Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BcQlnBmlq6OmLNHkNML-Ij6BRvw.roa
File: BcQlnBmlq6OmLNHkNML-Ij6BRvw.roa (raw, json)
Hash identifier: mRJd03r5yXWXykV8xmbunFnzTI9ArU6KpRFHEbaYYAg=
Subject key identifier: 05:C4:25:9C:19:A5:AB:A3:A6:2C:D1:E4:34:C2:FE:22:3E:81:46:FC
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194CFF857A14E601297EADB7BC69DF7CDC7
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BcQlnBmlq6OmLNHkNML-Ij6BRvw.roa
Signing time: Tue 04 Feb 2025 07:59:06 +0000
ROA not before: Tue 04 Feb 2025 07:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62151
IP address blocks: 188.215.232.0/23 maxlen: 23
188.215.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cf:f8:57:a1:4e:60:12:97:ea:db:7b:c6:9d:f7:cd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 4 07:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05c4259c19a5aba3a62cd1e434c2fe223e8146fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:ff:f9:b9:47:78:17:ea:0b:ae:5c:8f:0c:
45:65:9a:e4:bf:90:8e:2d:01:60:c7:50:92:9f:ce:
33:92:df:ef:aa:a5:1e:a8:71:00:a0:cc:32:2c:01:
22:3a:6b:e9:60:3d:64:40:b2:f7:13:70:f9:6c:1e:
0b:d2:bf:be:09:dd:e5:1a:64:ae:04:a5:88:1a:ac:
2a:94:77:3c:a4:b0:b8:6d:73:d9:28:e1:bb:d4:9c:
9c:22:85:41:48:03:f9:8b:04:a2:3a:17:d4:85:83:
f1:9f:fc:42:e0:58:d0:e9:71:6b:ad:cf:8a:1c:64:
56:47:9e:79:85:fb:27:38:a6:ad:9a:97:85:42:54:
a1:6e:b4:5b:fc:b1:a6:ba:db:ca:2a:21:91:2e:c4:
b2:3a:3c:52:86:63:24:d2:5b:7c:46:89:e2:85:43:
9d:97:a6:1e:01:bc:df:32:e8:39:61:bc:b1:c8:44:
77:cf:cb:75:1c:d9:77:1a:04:c0:ac:e6:73:55:97:
fc:ed:6a:3d:7f:03:65:c1:fd:b8:15:75:f8:d2:1f:
cd:5d:6f:d2:84:f3:b8:17:5e:40:0d:03:fd:8c:9f:
88:f4:ae:0e:1b:8f:2c:7c:0d:19:72:ad:cc:7e:27:
40:f0:f1:b5:90:89:50:80:43:bd:1e:c3:1d:61:af:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C4:25:9C:19:A5:AB:A3:A6:2C:D1:E4:34:C2:FE:22:3E:81:46:FC
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BcQlnBmlq6OmLNHkNML-Ij6BRvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.232.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:16:99:4f:5a:59:04:24:32:60:72:82:f6:ad:94:9f:16:eb:
72:1c:b8:0e:84:54:67:4e:ff:48:13:91:63:33:ba:73:d1:d5:
64:57:63:c9:2f:1f:07:a0:34:52:c7:0d:63:82:e6:9d:e0:4f:
88:74:e4:c3:8f:ac:2c:b5:2e:5c:a0:d1:07:77:22:77:f9:0b:
c2:be:3f:57:0e:14:d8:35:be:0f:b2:55:ce:d4:f3:9b:7f:74:
12:c1:64:f9:b0:62:b2:84:9a:78:38:75:4c:ab:be:c3:93:7c:
50:6f:93:9f:bd:92:d6:27:dc:cc:4a:a5:7c:f2:da:3b:6d:d9:
7a:25:ff:3e:e3:e6:a2:8a:0d:f1:4d:bb:0c:98:8d:a6:48:3f:
2b:9b:45:92:cb:3b:35:4c:ae:0d:6d:9b:d2:f9:e4:68:c7:74:
19:15:fa:83:7d:eb:94:dd:d1:dd:b9:86:eb:36:94:50:88:6d:
47:89:5f:59:a8:8a:72:62:62:9b:89:6a:92:42:52:b4:a9:86:
e0:ba:34:32:9f:01:ae:44:9f:e4:b7:cc:b3:93:7b:62:cc:6c:
1d:6a:93:5a:1b:82:5d:de:23:af:25:91:87:30:57:f2:78:ef:
dc:ab:78:2a:8d:3d:7a:b4:2f:f3:ca:f9:61:85:05:e9:59:08:
f3:cf:4b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:16 2025 by rpki-client