Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/AUBgcRmm7W-aWbBRHLSAgzoDtdA.roa
File: AUBgcRmm7W-aWbBRHLSAgzoDtdA.roa (raw, json)
Hash identifier: psGRQEedbv63iPnmQRZ3ZxAgL4hMcPvc2dLW51vF5lw=
Subject key identifier: 01:40:60:71:19:A6:ED:6F:9A:59:B0:51:1C:B4:80:83:3A:03:B5:D0
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BD5BC1BF2ECF83B4D0A1351471967
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/AUBgcRmm7W-aWbBRHLSAgzoDtdA.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31608
IP address blocks: 188.114.70.0/23 maxlen: 24
188.114.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d5:bc:1b:f2:ec:f8:3b:4d:0a:13:51:47:19:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0140607119a6ed6f9a59b0511cb480833a03b5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:a3:30:22:d4:71:ba:f1:43:05:79:bc:74:
59:36:2c:bd:1f:d0:17:c3:89:4b:4c:56:84:12:b7:
3d:1c:eb:7d:5a:6b:d1:07:59:06:32:18:ac:2c:5f:
ae:e7:8c:c4:c3:3b:a3:34:dc:d3:1d:46:d2:b7:74:
b1:2c:37:3b:36:36:77:1b:2d:73:4f:ee:01:a5:d5:
db:8e:14:ca:3a:79:99:fc:5c:02:f4:f3:fe:ca:14:
30:32:79:7a:e7:21:2a:16:81:50:7f:e6:f8:5b:cd:
38:a0:27:5e:ed:6f:6f:cb:09:06:e1:86:30:d9:01:
da:39:e9:da:16:60:ff:b6:43:db:ee:ea:87:b8:70:
ab:73:49:b2:62:35:2f:13:7e:af:04:4d:3e:15:46:
82:b6:de:ca:a2:a9:a9:dd:c1:45:b8:0e:f7:6e:f5:
5d:f3:77:e7:a2:0e:0e:c5:1b:88:2b:7e:99:e5:af:
0d:c3:ec:7a:6b:70:3a:58:09:19:21:f6:62:2b:42:
b6:37:c0:b7:6b:3c:30:76:94:c9:50:34:00:61:f8:
ea:55:d6:ae:aa:7c:f5:d3:54:56:77:66:eb:87:1e:
8e:40:54:c8:aa:f7:83:32:8b:c9:c2:d2:f1:96:42:
0a:ca:2f:81:76:de:f6:88:6e:0b:2d:3d:5b:c6:90:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:40:60:71:19:A6:ED:6F:9A:59:B0:51:1C:B4:80:83:3A:03:B5:D0
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/AUBgcRmm7W-aWbBRHLSAgzoDtdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.70.0-188.114.75.255
Signature Algorithm: sha256WithRSAEncryption
26:68:18:cb:72:cc:e4:45:82:13:4e:c6:b7:82:9b:fc:59:b9:
0b:84:9a:f1:b4:46:ff:c3:22:56:c8:09:6c:4c:ba:c3:10:0d:
14:d5:f4:a6:81:a2:77:8a:98:df:ec:1c:34:bf:04:5c:60:d2:
ad:af:c9:b2:cb:51:4a:cc:fc:09:02:e6:c1:48:13:21:ae:fe:
95:2f:f8:29:9f:40:b4:68:18:2d:bd:3b:68:65:a7:66:8f:86:
14:7d:34:66:4c:33:a2:e3:c1:07:20:0b:c8:39:58:e8:be:6f:
d2:e0:e6:3d:28:c3:57:8c:71:16:b9:70:5a:e8:82:3a:d0:9e:
e0:9d:6d:07:d2:2d:9f:1c:1c:9a:67:3c:30:97:d6:e8:de:5a:
91:b9:06:93:cf:15:fb:02:95:ab:cf:e9:b0:55:67:84:4f:f6:
fc:a3:ed:93:e0:1b:ab:58:f1:e2:6c:4a:58:a8:e9:c6:bb:a2:
7e:60:87:56:1f:48:ae:f8:fa:9c:49:5c:5b:05:70:ba:50:ab:
d4:f6:bf:e6:7b:d5:15:ec:59:b4:66:ae:14:a5:c4:bc:07:2b:
94:49:e3:93:d3:49:a1:1d:f7:11:e1:11:97:99:66:bb:05:c4:
8c:cb:0c:cf:c7:79:54:01:c4:cf:e7:3d:c5:90:ea:b9:33:26:
1f:42:08:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:23:29 2025 by rpki-client