Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/7swzumjrbBEqOh_flS8XWyy4Un8.roa
File: 7swzumjrbBEqOh_flS8XWyy4Un8.roa (raw, json)
Hash identifier: mXzAzDk5zku9pKVqFHmk6UBZwtru4IMaZbKrDQCrrhY=
Subject key identifier: EE:CC:33:BA:68:EB:6C:11:2A:3A:1F:DF:95:2F:17:5B:2C:B8:52:7F
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747C6403EF618566E2DF52413040271
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/7swzumjrbBEqOh_flS8XWyy4Un8.roa
Signing time: Thu 02 Jan 2025 13:50:02 +0000
ROA not before: Thu 02 Jan 2025 13:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51248
IP address blocks: 188.130.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c6:40:3e:f6:18:56:6e:2d:f5:24:13:04:02:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eecc33ba68eb6c112a3a1fdf952f175b2cb8527f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:40:d3:a0:c4:c9:b9:20:7a:f4:d8:6c:a4:d5:
45:8f:be:c6:76:82:5a:b1:91:37:df:c2:be:1e:3c:
5e:6f:15:07:bd:2d:28:b9:a9:b5:9e:ab:b2:e6:e1:
14:96:4a:b4:0c:f7:fb:1e:06:5b:d5:5d:d3:f2:57:
5a:5e:fe:df:b3:ec:94:67:ba:a2:3a:e8:bd:06:72:
c1:4b:4d:6a:ae:28:ee:d4:69:f5:62:52:98:5a:2b:
b7:e9:97:89:de:1a:d4:d6:30:03:0c:a1:65:08:78:
e9:cf:33:0f:4d:f6:db:8c:54:4d:35:aa:24:a5:a7:
63:51:bb:ef:be:3c:9a:fe:bb:66:7b:1e:40:0f:c5:
24:4c:34:4d:e6:98:3c:b4:43:bc:47:13:ff:a5:61:
17:f9:5e:fc:33:26:4f:69:e4:43:08:45:ab:8a:5e:
00:2a:6e:8a:a2:04:73:0e:b0:92:34:e1:3d:53:f6:
f2:69:49:36:41:3e:77:4c:fb:41:13:6f:00:90:26:
1f:67:74:f1:23:71:97:8c:fb:4c:c4:2e:d9:7a:62:
2d:05:fc:6a:c8:cd:1e:96:a8:47:81:91:4c:d7:71:
89:fe:37:84:39:70:3f:de:a3:d4:a5:03:bc:4b:75:
9a:8a:42:45:3d:f4:c7:66:e9:39:72:cc:a3:3e:fb:
e6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CC:33:BA:68:EB:6C:11:2A:3A:1F:DF:95:2F:17:5B:2C:B8:52:7F
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/7swzumjrbBEqOh_flS8XWyy4Un8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:90:43:55:d2:59:d2:0a:ab:6f:8b:4f:0b:5c:1e:04:3e:f8:
70:9a:52:8b:1e:56:3e:fc:c8:81:a5:85:28:57:e1:e4:89:cd:
a5:22:30:c6:a7:96:74:4a:f3:a2:cd:ed:ec:38:b0:64:15:04:
4c:e6:f3:ea:2a:21:09:ef:a3:58:61:b8:d6:a0:e0:9e:7a:1d:
ea:22:f9:46:dc:7e:1d:36:d1:51:e8:3f:e6:5b:e9:d4:e5:cd:
10:3a:97:44:2c:fe:b4:35:f4:00:53:5d:f0:9d:52:70:e9:c1:
11:a6:c8:56:be:e8:e5:23:6f:8e:4d:22:ef:49:47:ed:ab:4a:
4a:14:56:51:01:5e:41:20:58:80:04:26:3d:94:f2:1a:64:19:
67:06:74:86:b7:85:a2:6b:53:3f:17:73:49:fb:eb:39:49:c7:
dd:2f:1f:2e:54:d9:01:78:f5:b3:65:08:90:bc:51:32:53:1d:
d0:81:3a:61:d7:1d:cd:75:25:ec:ed:94:05:51:78:b7:f5:1b:
15:7e:52:e2:1b:fa:88:b4:2a:15:00:e6:04:4b:46:ab:f0:a7:
fd:26:9a:25:65:7b:7b:97:08:0d:6a:31:f2:e5:76:b1:02:44:
e3:9f:ff:fc:f9:50:6e:ae:db:23:59:c5:fb:da:93:1a:4c:df:
23:e3:31:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:30:09 2025 by rpki-client