Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/ET3ybFc-NmWVXVPjoJvzAUIP6kg.roa
File: ET3ybFc-NmWVXVPjoJvzAUIP6kg.roa (raw, json)
Hash identifier: JGU4N3AZI76sPPBKJA46boeSJsTBbrUUI8xTw6tP8Ys=
Subject key identifier: 11:3D:F2:6C:57:3E:36:65:95:5D:53:E3:A0:9B:F3:01:42:0F:EA:48
Certificate issuer: /CN=a663abd479cbff76082304bf60d03adc3187d936
Certificate serial: 018CC26D17FDB80FC19A34F3ED96CD10E20F
Authority key identifier: A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/ET3ybFc-NmWVXVPjoJvzAUIP6kg.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397403
IP address blocks: 185.198.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:17:fd:b8:0f:c1:9a:34:f3:ed:96:cd:10:e2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a663abd479cbff76082304bf60d03adc3187d936
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=113df26c573e3665955d53e3a09bf301420fea48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:ab:f1:df:ac:04:b0:a6:ed:c8:a3:fa:ad:
54:e5:18:7b:3c:c7:43:b4:5d:89:cd:0e:60:d4:b6:
ad:a7:e3:02:4a:9d:05:12:b8:cd:d2:c2:45:11:87:
f9:30:67:77:af:39:36:97:90:4d:62:ed:05:98:83:
9d:4c:35:41:d2:69:18:03:45:88:ed:0e:ba:b8:40:
43:ff:dc:18:e3:90:ed:0f:41:7b:b8:08:9e:c1:7f:
ce:40:52:3c:77:2a:fb:04:ef:45:37:07:2f:b9:de:
8b:f9:fa:99:6c:9c:48:09:34:33:3f:59:15:47:f3:
a6:7b:ea:92:3b:17:77:e5:a7:df:23:d2:ef:08:f5:
49:3f:6c:e7:b5:ac:1d:e2:30:3e:24:22:de:ff:a4:
df:c0:4f:f3:80:22:80:4d:e6:06:c5:fc:24:1f:c7:
a7:76:58:49:4f:35:0f:14:3c:d4:6a:a7:b5:87:50:
8c:70:6c:d9:38:1b:3a:a3:97:35:f9:0c:72:e7:3a:
9a:27:b5:fd:bf:39:3f:e4:c7:d4:14:2f:07:b3:ef:
a0:5b:e1:38:7c:1d:99:ce:8e:3d:1a:24:22:07:94:
68:bf:ba:36:f6:aa:e1:c1:83:35:f1:d3:8f:1b:01:
20:ea:f4:26:23:fe:92:28:37:58:65:7c:67:de:9b:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3D:F2:6C:57:3E:36:65:95:5D:53:E3:A0:9B:F3:01:42:0F:EA:48
X509v3 Authority Key Identifier:
keyid:A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/ET3ybFc-NmWVXVPjoJvzAUIP6kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.88.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e9:86:c6:7f:e8:7f:6a:bb:e2:b7:04:f8:af:fa:4d:61:50:
50:75:42:02:ea:54:a7:8b:5e:76:60:a9:67:a2:90:ce:ee:dd:
96:4d:33:01:c8:ea:96:6e:45:13:44:d9:2a:44:0f:63:4b:4d:
bf:f3:39:38:6f:d7:d6:37:0c:b7:c7:8e:44:f0:30:93:55:78:
3c:47:e1:6c:6f:d2:44:6b:e8:45:bb:ac:b7:6c:7e:9f:92:cd:
b0:d7:a8:42:7f:5b:85:ed:b8:8f:d1:f8:4a:9c:de:65:06:39:
8b:12:04:35:3c:62:9b:eb:91:68:b3:79:fe:a3:96:fc:fe:d8:
80:6c:c5:14:81:14:fd:ea:77:b3:7f:53:24:50:c0:87:cd:4b:
55:09:2d:a0:41:a8:9a:e5:a1:d7:5e:4c:b1:53:1a:76:75:39:
88:30:e9:3a:a7:95:b1:b8:b5:35:31:bb:e3:f2:8c:c8:62:cd:
9f:c1:9f:4a:f9:f1:a7:26:39:2e:eb:a4:16:55:51:66:98:37:
ca:22:33:ab:4a:9b:e6:0c:d4:da:67:a5:e1:f7:b4:e9:d8:43:
c0:70:d8:de:db:a3:b2:f0:df:a2:52:8b:6c:59:1c:b6:1f:19:
78:c2:f4:36:84:2b:24:d3:ba:db:c8:45:07:59:58:80:e2:e4:
5c:c2:f5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:15 2025 by rpki-client