Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/l63y35hRh82nc-qWk3eB9bHn_KM.roa
File: l63y35hRh82nc-qWk3eB9bHn_KM.roa (raw, json)
Hash identifier: b11mcWefxXYA/2pWdJ3fnWeAI5cFgL/vQOg3VNqp9sg=
Subject key identifier: 97:AD:F2:DF:98:51:87:CD:A7:73:EA:96:93:77:81:F5:B1:E7:FC:A3
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194274731D1FFF4D7A9E9ADDF0745D267FE
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/l63y35hRh82nc-qWk3eB9bHn_KM.roa
Signing time: Thu 02 Jan 2025 13:49:24 +0000
ROA not before: Thu 02 Jan 2025 13:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210599
IP address blocks: 185.88.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:31:d1:ff:f4:d7:a9:e9:ad:df:07:45:d2:67:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97adf2df985187cda773ea96937781f5b1e7fca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:15:b2:e0:9f:00:f6:b8:26:4e:f7:44:b1:
67:92:e0:fe:50:7d:92:93:a6:86:cd:d2:8f:85:d0:
82:37:87:71:36:64:b1:24:41:e5:85:aa:b2:df:92:
7f:ea:51:f4:f3:0e:0e:42:78:67:b5:a2:16:6c:6a:
a7:76:a6:d5:2d:80:51:b5:dd:97:30:27:9f:2c:dc:
3f:95:44:0c:e6:2f:91:f4:10:c2:43:80:78:cd:ef:
37:25:16:f7:41:da:db:32:e5:c6:4b:f2:06:78:68:
76:c5:c4:08:19:b9:c0:b5:31:7c:2d:50:cc:e2:7a:
8b:7d:c0:67:82:60:05:47:3a:1a:1c:bb:48:99:87:
25:f9:1e:83:18:ab:78:d7:4d:99:bc:92:c4:2f:04:
47:02:84:a6:06:db:36:13:33:95:f7:65:ff:da:7a:
48:a8:67:2b:cc:ed:89:67:fa:00:19:15:59:7d:c6:
7d:9f:6d:b6:ef:6a:3f:a1:9f:af:a8:9d:33:70:a8:
22:43:2a:3a:23:12:ac:1d:f6:07:42:79:6e:44:0b:
e0:12:fe:b5:9d:8a:67:24:98:25:be:c5:70:3a:aa:
8f:58:8c:3e:5e:ba:ef:30:f4:e6:0a:27:e4:a8:cf:
10:45:18:a3:f0:e1:92:62:12:25:1e:0c:9d:0b:7a:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AD:F2:DF:98:51:87:CD:A7:73:EA:96:93:77:81:F5:B1:E7:FC:A3
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/l63y35hRh82nc-qWk3eB9bHn_KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.172.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7a:47:4c:0d:8e:4a:66:17:ee:5a:48:1e:22:d2:91:be:91:
a3:04:24:89:c7:8c:b5:ed:37:fc:b9:ff:4c:fb:9b:28:71:26:
3b:0e:2b:20:1a:f2:04:ba:e6:7b:99:6b:06:0e:ac:c1:74:d6:
50:78:1a:d8:9f:8a:80:ca:92:94:b0:de:7a:6f:e6:50:af:3e:
11:ec:43:e0:70:9e:ee:5a:b6:31:46:36:9d:ba:78:8c:32:5f:
2b:0b:ae:e3:6a:fd:87:92:5b:40:18:a8:db:3d:8e:09:b3:54:
2d:05:ab:58:b0:d6:72:a5:49:6b:b9:c9:71:03:27:42:44:28:
b3:a4:73:53:fa:99:87:42:c8:40:b4:3f:3b:9a:d9:e7:9e:33:
6a:4c:b1:4d:8f:fd:62:78:59:e2:31:25:7e:02:27:b5:ef:0e:
3a:a0:24:2a:e7:a3:09:1c:6b:3f:bc:0a:d3:4b:2b:3d:c0:1f:
46:db:28:5c:76:a2:93:f3:a3:35:1b:21:df:0f:82:27:27:9a:
f0:98:b2:22:f3:ff:d9:c4:20:58:8c:c8:1a:87:e3:42:62:d1:
34:20:70:21:55:45:3f:08:ae:0e:66:da:fc:70:b4:f5:43:08:
c1:fd:de:5d:70:05:ec:80:37:e3:38:6c:47:a6:2b:4a:ec:81:
20:54:3f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:28:40 2025 by rpki-client