Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa
File: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (raw, json)
Hash identifier: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=
Subject key identifier: 37:59:0F:6B:AD:D8:E8:57:1B:20:6E:19:14:0E:AF:05:A5:42:E0:DE
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01941F8C4242738004EEEBA0E598EE7BBBFB
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211415
IP address blocks: 88.218.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:42:42:73:80:04:ee:eb:a0:e5:98:ee:7b:bb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37590f6badd8e8571b206e19140eaf05a542e0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:84:54:fa:a9:e5:72:b5:f4:b2:49:6f:2b:
17:e7:5c:38:61:3b:ab:0a:6d:5b:3f:78:b3:6a:fe:
5c:57:bf:e3:eb:b5:cf:43:b3:20:f3:2f:10:86:54:
b5:9c:9c:3c:ef:eb:26:07:90:99:4f:93:ba:a6:0e:
50:e5:78:cf:cd:79:99:2a:bc:97:c6:6d:fb:1f:0a:
ff:7e:a7:26:55:91:a7:a4:ba:d1:f0:ec:ce:e4:38:
66:72:6a:eb:01:3d:67:a6:30:8f:14:fc:06:e7:74:
44:45:e3:17:f5:56:ba:da:22:6a:de:7a:df:17:5d:
fe:24:00:bf:35:a2:a2:2c:cf:9a:59:73:7a:06:4f:
6c:41:6b:12:ca:01:cf:c0:a0:6d:e3:97:43:d2:31:
b2:b0:0d:31:78:8b:7a:00:a3:11:de:bc:b8:41:f9:
94:07:51:c9:ec:c3:bb:b0:11:72:11:36:c2:59:8e:
94:3e:8d:0c:8f:58:7d:52:ae:55:42:be:61:4d:15:
a3:b0:71:b0:11:78:da:e7:08:5b:0a:23:f6:7e:a9:
6a:df:0e:62:cd:1e:b8:36:0e:fa:f8:0f:8e:fc:21:
86:c9:76:60:5c:11:79:d6:aa:4d:4d:91:df:73:30:
95:91:87:cf:c6:32:75:06:de:53:aa:37:3c:b4:23:
09:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:59:0F:6B:AD:D8:E8:57:1B:20:6E:19:14:0E:AF:05:A5:42:E0:DE
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e7:d5:0c:c7:7b:2d:b5:35:7a:fa:85:cc:73:79:fc:d8:9b:
2d:36:29:80:36:53:78:28:61:52:67:11:a4:02:5a:9b:4d:67:
ba:b0:a6:1d:aa:8b:c1:74:b9:56:68:5c:31:4c:df:17:0e:b5:
ba:e2:f6:61:f3:76:78:3b:a2:0a:26:a2:fa:57:34:f8:13:31:
9f:9d:bb:62:47:73:5b:55:0d:3a:20:ae:3e:b7:fd:dd:30:dc:
22:86:e7:5b:e1:2c:9a:f4:f1:f8:60:7f:91:dc:ad:f7:c8:f2:
37:29:92:7c:d8:f1:30:37:8d:b0:9f:f5:84:7b:66:53:c4:d1:
87:f7:d6:35:11:f9:30:34:16:39:ea:ba:ca:fb:16:d0:da:a2:
82:e7:ae:7b:f6:67:b5:7f:b9:a6:1d:8b:c2:3b:ec:95:df:13:
87:6f:71:2a:d8:e9:f8:1b:9d:0a:e5:2f:5c:94:30:9b:3f:09:
f9:28:e7:28:d9:d9:21:55:df:cb:bc:1c:89:b8:c5:db:5f:09:
32:ae:8b:c2:9f:28:50:df:ce:8d:7f:91:86:23:dc:b2:4a:45:
68:f3:1b:3c:ee:3a:81:32:03:36:39:43:85:50:c9:5f:ea:29:
4a:ca:4e:2a:c8:64:08:59:f5:5c:1d:20:f3:4b:5c:ca:8f:a3:
8b:48:df:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:43 2025 by rpki-client