Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/uE6sCBGadbkdNjamuV9CVt7KEu0.roa
File: uE6sCBGadbkdNjamuV9CVt7KEu0.roa (raw, json)
Hash identifier: 1QH+0Q+M4LSSW1D1mW+DBLCOYwkL6R7teXBJDnbRr5c=
Subject key identifier: B8:4E:AC:08:11:9A:75:B9:1D:36:36:A6:B9:5F:42:56:DE:CA:12:ED
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 01942823AE02378B61C8374462600A05E262
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/uE6sCBGadbkdNjamuV9CVt7KEu0.roa
Signing time: Thu 02 Jan 2025 17:50:14 +0000
ROA not before: Thu 02 Jan 2025 17:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200621
IP address blocks: 188.214.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:ae:02:37:8b:61:c8:37:44:62:60:0a:05:e2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Jan 2 17:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b84eac08119a75b91d3636a6b95f4256deca12ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dc:67:91:97:ea:7f:12:b4:d4:04:a0:7c:56:
c1:2e:ee:d5:cc:89:e0:05:7e:d4:f5:a3:f6:eb:59:
94:dc:82:2c:67:30:fd:3f:0e:c4:ee:6b:a1:87:83:
84:95:66:db:8b:f6:ed:f6:09:58:18:86:a7:3e:6c:
fa:97:30:3b:67:93:80:27:6a:0d:3b:4a:fa:4e:7e:
4d:10:e3:1e:aa:98:a6:d0:32:d0:27:4f:73:4c:e2:
ca:ed:b3:f1:59:98:0b:b8:00:5f:4c:af:dc:fd:c3:
77:92:3d:62:e4:9c:ad:86:2b:58:c0:53:3b:1f:bb:
eb:43:9f:7f:8c:72:03:06:72:18:27:ce:fd:a1:02:
2f:61:ad:b1:19:5f:68:23:e1:2e:27:14:96:35:7f:
a3:18:94:15:b7:3b:09:db:77:10:e9:ee:6c:8a:d4:
19:bf:7b:64:0d:04:97:97:2f:06:51:d6:97:a4:f7:
aa:c9:27:95:39:9f:85:b4:ac:91:a3:0e:f8:39:e5:
cd:56:de:97:c9:b1:6b:49:81:2f:7f:1a:76:1c:81:
81:74:64:73:78:64:1c:cd:54:11:6d:6c:64:de:57:
e8:fc:4a:44:d6:13:10:d8:0c:c2:14:bc:02:ac:2b:
27:25:26:24:2d:0a:89:9a:8c:8e:35:66:76:f2:26:
22:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4E:AC:08:11:9A:75:B9:1D:36:36:A6:B9:5F:42:56:DE:CA:12:ED
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/uE6sCBGadbkdNjamuV9CVt7KEu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.101.0/24
Signature Algorithm: sha256WithRSAEncryption
47:23:71:bb:87:7a:3e:a5:c0:e6:b3:35:3b:b3:b9:5a:99:85:
20:9b:9c:94:14:1c:a9:47:49:81:3d:f5:7a:a9:99:c1:20:a9:
53:1f:58:65:ca:84:39:dd:e9:05:cf:70:b4:2b:a1:d1:a0:92:
f8:3e:73:45:38:b0:27:98:a0:50:69:20:e8:49:d9:7f:c5:67:
e9:70:28:38:a4:e8:be:0c:ed:4a:67:1c:e4:64:9e:3d:c3:2a:
54:0c:a6:a3:65:a3:bc:16:9c:a8:20:e8:7b:69:e4:95:5d:1d:
2d:7b:b4:2f:41:1d:5d:98:a6:b7:9c:d0:64:44:48:26:d2:fd:
2a:92:a2:45:f8:65:d6:dd:48:d1:a9:32:52:c7:fa:fd:16:0c:
ad:81:6a:be:2c:87:ca:79:db:2c:a1:e7:3c:c3:80:be:7f:26:
10:9e:a7:9e:d9:59:89:1b:5f:48:88:4d:f3:e8:4a:67:51:6e:
20:5f:b9:d1:18:54:9d:0a:6a:f6:28:7c:cc:f9:c2:84:f1:af:
7b:91:9e:bb:db:56:a1:ad:0b:57:6b:58:e6:26:ba:e2:a9:ad:
ce:72:7e:e9:91:5c:a0:4d:69:f4:9d:ef:5c:96:0c:d6:e4:3b:
d3:fc:d4:8a:4e:15:bd:55:f1:38:94:78:c0:11:3e:09:07:e0:
56:e3:d8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:49 2025 by rpki-client