Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uvUOs8Tvb40fsZxWxVhW3FaHrcQ.roa
File: uvUOs8Tvb40fsZxWxVhW3FaHrcQ.roa (raw, json)
Hash identifier: HkZCH+xlBcStVDnl/0AGl88TPCubPtDnPDKqolxQuUY=
Subject key identifier: BA:F5:0E:B3:C4:EF:6F:8D:1F:B1:9C:56:C5:58:56:DC:56:87:AD:C4
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0195CECDD33FE5B0C1EDC9B2433AA47C7733
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uvUOs8Tvb40fsZxWxVhW3FaHrcQ.roa
Signing time: Tue 25 Mar 2025 19:35:50 +0000
ROA not before: Tue 25 Mar 2025 19:35:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214447
IP address blocks: 188.132.212.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.216.0/24 maxlen: 24
188.132.217.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
212.68.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:cd:d3:3f:e5:b0:c1:ed:c9:b2:43:3a:a4:7c:77:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Mar 25 19:35:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baf50eb3c4ef6f8d1fb19c56c55856dc5687adc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:3e:dd:34:c8:81:59:16:e8:dc:ab:ba:54:
54:d4:9b:11:23:29:99:67:45:60:c0:dc:83:06:43:
41:84:5b:62:cf:f2:3d:08:b2:8b:fa:2a:cc:77:4c:
7a:e4:bd:47:9e:04:0c:56:e9:d9:cd:e5:0e:16:0b:
f0:50:fe:91:33:f6:42:56:32:96:7f:97:e5:77:ba:
da:88:ac:01:ee:cd:74:4d:e8:dc:f7:45:ac:7a:1f:
e1:f0:ed:c8:e3:b2:b2:dd:1c:d9:6e:42:5e:f4:73:
ae:82:b1:bd:0b:5d:b7:53:e2:82:fa:e9:6b:ba:25:
f8:89:74:0e:a0:39:60:b7:ef:cf:d5:02:a4:bd:9b:
69:f9:6a:36:8d:e8:d6:39:12:fa:c2:45:6d:26:31:
f3:16:9c:de:67:57:54:ef:b7:0b:c0:46:b2:83:a9:
93:07:31:a1:e1:3b:3f:b9:dc:3a:03:29:a0:b9:a7:
0d:75:a2:c6:6d:3d:2f:ef:8d:7e:fa:6c:61:95:c2:
a3:22:19:18:57:2b:73:36:06:6b:18:74:2f:8f:1d:
ad:57:9f:bf:9e:43:fd:10:2e:58:c7:e3:f6:bd:21:
dc:d9:f3:03:f9:0e:0f:10:48:07:63:c2:3f:c5:fd:
4e:d8:d8:d7:ad:27:a5:ef:9d:73:ca:51:a6:36:82:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F5:0E:B3:C4:EF:6F:8D:1F:B1:9C:56:C5:58:56:DC:56:87:AD:C4
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uvUOs8Tvb40fsZxWxVhW3FaHrcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.212.0/23
188.132.216.0/23
188.132.228.0/24
212.68.35.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2f:e8:46:bc:d8:31:50:83:43:84:12:f0:09:a6:26:04:fe:
c2:12:95:00:7a:ce:fe:18:d1:70:e9:30:95:0a:f5:18:1a:ea:
10:47:85:ff:17:19:f3:9e:7b:f5:86:71:21:59:66:2d:33:90:
78:13:56:92:83:53:21:8d:af:c7:5f:91:c3:ef:7a:47:b6:d3:
bb:aa:b3:43:57:3e:b8:8a:49:c3:79:2d:58:da:c0:92:ac:25:
77:9d:41:a7:5c:5d:ee:79:6b:a9:1d:b0:f6:9e:33:69:33:8a:
dd:a3:fe:e6:3d:78:a0:00:03:b9:67:71:94:b2:06:60:45:1b:
de:a0:88:61:de:59:c7:e2:82:ee:55:16:c4:6e:e2:6b:b4:88:
83:ef:bd:cf:63:6e:fd:a9:78:f4:85:77:09:ab:5b:a5:a9:fd:
c9:35:68:d1:9d:3c:b2:23:a0:2b:2f:45:ca:73:6a:ab:da:62:
c2:bc:7c:06:c0:9b:1c:79:9b:6b:c6:79:c2:a7:a4:b5:d6:44:
51:bc:7e:0b:bf:37:bf:fd:2c:62:cc:18:30:80:b1:17:45:eb:
b6:9b:b7:b8:c3:1a:cc:78:cb:fe:35:6d:77:47:10:0e:a3:29:
e6:8b:91:95:44:cc:7d:ae:97:ad:b8:0f:d9:82:6b:15:82:b9:
23:87:db:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:17:44 2025 by rpki-client