Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa
File: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (raw, json)
Hash identifier: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=
Subject key identifier: 70:E2:CF:77:92:EE:FF:7C:30:EE:8F:9C:76:15:81:EF:E4:DF:74:D6
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019425220262786CFECBD5A904CA9C17EBA9
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa
Signing time: Thu 02 Jan 2025 03:49:33 +0000
ROA not before: Thu 02 Jan 2025 03:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203999
IP address blocks: 185.188.63.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:02:62:78:6c:fe:cb:d5:a9:04:ca:9c:17:eb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 2 03:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70e2cf7792eeff7c30ee8f9c761581efe4df74d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:bb:bf:ab:3f:1d:a5:85:4a:16:ba:ec:1f:
be:49:fc:7a:95:21:66:8f:02:b5:3e:be:e9:c4:b5:
09:2b:01:56:79:e5:a6:1b:e3:7f:a1:c2:c0:56:91:
9b:e0:1c:8c:2d:12:1f:04:9e:31:5d:70:5a:ba:3c:
5a:cc:a9:1e:56:e9:a5:1f:0b:dd:0b:e2:7a:5c:8e:
0f:22:63:04:cc:b0:15:1a:ba:82:0d:ed:ba:39:74:
b5:8f:d2:8a:2b:1a:97:7e:c6:d5:ca:c5:b8:1f:db:
ce:4a:f0:ff:81:4d:bd:54:f5:b4:bc:5b:25:3e:97:
f7:fc:00:be:f8:01:cc:74:af:0d:68:08:9b:ee:2d:
16:c8:83:1a:05:4d:74:53:14:e2:32:d5:f7:34:fe:
65:fb:e9:9b:0c:19:b0:4c:94:f7:c9:13:73:df:36:
10:e3:07:61:ae:c7:7a:a5:23:ee:68:bb:0f:83:9c:
5b:56:4b:3e:9f:ea:2e:ab:ab:7b:d2:b9:25:79:71:
3c:81:d6:42:1f:c4:d9:04:e3:fe:11:cd:fe:ad:30:
c6:05:bd:e9:5b:c5:84:ce:3c:cf:44:1e:85:bc:35:
49:6f:17:5f:e5:87:1d:ab:6b:60:08:ca:dc:61:05:
66:2f:37:01:9a:19:27:3f:58:2d:69:00:75:55:a1:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E2:CF:77:92:EE:FF:7C:30:EE:8F:9C:76:15:81:EF:E4:DF:74:D6
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:d9:6b:62:4a:48:0f:f8:18:da:90:b0:4c:1e:42:9d:4a:f7:
de:ef:0f:52:86:f5:05:71:83:80:03:79:86:ff:5f:91:d0:a0:
ec:8d:d3:8e:65:7f:df:a4:e7:76:77:5e:a0:55:ee:1b:d9:24:
72:f7:e1:5a:b1:6f:34:66:a8:2b:98:77:9a:43:9f:6f:d6:b3:
e3:a2:96:09:d5:de:91:4f:bd:65:91:38:01:3c:5e:34:52:cc:
95:54:f4:d2:f5:bb:ff:ec:e7:7f:c7:78:89:e3:4f:be:52:0f:
ac:fd:cb:1c:31:b7:85:29:f4:d1:21:b6:36:a8:d9:0f:39:3c:
be:c0:38:dd:f9:86:84:b4:5c:92:f5:50:71:e7:a3:8d:7b:34:
69:a9:bd:e3:15:6d:8d:7a:bc:01:0d:10:12:76:ec:4b:5f:77:
51:63:59:17:96:2c:8a:a2:cd:80:58:ef:29:7d:97:20:b2:2a:
3f:c7:9e:81:78:45:14:00:b4:74:66:cb:d6:3c:ff:ea:d0:af:
0d:e2:d7:07:17:bd:61:0d:51:8a:74:5e:7a:5e:66:d6:6f:28:
bb:11:19:e4:85:a6:b9:cb:7f:28:1e:2d:c9:6f:45:62:1b:a4:
f5:a7:50:f6:b4:18:69:d0:8a:20:8f:b4:69:ae:d6:e4:a9:1e:
71:aa:65:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:21:39 2025 by rpki-client