Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e6bbb3-b09b-4a3e-a89f-0b3a9e124157/1/9cixZIxLZcds7df3vURO3iebknI.roa
File: 9cixZIxLZcds7df3vURO3iebknI.roa (raw, json)
Hash identifier: 5k9nrIHzGmQxleON1IYEUZsSFtHCbEUlRE+pz5GN4f8=
Subject key identifier: F5:C8:B1:64:8C:4B:65:C7:6C:ED:D7:F7:BD:44:4E:DE:27:9B:92:72
Certificate issuer: /CN=cbe2af2f0886c93c78281e5ad8642d96117d4cf9
Certificate serial: 01F677F2
Authority key identifier: CB:E2:AF:2F:08:86:C9:3C:78:28:1E:5A:D8:64:2D:96:11:7D:4C:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-KvLwiGyTx4KB5a2GQtlhF9TPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e6bbb3-b09b-4a3e-a89f-0b3a9e124157/1/9cixZIxLZcds7df3vURO3iebknI.roa
Signing time: Mon 25 Apr 2022 15:16:22 +0000
ROA not before: Mon 25 Apr 2022 15:16:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211041
IP address blocks: 188.64.138.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32929778 (0x1f677f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe2af2f0886c93c78281e5ad8642d96117d4cf9
Validity
Not Before: Apr 25 15:16:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5c8b1648c4b65c76cedd7f7bd444ede279b9272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:b1:f7:da:b9:ae:5c:4f:bf:d7:07:f1:99:
3e:75:b3:3b:3c:29:dd:a9:2f:33:10:c3:73:c8:90:
2e:44:31:6a:ee:5a:50:12:7a:21:d6:01:05:04:3a:
27:5e:9d:d9:cf:3f:05:9c:97:7f:d4:81:f9:3c:7e:
cd:7a:7c:96:ff:b0:a5:6c:77:e1:2f:b6:3d:97:53:
a0:de:14:56:bd:73:81:1e:e4:cd:5a:c2:2f:03:89:
b9:c1:4d:d7:c3:ad:b9:b8:9b:da:04:d3:f5:2e:0a:
a0:7e:12:6d:17:9f:cd:1f:c6:ab:f4:b8:8f:85:20:
73:01:77:b8:53:83:86:bd:ad:2e:d0:9d:3e:b4:c8:
24:fe:66:43:51:0e:dc:95:b4:a6:7b:fd:10:38:4d:
20:b9:f9:72:6f:c5:0d:ec:b7:54:e7:fa:94:c4:17:
e4:ba:f8:7d:43:45:a7:bc:af:c7:17:80:c8:98:03:
ee:ee:db:73:a4:9c:04:e1:3a:c7:08:33:d4:af:76:
96:32:5b:a2:22:f8:29:68:30:bc:07:b8:92:d2:cf:
55:fc:20:6c:78:a2:b7:e7:52:6c:9f:7e:bc:a6:cb:
a0:e4:b3:4b:83:1d:85:89:0c:cc:f6:37:69:65:d0:
f5:d8:53:30:21:90:83:49:d7:95:28:a1:b2:98:6f:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C8:B1:64:8C:4B:65:C7:6C:ED:D7:F7:BD:44:4E:DE:27:9B:92:72
X509v3 Authority Key Identifier:
keyid:CB:E2:AF:2F:08:86:C9:3C:78:28:1E:5A:D8:64:2D:96:11:7D:4C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-KvLwiGyTx4KB5a2GQtlhF9TPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e6bbb3-b09b-4a3e-a89f-0b3a9e124157/1/9cixZIxLZcds7df3vURO3iebknI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e6bbb3-b09b-4a3e-a89f-0b3a9e124157/1/y-KvLwiGyTx4KB5a2GQtlhF9TPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.138.0/24
Signature Algorithm: sha256WithRSAEncryption
17:3a:3f:de:e8:3c:37:e6:35:21:37:8e:94:1b:4a:36:ac:7a:
af:ff:d7:fb:52:a1:ac:90:e0:9f:34:e9:7e:6a:c4:9a:9f:94:
6b:d7:19:f2:eb:e8:7b:8a:a7:82:60:c5:99:6b:3c:fa:ba:f2:
b1:44:9f:87:63:15:60:39:f7:20:33:46:0c:ed:8f:e3:a3:a1:
ab:59:f0:06:03:94:54:4c:9f:91:7d:82:1e:76:84:c5:54:fc:
f3:73:96:ec:43:ab:7a:86:3f:33:4b:91:7a:c6:8b:f6:fc:8e:
c0:bb:ae:98:d1:08:df:91:4c:58:61:60:2a:37:de:e0:60:2c:
ea:45:b7:1b:2e:5a:02:2c:d7:95:04:25:ac:98:70:7d:9d:f8:
a3:c3:a2:f0:ac:66:ae:5f:f9:00:a3:a4:3c:b9:3f:75:bc:69:
2e:ad:cb:77:60:c2:be:4a:05:14:a6:4e:71:a7:66:60:fb:da:
31:ea:40:bf:6f:31:4e:54:55:6a:04:85:a5:fb:8f:3b:9c:f7:
14:c6:06:72:c5:cd:ca:82:40:aa:76:e6:cd:61:93:92:ca:c2:
f2:d6:6e:a6:91:6f:56:66:05:87:23:9c:39:57:74:5b:15:40:
c6:4e:4e:f2:5e:a7:1f:3b:ec:4e:81:7a:60:c7:42:8b:c3:b4:
8f:ae:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:02 2025 by rpki-client