Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/iVG-25bM88ddtV7tVi3BLCyeDQw.roa
File: iVG-25bM88ddtV7tVi3BLCyeDQw.roa (raw, json)
Hash identifier: 7EeomKFeDW94knVRl1HGaPfiQ2UYn2aJypsQx4iNLyY=
Subject key identifier: 89:51:BE:DB:96:CC:F3:C7:5D:B5:5E:ED:56:2D:C1:2C:2C:9E:0D:0C
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 1BDAB792
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/iVG-25bM88ddtV7tVi3BLCyeDQw.roa
Signing time: Fri 08 Apr 2022 08:47:03 +0000
ROA not before: Fri 08 Apr 2022 08:47:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8228
IP address blocks: 88.140.0.0/16 maxlen: 16
213.223.0.0/16 maxlen: 16
84.4.0.0/14 maxlen: 14
88.141.0.0/16 maxlen: 16
78.112.0.0/12 maxlen: 12
195.115.0.0/16 maxlen: 16
88.136.0.0/14 maxlen: 14
88.142.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467318674 (0x1bdab792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Apr 8 08:47:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8951bedb96ccf3c75db55eed562dc12c2c9e0d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:14:83:73:16:89:f5:e7:cf:e5:a2:9c:95:
17:a1:16:53:5f:93:32:5b:95:58:3e:21:8b:79:c2:
bb:af:e1:e6:53:9a:d8:ed:8f:ff:09:cc:43:77:fb:
03:8a:c2:5a:9e:7e:7d:c5:88:94:19:cb:56:58:7b:
17:07:7a:bd:bb:5c:db:83:4d:87:aa:48:ed:6f:8b:
5d:eb:5e:a2:47:f5:d2:25:4b:67:7c:a2:71:2a:5c:
bc:f0:1d:9e:35:5a:21:56:cf:13:cb:4f:19:e0:73:
e3:4d:59:33:b0:65:f6:80:e4:14:cd:44:ea:12:77:
55:10:96:a3:f5:0e:e6:95:4f:39:75:66:cf:58:a6:
50:8e:be:c1:52:dd:0a:47:38:7d:4b:71:c3:5b:93:
10:05:83:1f:c6:da:3e:50:19:c6:fc:d0:19:67:f7:
6f:dd:8a:ce:17:67:a8:d8:c6:53:fa:2b:54:b5:83:
b5:15:81:68:e4:c8:93:83:7f:40:4a:b4:ce:13:4c:
d0:9a:39:3c:9d:d0:0b:13:dd:50:e2:9c:0b:8c:1b:
a4:62:42:bd:51:92:20:91:47:62:8d:60:cc:5f:29:
68:30:41:ee:55:5d:32:e3:6b:5f:eb:ff:3d:75:74:
e4:b7:11:e8:d2:15:b7:2c:1a:f5:e4:7a:f3:f5:3e:
3e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:51:BE:DB:96:CC:F3:C7:5D:B5:5E:ED:56:2D:C1:2C:2C:9E:0D:0C
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/iVG-25bM88ddtV7tVi3BLCyeDQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.112.0.0/12
84.4.0.0/14
88.136.0.0-88.142.255.255
195.115.0.0/16
213.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:d9:1d:fa:e7:36:fc:5e:80:64:c3:93:ae:9d:f2:e5:c5:de:
71:3a:0e:63:33:12:87:ad:33:e1:26:3c:3c:0e:58:8d:d1:ee:
b6:1c:c2:f3:0c:27:37:bd:2a:5d:aa:72:2d:d0:bf:06:27:a6:
24:ad:e2:76:e1:ba:97:70:ad:4c:da:22:cf:1a:a2:02:6e:73:
0b:07:4c:ab:78:61:76:da:c0:73:2f:3f:e2:01:85:bc:78:31:
f9:52:de:fb:d8:d2:5b:3b:33:7e:af:cb:5f:df:dc:0a:7c:9d:
4c:af:54:77:46:b6:98:3a:44:9b:1d:00:1c:ab:73:43:72:9b:
99:69:bf:e4:a9:0d:20:28:3c:f8:3f:6f:fb:32:1f:72:0f:f2:
65:35:a9:80:5a:17:00:1a:b9:99:76:ae:c8:1c:8e:55:75:ec:
92:52:bd:41:7c:ff:43:28:ce:26:66:f4:c2:06:c2:8d:63:a5:
4b:4e:5d:a9:b6:c6:02:a4:d9:c7:9d:7a:68:df:b2:c7:1f:94:
65:dc:39:32:6a:8a:f8:cd:ad:26:6d:1d:ed:bf:26:d0:52:a4:
f2:39:d7:93:82:cb:6c:90:81:2b:74:05:d0:29:3d:2a:32:da:
4b:46:f6:3f:3b:bd:1e:fc:c4:75:71:bf:56:0d:d5:98:14:f2:
2c:c5:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:22:05 2025 by rpki-client