Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/8h_JebN18U-DQLa7g_VNQTnzmD4.roa
File: 8h_JebN18U-DQLa7g_VNQTnzmD4.roa (raw, json)
Hash identifier: qaZfGE5JnXlAKOoOZ4NfG/E3st+EoiejWrngTgnqPGg=
Subject key identifier: F2:1F:C9:79:B3:75:F1:4F:83:40:B6:BB:83:F5:4D:41:39:F3:98:3E
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019558C461D7BCF68B203D95AB5BAC7379B4
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/8h_JebN18U-DQLa7g_VNQTnzmD4.roa
Signing time: Sun 02 Mar 2025 21:30:19 +0000
ROA not before: Sun 02 Mar 2025 21:30:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 188.209.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:58:c4:61:d7:bc:f6:8b:20:3d:95:ab:5b:ac:73:79:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 2 21:30:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f21fc979b375f14f8340b6bb83f54d4139f3983e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:5c:93:b7:17:0f:17:6a:4e:12:5f:2c:90:
17:90:4a:ff:02:0b:23:79:c5:2a:a7:2d:82:91:29:
03:98:f5:e2:66:de:e1:b0:72:26:e1:55:ed:95:a0:
f7:b9:23:19:ce:67:80:66:3b:22:e9:08:ac:bd:ec:
1f:15:8a:17:f2:14:32:7f:76:f3:c9:44:f6:52:36:
dd:48:af:62:9e:a4:cb:11:28:c8:e6:a1:94:86:44:
e4:16:63:4a:08:da:82:14:ab:ab:bc:55:54:64:03:
db:f8:91:f8:27:eb:da:72:02:25:e4:e5:b7:c4:90:
25:c7:59:bd:c1:6e:cc:b3:68:95:d5:a7:ba:49:b6:
53:9d:0a:40:d6:4b:e7:eb:d2:65:76:ec:f2:b5:df:
14:82:70:3e:37:35:c9:0a:b8:f1:e3:a3:16:fa:e4:
76:11:62:ac:d7:b7:5a:5a:e9:62:85:21:50:e4:a6:
d7:88:d5:3e:51:90:0b:ae:fd:63:cd:15:64:40:04:
d6:2e:c0:70:3f:6e:5b:3b:4b:64:ab:a2:bf:e6:7e:
ce:ec:7a:69:73:b7:14:8a:fb:6b:47:a5:eb:77:7a:
ff:1e:b9:0e:77:15:fa:c2:e6:05:f2:67:2a:3f:b7:
e5:78:21:65:3a:f1:e6:37:f1:1a:fe:a9:6a:af:a4:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1F:C9:79:B3:75:F1:4F:83:40:B6:BB:83:F5:4D:41:39:F3:98:3E
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/8h_JebN18U-DQLa7g_VNQTnzmD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.138.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d4:b0:4e:76:30:e5:6d:4d:fa:05:0f:ec:28:e2:bc:ff:b2:
6f:e0:19:22:86:00:fb:2c:fb:e9:a9:ce:77:75:c7:d4:bd:b7:
3e:fd:ab:61:b9:d9:fb:e9:5e:af:b9:67:6b:03:86:3c:b0:76:
d4:46:90:6f:75:1a:ef:f4:a0:20:bf:c1:1c:b2:a8:03:1c:da:
3f:00:7c:5e:18:ce:e3:95:06:be:78:31:81:d1:5e:41:3f:1c:
4c:33:14:a2:2d:e7:1f:18:37:2e:74:5a:db:46:a3:d6:de:ca:
52:70:4d:c9:e4:5f:b4:4e:34:dc:04:ea:9a:15:80:1d:0e:8b:
73:41:df:ae:cc:0b:36:43:d9:cc:b7:16:3f:a0:7a:5d:60:ab:
2e:45:2d:6d:e1:9a:08:a6:db:b8:71:a0:f2:ca:0d:bc:96:04:
90:e5:f1:51:c2:22:f9:4a:2a:56:c3:e4:cd:98:25:c6:be:eb:
4b:ed:f6:86:e5:48:af:d2:7d:3d:f7:d2:e5:9a:b2:94:f8:5d:
cb:99:4c:e1:33:a1:a8:95:07:2f:38:40:07:76:de:17:d9:d8:
fe:f3:fb:9d:a4:aa:02:50:fb:64:cc:bf:70:de:b0:28:8b:3a:
2c:73:ae:8b:06:bf:dd:bb:7f:ef:b1:0a:80:fe:14:8b:3a:fb:
38:ee:b2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:42 2025 by rpki-client