Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wRvyte90VVgPC2MKdQbUkwrzwMo.roa
File: wRvyte90VVgPC2MKdQbUkwrzwMo.roa (raw, json)
Hash identifier: XFaXq4Smk/AlJqPjpMKnnh9/yaST0ta7+t8cTild4q0=
Subject key identifier: C1:1B:F2:B5:EF:74:55:58:0F:0B:63:0A:75:06:D4:93:0A:F3:C0:CA
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747BB70CD7CB224B9FB906CD1430530
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wRvyte90VVgPC2MKdQbUkwrzwMo.roa
Signing time: Thu 02 Jan 2025 13:49:59 +0000
ROA not before: Thu 02 Jan 2025 13:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5505
IP address blocks: 188.130.247.0/24 maxlen: 24
188.130.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:bb:70:cd:7c:b2:24:b9:fb:90:6c:d1:43:05:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c11bf2b5ef7455580f0b630a7506d4930af3c0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:be:b6:88:58:47:e5:4e:c5:da:be:47:2a:
5e:44:03:25:5b:8a:95:02:72:09:07:10:77:3f:34:
b0:08:10:9f:6d:16:86:32:51:bc:e4:55:b6:e1:f9:
a6:fe:82:10:1e:4b:ba:9d:04:2e:8a:31:2b:82:09:
e4:46:1f:61:ed:ab:c7:1a:b6:23:c4:b6:99:fa:c0:
d6:06:bd:e2:29:24:16:ce:6c:84:77:90:67:a3:c2:
f4:58:9e:46:08:76:57:8f:fb:13:20:e2:09:00:0f:
8d:b3:40:2f:e6:85:ba:83:b7:c6:87:ea:38:52:8c:
f4:06:0a:96:a4:38:c5:85:3b:b8:85:9e:41:98:53:
a0:81:b3:a2:52:1a:c9:5e:dc:aa:a2:e4:6f:59:bb:
2a:b7:d4:11:50:ca:5a:de:9e:e9:9b:12:0f:e8:47:
08:08:d2:34:79:a6:15:2a:f8:b5:d9:fe:c8:01:f2:
b9:09:66:3a:8b:83:fc:2c:63:90:b4:7e:2f:b9:b9:
26:24:c3:64:0f:e5:96:13:a0:64:f9:2e:aa:a2:70:
4d:8c:ee:c0:c0:37:0c:dd:78:8c:fa:ab:a0:3e:f4:
5c:26:51:68:03:68:3b:24:23:f3:9a:79:a9:e4:b2:
88:bb:aa:72:d8:1d:6f:cf:b1:68:d5:48:78:0a:18:
35:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1B:F2:B5:EF:74:55:58:0F:0B:63:0A:75:06:D4:93:0A:F3:C0:CA
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wRvyte90VVgPC2MKdQbUkwrzwMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.247.0/24
188.130.254.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e0:78:44:23:56:bd:66:1c:3f:30:3a:43:a0:ab:56:ce:04:
00:8c:d9:d1:e9:ee:6a:1d:be:7b:74:8c:72:22:d3:5e:71:0e:
71:b8:41:06:c1:a3:e5:8d:96:d5:6b:b1:93:0a:72:18:35:b0:
d1:78:5b:fc:eb:bf:a6:da:72:10:ce:a2:04:47:0a:46:56:fc:
ba:4f:e4:29:6e:f1:6a:95:e7:ad:85:e7:28:be:5d:0f:88:15:
28:fa:20:51:fa:ee:67:a9:c4:7f:7b:4e:e1:84:b0:b2:35:1f:
7f:ad:f0:7e:d7:7e:dd:33:23:f4:44:0f:53:2c:20:93:45:bc:
eb:38:08:63:21:d1:2e:d8:08:be:d7:f0:a4:39:07:29:19:34:
9e:8e:83:e0:2c:ee:16:d4:22:e4:22:e9:92:05:48:c8:5d:50:
1e:1b:89:bf:ea:7a:e1:f3:ab:0e:6a:1d:5d:c6:26:d3:cd:d9:
7a:1d:1f:71:51:9b:cc:02:26:60:a2:d2:62:64:09:0a:fd:12:
b4:a4:ac:73:ef:d7:6c:75:17:9e:be:31:99:be:ff:cc:1d:12:
e3:bf:0c:21:82:79:4f:23:e5:ae:0f:0b:b4:e8:91:39:21:2d:
d2:f3:39:12:76:74:7e:2a:f0:d7:15:c2:2e:e3:4a:26:03:fb:
19:17:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:38:58 2025 by rpki-client