Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/f59xenCUDXDDeMwa_nEJN7nMCGQ.roa
File: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (raw, json)
Hash identifier: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=
Subject key identifier: 7F:9F:71:7A:70:94:0D:70:C3:78:CC:1A:FE:71:09:37:B9:CC:08:64
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019427B5B4B6C209B8FA33ADFC129CD55B33
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/f59xenCUDXDDeMwa_nEJN7nMCGQ.roa
Signing time: Thu 02 Jan 2025 15:50:07 +0000
ROA not before: Thu 02 Jan 2025 15:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 188.66.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b4:b6:c2:09:b8:fa:33:ad:fc:12:9c:d5:5b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 2 15:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f9f717a70940d70c378cc1afe710937b9cc0864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:56:ba:00:b0:aa:09:cd:d3:2a:5b:6c:30:
5f:a3:92:72:a8:43:f6:a6:f4:ff:db:6a:88:94:2a:
aa:3c:dd:6b:b6:ea:dd:00:30:7e:b8:73:80:8f:4d:
4e:16:66:38:2e:b8:e8:a8:51:cc:b9:da:ec:d7:fd:
35:06:8b:24:51:63:c0:98:db:8c:47:eb:16:31:4b:
dd:6d:f1:8c:b1:4a:b7:40:b5:6b:19:09:a7:23:d6:
47:b5:f5:8a:ae:1a:4c:16:7f:97:14:91:70:c0:d7:
c7:2d:eb:4c:53:f4:92:93:8c:ff:be:b8:d6:0c:5e:
47:0b:b6:f4:43:6a:43:4a:33:ea:91:cb:f4:10:93:
1a:c1:89:d5:76:16:39:2f:be:2d:a7:16:66:e2:04:
07:7b:9d:64:cd:4d:fa:f6:ec:e0:9a:4a:31:5b:7c:
e5:85:1f:66:d0:95:20:9b:ca:b2:20:85:67:0a:73:
40:3c:f6:ca:e1:fd:59:5e:91:6e:47:29:0e:22:f8:
5d:a8:f2:59:28:e8:0c:1f:82:4a:0a:b1:5a:76:5e:
c6:dc:90:e0:da:c7:f8:45:33:8f:da:a8:17:38:d9:
8e:32:7e:a1:32:db:56:9a:81:d8:f3:fd:0c:58:41:
58:8d:cb:2a:94:24:8a:f2:ef:34:96:a2:6e:01:35:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9F:71:7A:70:94:0D:70:C3:78:CC:1A:FE:71:09:37:B9:CC:08:64
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/f59xenCUDXDDeMwa_nEJN7nMCGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f5:d1:98:6a:43:dc:7d:28:80:6a:38:e0:56:ed:40:a6:3a:
54:c3:34:fb:64:e0:37:ed:70:b1:1d:77:54:4f:c5:9f:a8:88:
ec:19:1a:5a:7a:6a:0f:b4:36:50:de:a9:a3:24:93:d1:cc:9c:
a0:55:ca:3a:b3:a5:56:c9:19:de:13:09:d9:87:f4:1a:29:8f:
b7:82:11:6c:07:fb:15:b5:3b:f1:25:29:31:28:df:63:5d:60:
dd:90:5e:8e:17:d0:00:60:f0:c5:73:bb:e5:1f:4e:11:46:4d:
fd:b1:6e:58:88:dd:5d:f1:8c:33:d9:21:35:a8:ec:1b:47:b0:
45:55:eb:26:0b:b7:a7:c8:b8:22:54:ab:2b:40:c9:25:6f:43:
36:33:cd:4b:b8:75:c2:1f:20:4b:c4:0a:01:87:24:31:b2:25:
d3:c1:5f:74:8f:5e:86:4d:4a:e9:f1:fe:d3:57:35:f0:b1:5b:
df:cc:c8:2c:1c:02:ab:04:96:d7:63:7e:6f:62:cf:1f:4f:28:
e4:21:50:a3:e7:b7:1d:58:43:b4:ca:22:5a:52:75:d4:27:8f:
7f:94:9b:55:6b:20:90:93:ca:2f:fb:97:77:95:03:7d:0d:11:
c4:23:e5:30:6b:78:df:69:68:51:63:78:ca:1d:75:e1:3c:af:
24:d2:7a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:31:44 2025 by rpki-client