Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DiEZO9EtZqtx51ikqaAVc-jfopk.roa
File: DiEZO9EtZqtx51ikqaAVc-jfopk.roa (raw, json)
Hash identifier: pw/0nrSMGEP9yXxwShhJZ8pG/vKkUrutkPMT0GHa5tE=
Subject key identifier: 0E:21:19:3B:D1:2D:66:AB:71:E7:58:A4:A9:A0:15:73:E8:DF:A2:99
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746A9799F58B0F9C046B248856BC1C8
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DiEZO9EtZqtx51ikqaAVc-jfopk.roa
Signing time: Thu 02 Jan 2025 13:48:49 +0000
ROA not before: Thu 02 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203657
IP address blocks: 188.132.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:a9:79:9f:58:b0:f9:c0:46:b2:48:85:6b:c1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e21193bd12d66ab71e758a4a9a01573e8dfa299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:67:01:df:35:da:21:29:4b:25:29:35:50:
cd:52:2e:85:43:65:e5:23:3c:c5:6a:ea:9a:76:ca:
0f:77:9c:e3:95:ac:50:b5:e8:db:82:bc:74:37:13:
b5:6a:7a:f2:d9:00:63:fd:5d:e9:34:e0:25:6b:cb:
b6:18:be:3c:57:7c:4d:6e:f8:ba:fe:29:bb:aa:3b:
a4:43:6f:dc:79:12:c2:93:0d:83:42:07:d3:3b:30:
09:4c:f3:ff:32:87:0d:34:3b:5e:48:16:67:92:5b:
ca:25:7d:16:5e:4b:81:67:65:69:8b:24:ab:5d:53:
87:0e:de:0d:d9:d4:00:05:da:d2:18:32:17:44:58:
d0:5e:ee:de:25:b1:4b:6b:91:cb:bb:4c:8b:a4:ec:
e7:ff:5f:4e:a4:b5:c9:fa:c3:61:a2:d5:97:5a:89:
d9:ee:c5:76:40:b3:0f:f6:24:99:1f:ad:5f:29:6a:
43:c4:ad:78:1e:4d:0a:24:4d:4e:d6:64:c2:15:8d:
c6:e2:88:7f:57:98:a7:ad:fa:5c:3b:71:23:7e:d2:
d8:f8:ba:ef:0c:2f:07:a6:f1:fe:d0:40:2a:13:c5:
ef:e1:f3:ea:d4:22:9d:20:91:c5:33:02:73:ef:1c:
79:f7:1e:75:8e:31:ae:9f:d0:25:6c:f7:fe:7f:35:
fc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:21:19:3B:D1:2D:66:AB:71:E7:58:A4:A9:A0:15:73:E8:DF:A2:99
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DiEZO9EtZqtx51ikqaAVc-jfopk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.149.0/24
Signature Algorithm: sha256WithRSAEncryption
38:41:bb:82:0d:21:92:5c:ba:06:72:f5:8f:51:98:1d:2a:c3:
ce:4f:ec:34:c0:fc:ce:8d:74:89:46:2b:a9:dc:75:dc:c8:2a:
4f:c1:fc:a6:a5:fd:eb:fb:84:1b:70:1b:32:e2:4b:95:69:71:
aa:08:ad:07:1d:42:5d:20:96:7f:c2:e3:55:55:9f:ff:3d:20:
0d:83:e1:29:c5:a0:f1:0e:f5:c2:96:08:2a:0d:ff:c5:c1:16:
e6:36:dc:be:f7:38:c5:b4:42:69:18:ec:98:f6:b2:9b:a9:48:
8f:4c:73:19:5a:73:72:88:f1:af:3b:27:74:97:47:da:71:5a:
09:96:16:aa:30:52:bb:5c:d3:bc:9c:e4:a2:26:1b:dd:8c:d2:
13:6a:6d:72:eb:95:2a:9c:a9:cd:46:88:36:85:cb:6f:91:6c:
f4:54:8a:28:71:a3:b2:23:ad:bd:e0:21:b2:27:06:87:cc:3d:
d7:02:74:b0:dd:b0:76:dd:f6:56:e9:8e:96:a4:f3:14:6d:88:
d3:c0:9e:51:48:e3:ed:54:88:6c:bc:d0:56:80:33:31:64:26:
0f:4b:81:a2:b3:c6:24:5c:37:cc:54:0f:d7:5f:e2:e2:a1:5c:
3f:da:6d:6d:df:8a:de:9a:27:3d:1e:90:66:b3:24:47:41:3b:
e7:a9:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:11:20 2025 by rpki-client