Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/26_Y2lQQ9CXEtFadmOOFMX39ssw.roa
File: 26_Y2lQQ9CXEtFadmOOFMX39ssw.roa (raw, json)
Hash identifier: zNkViw+XXgn5UufvaTOzsYeXZI1Osht5tDKmaILDGC4=
Subject key identifier: DB:AF:D8:DA:54:10:F4:25:C4:B4:56:9D:98:E3:85:31:7D:FD:B2:CC
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01939B31C3CE693917BB38AA5872EBE9C32A
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/26_Y2lQQ9CXEtFadmOOFMX39ssw.roa
Signing time: Fri 06 Dec 2024 08:59:09 +0000
ROA not before: Fri 06 Dec 2024 08:59:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 983
IP address blocks: 188.253.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:31:c3:ce:69:39:17:bb:38:aa:58:72:eb:e9:c3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Dec 6 08:59:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbafd8da5410f425c4b4569d98e385317dfdb2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:34:eb:0b:0c:1e:51:0d:9f:51:6a:32:89:
85:bf:24:6a:05:08:cb:d3:7d:15:b4:5d:11:78:ce:
e3:06:43:9d:d3:2d:6a:a9:99:e8:ef:58:02:d5:e3:
00:ef:4a:64:39:2d:00:e0:e7:cd:cd:4e:95:38:9c:
6e:32:3b:50:7d:dd:d5:91:ce:0e:2b:dd:32:bc:75:
55:87:17:f8:ce:ee:3f:37:22:ec:a6:e5:29:5b:a1:
88:13:3e:5e:be:0b:a1:c2:93:a2:4c:cb:85:c7:a8:
a5:36:61:29:ad:a2:3e:e8:b1:3d:c8:0e:b2:8b:6e:
da:5d:02:34:4e:19:cf:2a:b9:10:8c:32:cd:f7:4f:
30:10:6f:31:1d:e2:76:98:91:a1:01:4a:b9:8c:5f:
62:29:bf:80:c0:66:71:6c:21:34:f7:46:ae:8e:e7:
35:f5:2a:b9:dc:aa:d2:85:96:d2:d4:cd:b2:d2:4f:
95:1a:7d:ef:13:6e:1f:5e:24:03:26:c6:b1:aa:0b:
cb:7c:2c:dc:6b:cb:85:6a:2a:5c:34:b9:79:15:3f:
6b:43:4f:67:5e:bb:09:1b:90:cd:79:37:97:b4:b0:
27:67:98:2d:d4:5d:63:f2:d1:d3:c2:52:87:13:57:
00:2b:d2:4e:95:c4:ca:2c:0e:80:28:b0:dd:5e:b4:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AF:D8:DA:54:10:F4:25:C4:B4:56:9D:98:E3:85:31:7D:FD:B2:CC
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/26_Y2lQQ9CXEtFadmOOFMX39ssw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.12.0/23
Signature Algorithm: sha256WithRSAEncryption
60:eb:79:6e:01:7d:05:4b:ab:ed:f5:72:96:df:c8:ad:d7:e3:
00:97:0a:76:c8:58:ac:d6:7e:f8:96:e4:3d:5a:5e:e8:a2:fc:
73:dd:75:5a:cf:3d:33:fa:12:ce:42:39:88:84:ed:56:80:b9:
ac:36:00:d0:da:fd:1e:84:5c:cf:08:e9:e5:bc:8f:57:00:37:
dc:71:19:62:22:fd:da:3d:cb:f4:cc:25:27:24:91:f6:1d:66:
56:42:8d:0d:bb:d2:0c:e6:e6:63:52:3f:fa:ab:3f:7f:39:35:
f2:62:fc:fd:25:4f:19:05:47:36:1a:59:b8:c9:df:78:00:23:
a1:09:9e:0a:3a:04:83:92:a8:85:da:cb:79:aa:84:c3:a5:a0:
46:06:f2:50:09:8a:b7:da:72:bc:e8:9b:6c:c7:5d:b9:89:39:
14:ed:c5:ce:30:78:1d:3e:51:b3:12:5a:09:cb:a0:a9:22:dd:
51:9c:71:f3:7c:4d:9d:2d:ee:13:80:98:b0:f2:c9:d8:b9:89:
e5:21:c0:76:6c:7f:50:42:82:4d:19:f6:d0:a9:83:47:da:6b:
5a:6f:28:12:ac:8a:48:54:57:26:6c:62:af:54:1d:4d:cd:bc:
d1:81:99:a2:0a:8a:8d:0b:50:3d:a1:5d:c6:af:1b:ce:39:05:
7e:35:dd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:41:27 2025 by rpki-client