Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vfS9RUHzn3PdFdTiqvgNjSIOUpk.roa
File: vfS9RUHzn3PdFdTiqvgNjSIOUpk.roa (raw, json)
Hash identifier: o7XviZ1KHj3iPtjsX5Q5ywlZGOLwihuTF0E1MZ3i2lE=
Subject key identifier: BD:F4:BD:45:41:F3:9F:73:DD:15:D4:E2:AA:F8:0D:8D:22:0E:52:99
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC886DD5682AD2CE9A2DBA58554AAF
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vfS9RUHzn3PdFdTiqvgNjSIOUpk.roa
Signing time: Thu 02 Jan 2025 07:48:14 +0000
ROA not before: Thu 02 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399114
IP address blocks: 188.253.8.0/24 maxlen: 24
188.253.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:88:6d:d5:68:2a:d2:ce:9a:2d:ba:58:55:4a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdf4bd4541f39f73dd15d4e2aaf80d8d220e5299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:82:a6:3a:92:cd:ce:e2:f6:73:52:51:a2:
76:f8:32:14:23:bc:9d:ae:46:06:3c:69:7f:d6:83:
b5:17:bc:9b:09:9a:cd:2d:44:62:9e:b3:e3:61:cf:
79:90:fa:ee:6c:ec:75:5c:c0:3c:69:99:2d:ea:1f:
bc:8f:fe:05:41:92:78:62:20:d7:44:35:c7:ef:c8:
61:48:43:ef:f0:a6:43:3c:4d:ec:78:89:59:7f:d4:
67:b4:fc:05:19:41:cc:c4:06:4e:5a:ea:3e:ac:aa:
e3:8a:a0:83:6a:00:30:a9:b2:61:69:55:14:0b:9a:
04:0b:9c:f8:73:95:07:59:23:bb:9d:e5:4e:a9:3d:
38:86:fe:f7:d9:80:bf:70:ad:5b:a5:80:ae:37:1d:
09:d1:cb:32:57:1c:e1:7e:94:66:6b:57:5e:6b:49:
69:b8:d3:e6:21:97:03:69:66:72:1e:6f:b6:57:3b:
3f:03:b1:d1:05:7b:f9:33:fc:4b:50:8a:4e:76:ff:
45:5a:39:09:0e:70:cd:5e:4e:50:2b:0b:54:e1:e1:
62:7d:6f:e2:fa:85:0e:68:a5:2a:3d:a0:a8:de:0e:
c4:aa:93:79:55:25:5c:d3:f5:45:19:9d:9a:3a:d3:
1f:69:6f:15:1e:49:5b:5b:c8:8f:ac:b2:2e:5b:df:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F4:BD:45:41:F3:9F:73:DD:15:D4:E2:AA:F8:0D:8D:22:0E:52:99
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vfS9RUHzn3PdFdTiqvgNjSIOUpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.8.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:1c:49:c0:4b:c0:64:1d:07:49:2a:d4:5a:7f:ec:6e:cb:6a:
7f:85:43:af:65:a9:83:3d:08:6e:78:31:6a:86:48:a7:e2:92:
73:6b:26:93:db:21:e7:d2:1c:bd:43:2a:39:36:59:fd:d7:4f:
f2:67:5c:0b:5a:2a:3a:8d:18:22:dc:36:70:01:48:d7:18:b6:
a8:37:98:42:80:09:93:d8:d8:d7:1f:72:b8:b6:f5:23:dc:a3:
a6:50:38:90:76:c7:8e:af:87:66:c9:a1:2d:9b:cd:eb:0f:c0:
93:07:3c:6e:f3:19:11:d8:18:3c:0b:85:7f:25:51:7c:fe:38:
b4:5a:02:43:a9:85:bc:83:c0:a6:50:04:05:5d:0c:94:fa:a6:
e4:90:57:5d:01:ed:c3:19:23:de:ae:7d:ad:aa:34:31:1c:cd:
18:74:a8:76:29:ea:92:ff:f3:58:8b:ac:8b:13:3d:12:a6:3f:
18:4f:9b:22:76:e6:fa:ae:59:57:cd:08:fe:da:eb:be:21:3f:
48:ae:35:63:cd:70:01:93:d0:3c:41:88:d8:41:76:99:21:e0:
05:15:25:12:84:69:59:69:50:3b:50:cb:12:88:f3:29:15:23:
5a:50:5b:05:97:a6:14:b2:b0:c4:10:7e:b1:9e:90:51:a5:4a:
b1:ca:d1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:53:07 2025 by rpki-client