:9d:4e:1b:4b:19:20:51:c1:fd:7e:e9:
f7:85:75:3d:bc:0a:50:50:f6:fc:9e:54:d9:7a:53:
d2:a7:ca:1f:56:d6:bc:c0:dc:20:91:dd:18:46:3f:
fa:a7:02:b8:26:25:c8:88:11:45:29:89:ec:db:7e:
60:7f:bc:f3:6b:ae:51:14:7b:96:3b:cd:2b:48:bd:
08:32:28:41:df:d9:06:19:fd:33:12:42:31:0b:fe:
99:e4:ff:d0:c1:ed:f1:04:b5:5b:c7:7d:46:00:89:
d6:92:f8:47:2b:ef:7d:8e:0f:2c:2f:32:cb:3a:d1:
92:a7:cb:f0:e0:93:2c:ee:a6:36:69:41:2a:47:7a:
b9:f3:41:38:e6:fa:8d:52:88:b2:3b:de:48:71:57:
07:96:b4:48:26:f5:75:45:b5:09:31:fb:6f:28:bc:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E1:6E:74:17:71:88:50:C9:13:1E:4D:B4:8E:5A:39:67:BA:7A:A9
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/vOFudBdxiFDJEx5NtI5aOWe6eqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.97.112.0-88.97.159.255
Signature Algorithm: sha256WithRSAEncryption
56:08:6d:13:1a:ef:36:c2:31:c9:30:02:a7:ac:b4:6f:70:97:
7e:66:47:56:19:bc:42:2f:38:fd:09:a4:ba:1a:f7:83:29:71:
6e:d1:71:33:94:43:13:3d:dd:a6:ed:2c:75:14:cc:91:4f:27:
31:4e:0d:26:37:a3:ae:75:ab:d4:7c:05:73:00:7a:31:93:25:
72:6a:38:8c:c5:c0:a7:ad:ca:c3:fe:71:b3:25:8b:58:69:2b:
89:e6:41:24:0f:c2:60:8c:24:4a:24:d3:96:11:93:9d:ad:2e:
d0:67:6a:03:9c:04:67:ce:ff:2e:72:6b:27:da:04:78:87:7d:
9d:22:a7:de:31:cd:84:40:5c:a7:2e:ab:03:6d:03:44:0c:6b:
c1:e3:52:eb:dd:3a:38:6d:ad:f0:7a:a8:ac:61:2c:52:41:02:
55:00:71:2f:26:22:97:9c:58:71:16:9d:32:e1:78:47:de:6e:
d4:fd:a8:68:b4:7f:75:0d:16:63:31:93:f2:30:de:c6:38:4e:
58:3d:4c:8f:98:7a:c1:2e:03:59:d1:c9:90:47:d0:56:2f:0f:
b5:65:3a:68:f0:75:57:75:dc:02:e8:a7:f8:d1:c2:51:eb:75:
3f:dd:4f:cf:e2:0c:be:46:38:c6:bc:f1:03:18:08:1b:ea:6c:
8e:32:e1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:46:00 2025 by rpki-client