Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/KEqFDi7Afwf43KP_xJL4h4WG5y0.roa
File: KEqFDi7Afwf43KP_xJL4h4WG5y0.roa (raw, json)
Hash identifier: w19Xp97VUZcB9OnkFpcVufBxGKbw9/rqjJNm2WQkg4U=
Subject key identifier: 28:4A:85:0E:2E:C0:7F:07:F8:DC:A3:FF:C4:92:F8:87:85:86:E7:2D
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747D346C17938D4203000A4EA537BCD
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/KEqFDi7Afwf43KP_xJL4h4WG5y0.roa
Signing time: Thu 02 Jan 2025 13:50:06 +0000
ROA not before: Thu 02 Jan 2025 13:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 188.130.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d3:46:c1:79:38:d4:20:30:00:a4:ea:53:7b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=284a850e2ec07f07f8dca3ffc492f8878586e72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:9a:ac:bf:18:e8:07:01:26:64:f3:b5:66:
07:27:0f:83:75:7e:25:a2:04:25:df:b2:98:fa:7c:
e4:f3:df:85:69:49:ff:24:5e:aa:df:64:1c:5e:4a:
24:59:6c:05:25:26:c2:c8:07:2d:f4:d3:0d:19:c2:
a7:23:b1:8a:95:0d:84:89:39:be:14:8c:ff:e4:11:
8f:23:a9:43:e0:9e:82:47:46:3f:e1:3a:6c:5b:e3:
31:4e:e4:98:55:d1:7b:e4:be:e3:60:0b:28:c0:0b:
49:7c:c8:08:b9:ae:23:2d:ab:22:68:fb:b0:4e:57:
0b:3c:19:37:e1:43:5f:03:53:4b:07:9f:35:58:bc:
aa:e1:50:41:87:23:d9:5f:97:55:6b:5d:0d:31:d7:
85:64:c4:88:9c:54:d8:f7:1b:03:0e:79:cd:48:ab:
76:a6:69:c1:cf:b4:11:5b:28:8a:eb:bb:9e:0e:13:
eb:a0:fd:ee:a8:37:f5:83:f7:09:bd:07:98:fc:a8:
2e:e0:79:5f:80:5f:da:ca:a3:d9:d3:54:c2:1d:77:
6b:1f:37:2d:b6:5d:68:a7:c6:cf:a9:4a:c2:62:08:
aa:3a:f0:a3:a8:6b:8c:29:40:db:fa:c2:75:d6:df:
7d:15:33:ff:6d:09:7e:a5:13:81:75:54:88:cf:ee:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4A:85:0E:2E:C0:7F:07:F8:DC:A3:FF:C4:92:F8:87:85:86:E7:2D
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/KEqFDi7Afwf43KP_xJL4h4WG5y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.196.0/22
Signature Algorithm: sha256WithRSAEncryption
06:f5:02:74:f6:5f:d6:b2:8c:2f:a2:33:72:c0:df:15:be:1f:
2f:92:b0:05:94:ab:4e:bf:24:bc:a2:e0:73:95:bc:9b:77:d4:
f0:9a:46:03:17:c7:08:f8:b0:b1:73:fc:1d:f0:d6:60:d8:e3:
a8:72:88:b1:49:ef:36:63:7e:66:dd:88:3b:f2:ff:6d:4e:5a:
5b:a5:2e:b7:35:eb:87:6e:fb:9e:46:85:84:53:09:d3:c3:1b:
8a:b6:bd:39:25:11:75:2d:83:80:42:57:d5:54:f2:28:60:10:
65:10:7e:02:e8:fe:2d:2d:ac:b1:c8:4d:66:64:98:22:ac:b1:
67:6a:aa:bd:84:22:0f:69:23:85:23:b3:03:29:36:b8:99:0f:
a1:47:9c:b5:75:d2:12:eb:28:34:60:09:cf:5c:21:e6:78:d6:
c6:41:2e:b1:1e:20:9f:16:ec:89:ea:5c:e3:46:30:65:04:37:
36:d9:73:f2:b9:81:80:b8:30:15:58:dc:48:b2:a7:fe:96:05:
3f:da:9e:2e:03:8a:66:3e:83:2e:e2:56:77:62:9c:10:cb:51:
d2:c1:12:93:82:6c:c5:01:7d:25:86:7e:08:6b:95:51:88:59:
da:03:fb:e8:b7:42:cc:f9:d1:0b:f1:6c:af:0f:c3:53:3c:bd:
66:6d:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:27:18 2025 by rpki-client