Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/6JYhcO9BoWa6hG74bSXLJcyidyg.roa
File: 6JYhcO9BoWa6hG74bSXLJcyidyg.roa (raw, json)
Hash identifier: XnFdiRnqmtQIep2EdAiBxemtZ4zrbuaOpNLZRkhO5GE=
Subject key identifier: E8:96:21:70:EF:41:A1:66:BA:84:6E:F8:6D:25:CB:25:CC:A2:77:28
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 01941F8C63C306D66DFCFDE8969A946EA041
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/6JYhcO9BoWa6hG74bSXLJcyidyg.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200436
IP address blocks: 88.218.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:63:c3:06:d6:6d:fc:fd:e8:96:9a:94:6e:a0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8962170ef41a166ba846ef86d25cb25cca27728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:94:b0:7a:7a:cd:0a:e2:51:c1:6c:13:65:
19:88:2b:0b:11:e7:94:11:60:39:0d:ad:c5:24:56:
2c:5f:25:0d:fb:d7:3c:d1:80:07:d6:8d:0a:37:86:
a5:59:ae:e6:10:75:44:2c:be:1b:41:5b:a6:05:a6:
e7:3c:bd:f1:07:9a:71:92:74:a0:d9:d6:74:a0:c3:
a0:d8:46:2e:17:52:53:2f:1c:86:c4:f8:df:5b:af:
8e:0d:43:45:47:94:65:f9:b8:60:67:9a:71:a8:53:
0b:36:9a:9c:07:0c:80:7a:a5:c4:81:55:63:f2:f4:
b1:ac:86:5f:dd:64:01:ce:47:15:ff:d5:0a:db:9d:
5a:b3:d5:68:93:09:be:28:36:d4:41:3d:a7:09:fe:
6f:fd:dc:e0:0b:07:dc:aa:45:b1:24:6c:26:c1:ca:
42:54:37:ea:96:0f:25:10:af:90:98:fb:be:66:53:
b7:3f:34:72:5a:8d:4c:4a:c5:03:66:7f:d6:2f:8a:
e2:86:8e:f7:15:bf:4e:5d:19:02:12:72:42:db:c5:
6f:bb:4b:84:8f:3d:62:ba:40:87:3f:2c:19:bf:01:
59:00:5c:74:3d:5d:a1:aa:68:e0:95:b1:2c:00:a4:
85:ff:5e:f5:78:17:e7:73:7d:e0:3c:db:b1:06:c3:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:96:21:70:EF:41:A1:66:BA:84:6E:F8:6D:25:CB:25:CC:A2:77:28
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/6JYhcO9BoWa6hG74bSXLJcyidyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.18.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a1:a5:c2:98:8b:6a:b2:69:31:41:20:d3:fb:91:9c:12:66:
78:fb:a6:e6:3f:53:12:1b:37:da:db:8b:ff:0b:c7:0b:c3:2e:
68:51:ed:cc:c1:48:ef:6e:3d:b6:96:db:d4:bb:0d:a1:2b:cc:
dd:05:b7:ba:86:03:25:55:7e:a7:86:af:e2:36:70:ef:7c:04:
c8:c1:57:6b:78:26:c6:f8:51:dc:30:30:91:ae:bf:db:a1:cc:
68:db:46:dd:84:1e:c8:05:c6:ad:dc:29:e0:5a:69:8f:b8:93:
a5:5d:d8:6e:b1:e8:24:80:88:71:43:25:52:a5:96:1e:93:f3:
4c:08:0b:77:c1:06:36:3b:0a:26:e7:e2:e7:7a:93:c6:5a:45:
ac:bf:30:d3:b2:1a:73:e1:1d:27:26:29:b0:a6:b1:09:c8:99:
57:b7:64:30:eb:4b:78:af:53:87:8d:f4:7a:d0:b1:d1:5b:90:
6c:e2:d1:35:c9:41:ea:95:6d:c4:dc:03:12:2e:b3:d0:a8:ed:
58:cb:f4:78:d0:a2:36:1b:0e:02:cf:cd:0d:5e:45:9f:8a:9e:
d9:59:93:c4:82:b8:e7:0b:a5:0b:27:64:9b:9b:ba:49:32:38:
10:8d:68:6b:4c:9b:e3:f3:ef:da:c1:38:c8:9a:56:ac:85:ca:
0a:ae:7e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:44:44 2025 by rpki-client