Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/248bDK_2X4s3D78cLTN1zTJo8ls.roa
File: 248bDK_2X4s3D78cLTN1zTJo8ls.roa (raw, json)
Hash identifier: kLQEr1R8+53FUqqBvs455Xwu5a5on81N6ifpRavsyZA=
Subject key identifier: DB:8F:1B:0C:AF:F6:5F:8B:37:0F:BF:1C:2D:33:75:CD:32:68:F2:5B
Certificate issuer: /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial: 01941F8C2CDCB3760880219973E95CC0F10E
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/248bDK_2X4s3D78cLTN1zTJo8ls.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48920
IP address blocks: 195.88.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2c:dc:b3:76:08:80:21:99:73:e9:5c:c0:f1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db8f1b0caff65f8b370fbf1c2d3375cd3268f25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:61:87:55:55:9d:c7:f9:e0:c9:79:72:d2:
9a:9b:3a:03:6f:46:39:ae:39:ea:8f:45:18:d1:b8:
cf:d5:cb:82:f1:67:3f:5f:86:06:15:95:87:08:ab:
1d:9b:a3:45:51:dc:79:d5:81:83:33:b0:d7:ef:c3:
49:ee:06:21:34:26:93:d7:2d:aa:81:a3:cb:fd:b9:
5b:2e:8f:1c:32:af:3d:cb:3d:7a:6e:1b:9a:07:f4:
f2:fa:d1:1e:20:66:7f:0f:b1:59:8c:dc:b9:8f:0c:
a3:f0:fc:ac:b6:f0:90:16:7e:23:73:ab:7f:34:43:
c8:dc:62:45:24:c4:00:6b:84:f0:8e:38:df:23:1d:
21:e3:67:2b:46:76:f8:b3:de:e3:1e:11:33:e6:ca:
99:6e:be:4d:49:09:b3:bb:02:39:3f:c0:37:d8:ed:
ac:e7:c0:59:17:f9:f2:ce:e5:40:b3:43:5b:96:c2:
7e:0c:4f:ef:09:e9:22:21:91:10:fa:b0:21:a2:ba:
d4:3c:3c:01:a8:db:5f:8f:f3:02:14:5a:6f:21:c1:
d1:f8:cd:f7:bb:bc:75:b5:85:3b:91:6b:d5:f5:f7:
77:3b:31:dc:4d:3c:05:45:2d:27:f3:c6:a3:6d:00:
1e:81:43:c3:5a:5b:cb:1a:9d:7d:6f:ae:4c:df:88:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8F:1B:0C:AF:F6:5F:8B:37:0F:BF:1C:2D:33:75:CD:32:68:F2:5B
X509v3 Authority Key Identifier:
keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/248bDK_2X4s3D78cLTN1zTJo8ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.84.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:1a:be:6b:5c:f4:e6:dd:59:07:fb:33:8e:62:0b:b5:e8:08:
26:2c:8a:90:97:12:b4:df:67:f1:33:f9:0e:de:ff:c3:75:27:
e5:7b:21:7e:60:42:cd:23:2c:f2:dd:4f:6c:ef:90:65:c6:1a:
39:e6:98:1f:d1:76:2a:34:18:1d:1d:a0:59:8d:e9:c6:23:5f:
51:46:23:e0:9e:1d:76:5a:f4:4a:8f:d0:90:61:17:7c:63:12:
cb:b7:f4:68:8d:be:42:07:86:e5:65:db:df:5a:52:13:40:fb:
f5:e2:a3:ab:9e:9d:7c:84:72:8f:3b:c2:16:88:d2:a6:57:62:
e6:ed:0e:b1:6f:85:3b:6e:05:76:58:11:ff:d6:50:a5:71:40:
9b:ea:81:2d:f9:e4:4d:ea:e3:80:a2:cf:58:df:39:a9:4b:5a:
3d:ee:3d:1a:ee:3b:5b:99:2d:24:f8:78:11:95:99:4c:53:af:
26:bb:a6:b3:50:38:21:45:48:7c:3e:26:7d:2f:44:6f:a1:54:
4b:f9:fd:29:bf:3d:e1:55:d5:cc:07:4f:51:60:0b:12:47:81:
8a:70:67:37:3c:f5:b8:4b:b8:0a:c5:5d:3f:51:aa:aa:75:49:
74:c2:6e:3a:04:5b:75:c6:9e:9b:b3:c9:4d:d5:6a:a9:0e:5d:
65:96:a0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:00 2025 by rpki-client