Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/YBPeLh_T-L1Tqt-FUpDSrclc_FE.roa
File: YBPeLh_T-L1Tqt-FUpDSrclc_FE.roa (raw, json)
Hash identifier: kKn2k2lgciH+7PhO4iBXkVMYjBAMB2wBbcZZ5DcmPXY=
Subject key identifier: 60:13:DE:2E:1F:D3:F8:BD:53:AA:DF:85:52:90:D2:AD:C9:5C:FC:51
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 01904AA08DF679BA6EB80320AFAE668CAF71
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/YBPeLh_T-L1Tqt-FUpDSrclc_FE.roa
Signing time: Mon 24 Jun 2024 14:22:34 +0000
ROA not before: Mon 24 Jun 2024 14:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200436
IP address blocks: 88.218.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:a0:8d:f6:79:ba:6e:b8:03:20:af:ae:66:8c:af:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jun 24 14:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6013de2e1fd3f8bd53aadf855290d2adc95cfc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:68:df:c5:90:3a:c9:1e:06:63:b7:24:ca:
f1:7f:61:09:da:03:93:d1:6e:f2:78:c7:d6:f0:7f:
4a:88:82:49:46:3d:ba:63:e9:b9:03:5e:06:b0:aa:
fa:41:9e:87:7b:a6:b3:23:91:bd:b0:3b:1a:ca:c7:
f7:e0:b5:d9:b3:71:3f:28:32:e0:35:e0:d8:71:d6:
b2:48:6c:4a:0e:ab:4f:90:a5:26:0e:8d:cb:73:d0:
8f:d6:62:e5:8f:99:fd:43:95:02:90:be:19:99:8f:
fa:a4:27:e9:fc:03:86:1d:e9:be:92:7d:41:3c:e3:
b9:76:20:18:9b:20:73:15:78:2e:39:98:ad:35:62:
bb:28:01:b3:52:29:31:4a:4e:3d:72:60:5f:96:c1:
6f:94:16:8c:b7:ea:be:98:e6:a8:10:d1:0b:47:03:
be:a0:37:b2:5f:38:3c:e6:ce:62:61:c0:06:44:0c:
bd:6f:f7:e2:0d:1f:34:4b:58:af:33:9c:f9:0c:21:
2f:12:86:d8:16:f1:fc:00:21:d7:5e:aa:35:3a:2e:
ab:9d:cd:38:d0:c3:c6:bf:d7:2a:a8:a9:31:79:22:
fe:8e:9f:d8:fc:26:50:52:a3:2d:90:40:d8:94:a4:
5f:99:4a:28:11:7f:fc:b3:0d:41:f5:31:59:6b:91:
d0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:13:DE:2E:1F:D3:F8:BD:53:AA:DF:85:52:90:D2:AD:C9:5C:FC:51
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/YBPeLh_T-L1Tqt-FUpDSrclc_FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.16.0/24
Signature Algorithm: sha256WithRSAEncryption
73:00:0e:7d:96:d3:bb:c5:63:9c:11:6a:23:bf:a8:ff:49:26:
88:04:de:81:93:c1:16:1d:0e:8c:6f:fa:29:39:14:d3:bd:a8:
a2:3e:ad:90:57:26:32:0e:3b:fb:6a:9c:80:94:ed:1b:05:2d:
48:20:39:c8:25:a6:91:24:70:6c:56:f0:0f:c2:54:7f:42:7a:
00:f0:c9:b0:73:74:5d:f3:09:77:98:8c:07:f2:21:17:b1:a3:
cf:39:09:c3:a3:05:f1:63:ad:90:86:a4:65:56:a0:4c:0e:c3:
82:60:30:33:b8:71:9a:52:e5:9d:30:d3:df:5c:07:a4:56:d1:
6b:8c:9d:10:18:fa:9f:a2:1d:17:dc:4e:0f:b6:84:12:86:8a:
bd:1e:23:0e:de:c1:0a:58:72:a4:19:4d:47:fc:8b:0b:5b:b3:
c9:65:d9:2d:a2:1f:bd:1d:ad:12:22:50:6c:bd:9b:44:fe:bf:
7a:7e:d2:41:c7:8e:11:63:29:1f:98:09:0d:ae:12:7a:88:b6:
8c:0d:66:c1:97:b9:f7:9c:7d:8a:1f:10:3a:c7:9b:d1:90:7a:
f3:35:3d:a0:49:a1:57:d1:94:fe:4d:82:04:97:a4:76:11:0a:
ed:a0:3f:73:b1:8d:5d:83:2b:d3:38:c4:fe:37:39:26:ad:6a:
98:af:13:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:02:12 2025 by rpki-client