Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/JoPVkwQiOa8FMPWXLMwTD8Z5fHM.roa
File: JoPVkwQiOa8FMPWXLMwTD8Z5fHM.roa (raw, json)
Hash identifier: OK9ChmoGjGac52vxxGBWAKkSK/ouBl0i27ZM3by8gJo=
Subject key identifier: 26:83:D5:93:04:22:39:AF:05:30:F5:97:2C:CC:13:0F:C6:79:7C:73
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019427472C2ADE10ADA8EDE64D83522D612C
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/JoPVkwQiOa8FMPWXLMwTD8Z5fHM.roa
Signing time: Thu 02 Jan 2025 13:49:23 +0000
ROA not before: Thu 02 Jan 2025 13:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60647
IP address blocks: 185.88.175.0/24 maxlen: 24
185.98.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2c:2a:de:10:ad:a8:ed:e6:4d:83:52:2d:61:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2683d593042239af0530f5972ccc130fc6797c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:61:7d:54:e9:42:fe:74:f1:51:e4:96:8a:
b6:41:59:f3:a9:b0:a7:d1:73:cb:85:1b:06:9b:33:
1b:72:ba:6c:39:14:f9:27:70:8a:14:79:4c:f1:b5:
6b:d9:b1:b5:2b:db:52:31:9a:ed:4a:83:5d:b8:4d:
e7:db:df:8f:9e:e1:bc:77:75:73:0e:81:99:3f:12:
91:5b:b3:b4:28:ae:a2:71:c0:02:63:32:22:f7:50:
07:76:d0:4b:96:7b:20:39:3c:74:27:ba:db:62:5d:
6c:01:e0:99:4f:3a:62:94:7a:e8:d8:ac:c3:bf:e3:
0d:16:d7:ad:f5:fe:08:23:31:0f:fd:a4:96:48:45:
b5:b1:b4:04:8d:4b:56:e7:68:c7:69:d2:1b:b4:91:
80:22:3d:99:27:4a:d2:e9:94:39:c5:b1:0a:40:06:
6d:dd:cf:a9:3f:e7:a1:f1:f7:b1:bd:22:07:f5:ae:
9e:4b:a7:1d:41:30:17:8e:95:43:21:a0:9a:77:6e:
3f:2d:40:24:19:5e:8a:02:7b:32:c7:35:82:54:ac:
6c:01:1c:42:7a:49:84:3c:c5:79:03:a0:76:0f:76:
be:71:04:5a:b3:23:b1:22:e0:68:43:4b:b5:36:49:
e9:36:36:db:e9:80:45:68:3c:6a:b9:48:29:c7:ab:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:83:D5:93:04:22:39:AF:05:30:F5:97:2C:CC:13:0F:C6:79:7C:73
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/JoPVkwQiOa8FMPWXLMwTD8Z5fHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.175.0/24
185.98.63.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e4:55:0e:ec:ff:a1:ee:af:79:7f:6e:39:34:74:0e:62:23:
bf:bc:72:c4:56:9b:ac:f6:1c:18:be:04:02:a3:bf:95:e2:d1:
d3:ae:0a:67:0f:5c:52:69:34:92:36:f7:26:6c:0b:e1:d3:bf:
37:d5:c0:68:48:20:f2:3d:0d:6c:72:f3:c6:ee:d6:19:8f:c7:
d9:39:1e:e2:70:00:f8:9b:de:ac:5b:94:40:d5:b9:c0:6e:ff:
24:92:23:f2:ab:91:06:ac:6e:b8:3e:43:7d:ac:4a:eb:2f:45:
25:42:78:a9:e9:7c:82:91:0c:fa:e2:af:44:53:3e:9c:7c:7e:
e9:f2:10:da:8e:8b:c7:c9:fd:c7:27:ed:5c:68:07:1c:77:d1:
f7:85:26:2b:c9:3c:c2:c6:11:4c:71:6f:92:0d:fe:15:13:86:
4e:4f:14:d5:eb:00:54:b3:01:0f:c6:6d:30:17:7c:73:fd:ec:
d6:dd:21:13:02:94:6b:48:e7:0b:d3:50:5d:0b:03:24:78:f3:
8e:d5:f6:6b:12:bd:50:57:b6:91:9c:b1:e6:48:47:b6:22:d0:
61:6e:d6:3f:6e:63:91:34:12:02:34:9b:9c:3c:f8:98:3d:f8:
6a:5a:cc:3c:47:0e:be:e8:f5:3e:37:b5:dd:c1:52:ff:6a:9a:
b9:72:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:42 2025 by rpki-client