Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/vOSDs2ipCSlWvuRSIQA8DxkCvxI.roa
File: vOSDs2ipCSlWvuRSIQA8DxkCvxI.roa (raw, json)
Hash identifier: /JAZ/gqZaxFon94jViY1uznT5JIWMl88U99ZMfLhVsQ=
Subject key identifier: BC:E4:83:B3:68:A9:09:29:56:BE:E4:52:21:00:3C:0F:19:02:BF:12
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BF0157ED27CE86E02B1CCEC6D7F23
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/vOSDs2ipCSlWvuRSIQA8DxkCvxI.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203369
IP address blocks: 188.114.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f0:15:7e:d2:7c:e8:6e:02:b1:cc:ec:6d:7f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bce483b368a9092956bee45221003c0f1902bf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:28:3c:c8:a7:ff:6f:a3:ea:cb:75:82:46:
4e:8e:49:52:0e:df:4b:22:f9:60:c6:b7:86:55:5e:
b8:9d:6a:99:79:90:10:f4:29:fa:c3:93:51:06:02:
8a:9f:0d:da:5c:8f:e2:da:9e:3a:8c:1b:87:58:7c:
e8:f9:c5:cc:c2:ab:31:4a:e1:89:e6:bf:cc:67:b7:
98:23:58:89:59:3b:ee:21:61:a0:19:b8:89:9f:e6:
3b:ae:c0:dd:d5:fb:ae:62:2a:34:99:25:b5:6f:37:
27:43:e0:79:bc:54:90:67:5f:2e:99:2a:6c:9e:95:
0f:f6:c2:02:c0:62:76:cb:7d:a7:a8:6c:65:bf:41:
ca:3a:32:4a:d5:cf:5b:b9:42:bb:d3:ae:63:75:a2:
bd:f2:4b:cf:79:a7:6b:8a:fc:1c:20:21:14:81:52:
33:95:ac:1e:b7:22:9b:76:9e:25:36:d3:42:81:a5:
56:59:98:57:07:05:75:97:ed:61:77:28:f8:20:29:
ae:77:64:7c:bf:20:0a:d2:5b:40:e8:8c:c2:c4:0a:
21:0d:97:66:cf:76:a0:ac:bb:2d:43:69:0f:ed:22:
67:10:21:a3:6c:04:95:e8:bf:5d:f3:e6:e2:34:d5:
98:72:ad:b4:50:94:93:a2:42:2c:18:61:34:d6:bb:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E4:83:B3:68:A9:09:29:56:BE:E4:52:21:00:3C:0F:19:02:BF:12
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/vOSDs2ipCSlWvuRSIQA8DxkCvxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.67.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:15:f0:67:59:e6:5d:af:78:5c:b1:31:6a:47:e3:95:dd:ce:
53:b8:26:ca:f4:90:35:01:61:d7:a6:5c:36:35:da:08:f5:44:
7f:6c:d0:a6:1e:93:a5:46:ae:e9:e3:2f:97:2c:6d:30:7e:c3:
2e:d0:b0:1e:62:b7:cd:ef:25:f7:7d:95:1a:ef:e4:cd:e5:b9:
2d:0e:44:8d:0b:17:91:bb:94:0b:23:64:78:43:3f:01:1b:0e:
6f:01:db:34:d3:9f:e1:5e:00:94:83:28:fb:ad:7f:cd:3e:fb:
31:b4:cf:ae:19:4e:82:d4:b0:34:0e:58:fa:9d:8a:ce:dd:b6:
f5:8d:9e:4b:0a:fd:f6:bd:6e:ba:a3:e8:d8:30:9f:72:b5:28:
fb:f8:a3:b5:d3:2b:a6:09:aa:5f:98:1d:6f:6c:8d:83:46:2e:
86:bb:f0:df:d1:ce:7d:01:d4:52:c1:a2:58:e4:76:11:8f:a0:
7e:7a:08:ae:48:8a:e5:40:20:de:f1:76:69:ad:a5:3d:38:0a:
71:16:2f:e2:55:70:55:f4:62:6f:c2:20:db:a4:7d:c6:c7:9d:
71:f5:69:d6:9e:f8:ad:e8:ba:7a:ce:9a:b4:24:3c:13:f9:1d:
b0:8b:f1:7b:8e:12:91:6d:d7:ee:03:47:51:22:ba:30:2d:f6:
c4:72:3c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:35:54 2025 by rpki-client