Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/adQgScxITq3Y7fjY1cVW61XEpNI.roa
File: adQgScxITq3Y7fjY1cVW61XEpNI.roa (raw, json)
Hash identifier: c5HVzAkUuueuHhFHk0BmqoGNK8+9mJp5C8h9VqEpyRY=
Subject key identifier: 69:D4:20:49:CC:48:4E:AD:D8:ED:F8:D8:D5:C5:56:EB:55:C4:A4:D2
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0194B5A350F420E5EFA5D15F99C46B9FD76B
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/adQgScxITq3Y7fjY1cVW61XEpNI.roa
Signing time: Thu 30 Jan 2025 05:16:06 +0000
ROA not before: Thu 30 Jan 2025 05:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30738
IP address blocks: 188.130.182.0/24 maxlen: 24
195.211.52.0/22 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:a3:50:f4:20:e5:ef:a5:d1:5f:99:c4:6b:9f:d7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 30 05:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69d42049cc484eadd8edf8d8d5c556eb55c4a4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:21:65:a9:2e:16:a2:be:d1:c8:a2:03:fc:
57:6c:7f:24:94:aa:69:f2:92:05:40:a8:7f:25:9b:
4b:75:85:9d:a5:d3:b3:40:41:81:d4:f9:b6:35:93:
d0:0b:2a:6c:16:d8:72:34:4d:c7:71:51:12:9b:04:
6c:76:0d:67:15:fb:8a:f2:57:05:73:41:c2:69:63:
67:80:ca:d4:8d:ec:66:60:9d:41:eb:28:18:79:93:
34:a8:a5:75:54:53:dc:95:a3:f2:b8:92:b3:1f:02:
ec:cb:d0:1c:7e:ff:d7:ab:d9:71:3a:28:bd:a8:d9:
08:9b:dc:ef:38:94:9b:47:14:cd:4c:76:d9:d1:ca:
63:b4:32:2a:4a:8b:5a:e2:1f:fc:54:3b:ad:48:52:
ce:72:c6:a8:9f:b2:28:95:0b:ce:2c:12:27:fc:4f:
4a:0c:51:ec:0c:57:7e:3d:b6:71:97:4a:d2:98:b2:
73:37:47:47:6b:84:db:e8:e6:64:6c:f3:df:6d:24:
1f:ce:ff:68:80:f8:a6:ea:62:03:f6:eb:4b:b1:39:
f6:c0:17:ae:8c:3c:28:af:8a:b5:7d:31:4a:7d:9c:
66:32:ef:20:a3:69:99:51:c6:7e:6d:c6:bc:42:62:
ef:5e:b1:e3:b9:c3:7a:22:66:07:f9:d2:83:c5:46:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D4:20:49:CC:48:4E:AD:D8:ED:F8:D8:D5:C5:56:EB:55:C4:A4:D2
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/adQgScxITq3Y7fjY1cVW61XEpNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.182.0/24
195.211.52.0/22
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
a6:b8:cb:1d:a1:b3:7e:d1:68:72:ab:21:69:43:14:18:e6:f0:
c4:92:9d:8b:fe:64:a1:51:e5:dd:80:01:d5:d3:d2:2c:39:56:
d4:38:f7:ca:35:cf:85:a3:d0:d6:a9:28:08:36:7e:2c:2e:2e:
1c:0d:52:b0:6e:ec:84:a5:05:bf:c3:ef:a8:1f:d3:ab:7c:e7:
a4:95:f4:85:e0:06:c1:3f:a9:49:7f:b1:2a:6a:9d:9f:42:91:
69:63:cf:5d:2c:46:c6:4e:7f:b7:38:b6:6c:2a:ba:b3:df:a0:
ce:92:92:88:47:4b:b2:e4:b4:86:65:66:07:88:4b:a1:b5:de:
77:a6:81:fb:ef:6b:50:1d:89:0f:20:85:34:33:7a:8c:c0:83:
89:4e:b3:50:f4:cf:17:4a:15:87:b4:46:12:ba:1e:c0:92:ca:
db:89:8c:d0:b3:0c:1f:59:75:46:5b:4d:3a:1c:24:6f:20:eb:
51:89:37:29:41:be:c4:34:a9:fc:2e:64:f8:58:f8:22:a7:a4:
74:81:ce:40:30:a8:33:a4:ab:e1:f9:40:2e:ad:ce:42:49:f3:
fd:ab:17:31:95:36:60:5d:93:69:6c:2b:1d:f1:62:3b:65:5b:
ea:0a:32:3f:e1:31:08:26:93:86:ff:a3:51:2d:65:37:c4:19:
55:b6:41:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:29 2025 by rpki-client