Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e6bbb3-b09b-4a3e-a89f-0b3a9e124157/1/rNJvM4w6KeK-MPThMMB6-BU9CSA.roa
File: rNJvM4w6KeK-MPThMMB6-BU9CSA.roa (raw, json)
Hash identifier: 9IyJm3/qgyNUxp4heA1W7LYx2avqGEPwL8U5CkZzwlg=
Subject key identifier: AC:D2:6F:33:8C:3A:29:E2:BE:30:F4:E1:30:C0:7A:F8:15:3D:09:20
Certificate issuer: /CN=cbe2af2f0886c93c78281e5ad8642d96117d4cf9
Certificate serial: 01F71915
Authority key identifier: CB:E2:AF:2F:08:86:C9:3C:78:28:1E:5A:D8:64:2D:96:11:7D:4C:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-KvLwiGyTx4KB5a2GQtlhF9TPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e6bbb3-b09b-4a3e-a89f-0b3a9e124157/1/rNJvM4w6KeK-MPThMMB6-BU9CSA.roa
Signing time: Mon 25 Apr 2022 15:31:47 +0000
ROA not before: Mon 25 Apr 2022 15:31:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49544
IP address blocks: 188.64.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32971029 (0x1f71915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe2af2f0886c93c78281e5ad8642d96117d4cf9
Validity
Not Before: Apr 25 15:31:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acd26f338c3a29e2be30f4e130c07af8153d0920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:98:92:8f:8c:f4:e1:27:00:c9:f1:aa:ff:
8a:96:ee:66:4c:27:49:14:64:0d:b0:dc:aa:65:29:
1e:bd:e9:ae:7c:e2:42:84:5c:67:9f:b9:75:38:07:
c4:b6:62:37:10:16:45:24:90:01:c2:d0:89:30:fe:
00:fd:78:46:62:ff:79:65:73:af:62:29:5f:68:01:
e9:da:94:1d:84:83:67:a3:49:c2:72:7f:f7:68:84:
b7:48:92:3c:93:d0:91:c1:fe:00:ad:8f:19:27:b2:
c4:29:b0:4c:b4:02:b0:c0:79:6c:09:af:f0:2d:c1:
2c:10:89:d3:86:eb:f2:14:fe:09:dd:db:74:90:54:
a6:1b:ce:c9:b3:16:e5:84:e7:dc:a3:e0:98:d7:4f:
3a:48:16:6d:2d:a0:5d:29:1d:13:1e:c7:2a:11:ac:
4d:08:73:d2:51:df:92:32:ce:79:1e:5e:35:6c:88:
cc:fb:0d:30:91:05:19:34:98:fd:46:ee:b6:69:93:
98:58:21:00:67:b3:e7:31:73:de:66:c1:e4:06:18:
55:41:aa:66:ea:db:57:65:1a:f4:e7:28:1e:c7:26:
15:1e:52:c9:3c:53:ce:41:1e:de:89:c2:b7:cf:8b:
d3:7e:3e:35:b5:99:c1:ea:61:fe:c2:20:0c:a2:4f:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D2:6F:33:8C:3A:29:E2:BE:30:F4:E1:30:C0:7A:F8:15:3D:09:20
X509v3 Authority Key Identifier:
keyid:CB:E2:AF:2F:08:86:C9:3C:78:28:1E:5A:D8:64:2D:96:11:7D:4C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-KvLwiGyTx4KB5a2GQtlhF9TPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e6bbb3-b09b-4a3e-a89f-0b3a9e124157/1/rNJvM4w6KeK-MPThMMB6-BU9CSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e6bbb3-b09b-4a3e-a89f-0b3a9e124157/1/y-KvLwiGyTx4KB5a2GQtlhF9TPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.138.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1c:6b:cc:fb:e3:5d:a5:4a:ac:c7:13:81:e3:f8:1e:6a:6b:
41:88:96:de:0e:4e:9e:60:29:b9:6b:32:74:15:ca:dd:89:c8:
92:62:5e:25:4c:3e:5a:05:ba:2d:10:69:a6:a9:a9:2a:4f:61:
77:8d:68:d4:4f:1d:07:a1:bb:91:50:1b:58:59:bb:da:4c:e8:
3f:0f:3e:6a:18:1b:cf:d1:b6:db:4e:bb:ba:a1:2d:4e:e9:83:
5f:ff:7a:ee:5b:e8:4e:6b:24:53:2b:9e:7b:06:3a:1f:81:f0:
5b:5d:60:d7:bb:5f:33:8f:a8:e3:a8:77:82:72:67:5c:9d:57:
a4:4f:33:80:3d:ba:48:b0:a1:40:82:04:9e:f8:1a:5f:36:7c:
0d:2d:6c:a7:38:d3:1b:b9:1e:c1:a8:af:b1:5a:7b:29:43:19:
80:01:bd:1a:a7:25:34:59:8e:a6:76:bb:9a:51:6b:66:37:82:
ac:3e:d7:06:09:1d:27:59:d6:13:49:0b:cf:f0:d2:52:a1:b6:
c5:bf:ad:4f:e2:5b:9e:09:39:a9:20:d8:0a:6e:20:c8:aa:52:
f3:b5:5a:41:b6:ed:67:3f:76:14:bc:3b:24:12:cf:f2:82:1a:
b6:e3:28:73:58:df:13:27:27:46:c8:c3:a2:82:15:95:e8:f5:
52:9b:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:33 2025 by rpki-client