Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/KOtOprlo9eWM-S3ee18Bkra0s7U.roa
File: KOtOprlo9eWM-S3ee18Bkra0s7U.roa (raw, json)
Hash identifier: YzsVJr77Droy7DJXTIqItUpDk3Xa+3GyD3WsTRtaj84=
Subject key identifier: 28:EB:4E:A6:B9:68:F5:E5:8C:F9:2D:DE:7B:5F:01:92:B6:B4:B3:B5
Certificate issuer: /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial: 0194236A0B56EDB954167561D7736AC7F43B
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/KOtOprlo9eWM-S3ee18Bkra0s7U.roa
Signing time: Wed 01 Jan 2025 19:48:59 +0000
ROA not before: Wed 01 Jan 2025 19:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29014
IP address blocks: 88.205.24.0/22 maxlen: 24
88.205.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0b:56:ed:b9:54:16:75:61:d7:73:6a:c7:f4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28eb4ea6b968f5e58cf92dde7b5f0192b6b4b3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:e9:49:09:5b:75:b6:8b:cd:45:0c:84:3e:
d8:ba:78:0f:21:8d:1b:8d:f9:9b:d1:fb:b3:aa:fb:
d6:ab:3e:c4:2c:a9:de:9b:2c:92:0e:a2:42:68:4d:
68:b7:a6:ad:48:f0:64:7c:74:35:28:75:4c:d0:4d:
44:c0:a2:c5:ce:fc:a7:07:86:49:c7:9f:b8:a4:df:
2d:0e:7c:61:26:32:6a:d1:8c:84:5e:69:86:32:ba:
9e:61:9c:71:38:7c:f7:7d:c1:c8:b0:a7:1b:78:34:
f1:fd:cd:f5:3d:4e:4a:92:85:1a:96:6e:4f:69:78:
0f:aa:2a:50:13:c2:96:98:2b:49:b8:03:e8:d8:df:
4d:44:77:ec:27:2a:14:45:62:cd:98:69:ca:9d:a0:
52:94:ce:a5:24:91:83:3d:e6:65:3d:37:c3:97:47:
a5:af:f9:de:2e:26:cf:70:3f:11:f9:be:c9:38:87:
36:f6:bb:de:a2:90:9e:ca:8a:97:ee:b2:19:e1:41:
6e:ad:73:02:1b:f4:b0:d6:48:d0:db:fb:bc:75:c7:
ef:ed:90:80:1c:84:c1:3e:9c:fd:cd:10:48:77:2a:
95:15:11:92:8c:c5:1d:e7:2d:23:be:0f:ea:b1:86:
61:96:d8:b3:a4:02:f2:59:80:97:ee:c3:eb:06:b0:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EB:4E:A6:B9:68:F5:E5:8C:F9:2D:DE:7B:5F:01:92:B6:B4:B3:B5
X509v3 Authority Key Identifier:
keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/KOtOprlo9eWM-S3ee18Bkra0s7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.205.24.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:74:59:57:a4:34:6f:e5:e2:eb:ba:12:a6:fe:01:20:38:99:
9a:5f:5e:1c:80:69:e8:6b:16:ca:e2:48:38:f4:01:29:68:d8:
40:25:13:37:38:68:aa:a6:cd:9d:41:63:c1:96:17:3c:40:61:
e9:e4:49:7e:f2:aa:ff:16:e9:cb:28:e7:f2:e5:15:69:ab:6e:
7e:ef:da:bc:aa:c0:e1:97:c5:bf:e4:47:fc:2e:16:ce:b4:c4:
21:ab:28:8d:f9:96:b4:ab:ab:b6:a1:3c:e3:7b:1d:77:63:52:
ac:c4:96:ce:04:d2:83:bc:05:e8:9f:03:2e:b7:59:e9:22:59:
e7:14:ae:a1:eb:c2:0c:17:9a:12:d7:90:8f:ea:b4:9c:ed:aa:
63:20:ff:61:54:51:cc:35:07:ba:69:30:6b:cd:5c:78:47:ae:
cd:62:60:59:df:d6:39:b5:bb:ab:fd:85:3f:7b:c0:7f:82:3b:
58:af:9d:0e:9f:d6:36:1d:a8:7d:68:c9:23:e0:c3:2d:ec:7a:
9c:d3:5f:f0:44:5f:7a:06:f9:8f:8f:f2:0a:a6:bd:ea:2d:6c:
e3:a5:6a:40:df:6c:9c:60:84:82:c0:e5:04:77:86:5f:ed:9d:
80:a5:b4:0b:99:3d:b8:d7:f8:89:be:ad:47:a6:51:6c:16:20:
2e:2d:0a:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjagtW7blUFnVh13Nqx/Q7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNjhkNjk5ZDFhOTQ1N2M3OGFjZmJlYzAwNGY5ODY3N2Fh
NGNjMTYwHhcNMjUwMTAxMTk0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGViNGVhNmI5NjhmNWU1OGNmOTJkZGU3YjVmMDE5MmI2YjRiM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvzpSQlbdbaLzUUMhD7YungPIY0b
jfmb0fuzqvvWqz7ELKnemyySDqJCaE1ot6atSPBkfHQ1KHVM0E1EwKLFzvynB4ZJ
x5+4pN8tDnxhJjJq0YyEXmmGMrqeYZxxOHz3fcHIsKcbeDTx/c31PU5KkoUalm5P
aXgPqipQE8KWmCtJuAPo2N9NRHfsJyoURWLNmGnKnaBSlM6lJJGDPeZlPTfDl0el
r/neLibPcD8R+b7JOIc29rveopCeyoqX7rIZ4UFurXMCG/Sw1kjQ2/u8dcfv7ZCA
HITBPpz9zRBIdyqVFRGSjMUd5y0jvg/qsYZhltizpALyWYCX7sPrBrAXhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCjrTqa5aPXljPkt3ntfAZK2tLO1MB8GA1UdIwQY
MBaAFFpo1pnRqUV8eKz77ABPmGd6pMwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMjhiYTYtYWFhZi00ZDMzLWI4ZGMt
MGFlZTM2MGIwYmE0LzEvS090T3BybG85ZVdNLVMzZWUxOEJrcmEwczdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lMjhiYTYtYWFhZi00ZDMzLWI4ZGMtMGFlZTM2MGIwYmE0
LzEvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWM0YMA0G
CSqGSIb3DQEBCwUAA4IBAQA8dFlXpDRv5eLruhKm/gEgOJmaX14cgGnoaxbK4kg4
9AEpaNhAJRM3OGiqps2dQWPBlhc8QGHp5El+8qr/FunLKOfy5RVpq25+79q8qsDh
l8W/5Ef8LhbOtMQhqyiN+Za0q6u2oTzjex13Y1KsxJbOBNKDvAXonwMut1npIlnn
FK6h68IMF5oS15CP6rSc7apjIP9hVFHMNQe6aTBrzVx4R67NYmBZ39Y5tbur/YU/
e8B/gjtYr50On9Y2Hah9aMkj4MMt7Hqc01/wRF96BvmPj/IKpr3qLWzjpWpA32yc
YISCwOUEd4Zf7Z2ApbQLmT241/iJvq1HplFsFiAuLQr3
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:52 2025 by rpki-client