Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa
File: Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa (raw, json)
Hash identifier: rz8wrfdxxW9MCDam/a85dhszclSCd3rA7daMzdL/WN0=
Subject key identifier: 3E:2D:36:28:6D:0F:53:F1:65:9E:C1:E6:AA:07:79:CD:B2:8B:55:D0
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 01942369E5F4E8917796547B28D2AC58F1E0
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa
Signing time: Wed 01 Jan 2025 19:48:50 +0000
ROA not before: Wed 01 Jan 2025 19:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 195.88.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e5:f4:e8:91:77:96:54:7b:28:d2:ac:58:f1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Jan 1 19:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e2d36286d0f53f1659ec1e6aa0779cdb28b55d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:17:36:b9:f7:b7:b4:c6:86:66:ab:eb:a9:
b6:d0:fd:e1:80:f3:b8:af:11:51:d2:a8:67:e8:ab:
98:7d:cf:cf:f8:29:96:c2:0a:dc:54:f5:0a:7d:64:
68:e9:d0:27:02:17:b2:f7:e0:20:95:b1:46:9a:93:
70:0b:0b:58:ae:e3:8d:22:7e:31:bb:4d:1d:df:de:
a7:18:4d:9c:66:d4:e2:9c:74:d8:bd:01:e6:b2:8e:
32:fd:56:f3:5d:b9:0b:d9:eb:aa:f1:1c:0c:21:03:
f2:27:8c:09:b4:bb:56:96:75:18:6a:24:77:1e:df:
ad:6c:6f:8b:9f:b1:81:7c:31:34:19:f4:44:d6:cd:
1e:e8:74:2d:09:b5:8c:0e:09:31:1d:b5:8c:5d:13:
bb:6f:6c:1a:ff:6f:af:70:76:91:12:6a:23:09:09:
f0:0a:50:49:7a:ac:ed:00:e2:e4:b4:9a:f4:40:e1:
48:cb:d2:9a:38:6e:b8:be:6d:ed:a2:7a:ed:57:80:
9a:7b:2b:cd:27:88:ab:11:09:d5:6b:d1:ca:4e:0e:
42:63:2c:1c:07:4c:da:37:f8:5b:28:08:26:57:ca:
a3:27:32:49:cc:80:77:2c:97:8b:9e:7b:28:18:23:
b3:90:49:41:4a:99:5e:a3:d1:a1:61:60:f6:a1:21:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2D:36:28:6D:0F:53:F1:65:9E:C1:E6:AA:07:79:CD:B2:8B:55:D0
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.208.0/24
Signature Algorithm: sha256WithRSAEncryption
98:bc:b0:fa:86:53:b4:0a:10:97:14:ac:85:70:a2:8d:20:db:
9c:73:5c:88:58:31:d7:6f:df:b2:e5:33:de:93:34:d4:e5:70:
ea:af:bb:4f:0a:6e:e8:9b:79:4d:bc:f9:2f:a3:bb:e9:86:5e:
6c:8b:5b:4b:ab:5e:8c:48:7f:6a:e1:5e:63:25:5d:f7:84:10:
db:86:fe:72:3e:fd:ad:ed:5c:8f:53:80:65:30:57:8c:77:9b:
c5:4c:a4:41:f0:37:b9:c5:9c:67:86:d3:38:10:94:fd:65:9e:
a9:b3:47:09:d5:c2:44:85:38:51:d7:d8:03:76:f3:fc:ff:21:
67:23:ea:4d:a3:e7:e8:a7:f6:42:3a:3e:08:7a:af:26:58:05:
6a:d5:fc:4c:85:8b:07:7d:cb:05:ea:d5:9d:00:c4:22:cd:da:
b1:8e:7f:f1:f1:3f:a8:6c:8f:ca:92:7c:84:ed:8f:30:aa:62:
53:25:50:57:16:64:cc:d3:76:4f:82:25:b9:3c:4b:fa:43:26:
0b:33:4f:30:18:d5:c8:37:31:84:4c:c7:69:5b:d6:f5:63:dd:
95:9b:53:f1:4a:f5:ec:f3:f2:ff:42:0a:d8:f6:c6:97:13:39:
cb:5f:fc:87:dd:25:b1:9c:81:2e:f2:28:b3:55:20:77:b4:6e:
35:ea:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:16:07 2025 by rpki-client