Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/d5WgCeSAUDt3ftxEm5pQgwQGZFY.roa
File: d5WgCeSAUDt3ftxEm5pQgwQGZFY.roa (raw, json)
Hash identifier: 95JV8+HrFCv4N8x/3gw92ZCi8CVHuQoWzXep7gaHUK4=
Subject key identifier: 77:95:A0:09:E4:80:50:3B:77:7E:DC:44:9B:9A:50:83:04:06:64:56
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019423699DF59CC58A9AAC4A38BF5BB0D7D0
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/d5WgCeSAUDt3ftxEm5pQgwQGZFY.roa
Signing time: Wed 01 Jan 2025 19:48:31 +0000
ROA not before: Wed 01 Jan 2025 19:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50637
IP address blocks: 188.212.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9d:f5:9c:c5:8a:9a:ac:4a:38:bf:5b:b0:d7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7795a009e480503b777edc449b9a508304066456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:2d:87:8d:6d:c8:7a:e3:76:41:aa:37:5d:
17:20:66:e4:ad:cb:94:9b:92:14:57:63:88:5a:d3:
01:c4:a5:37:5c:fc:70:20:89:d8:e7:18:37:c3:de:
7c:c3:ce:57:d7:fd:e4:af:0c:6b:46:e8:f5:92:4b:
af:9c:38:1e:7c:33:03:ca:73:cc:48:e9:67:ea:a5:
1e:bb:7d:1a:ee:c4:a2:19:cf:94:30:c8:9d:f6:79:
96:be:2e:1c:6d:15:e2:ce:02:38:11:ad:3c:fe:da:
46:54:89:a0:2b:a4:7c:c1:b3:d2:32:e6:4d:7b:77:
dc:09:9f:ae:04:fc:16:b5:ac:f9:1b:8a:ab:ce:1b:
62:b0:aa:c9:05:49:31:7d:29:ae:ba:9a:2a:35:41:
ea:43:30:20:f6:f3:ad:64:0f:00:7c:ba:6e:15:89:
0b:8e:44:41:79:6a:98:92:92:0a:02:2c:1e:9f:16:
8b:b9:85:4a:25:12:f4:8f:9c:83:26:70:d7:e8:a1:
f9:91:25:7a:12:3b:bd:ba:c1:37:46:e8:ad:dd:37:
6a:43:e9:2c:8c:2c:0e:57:6e:5b:1c:09:cb:c0:42:
cd:10:d7:2f:92:66:a6:74:db:d4:80:cb:7b:c0:55:
ed:6a:72:18:af:29:89:10:3c:e8:ea:77:a0:bb:af:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:95:A0:09:E4:80:50:3B:77:7E:DC:44:9B:9A:50:83:04:06:64:56
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/d5WgCeSAUDt3ftxEm5pQgwQGZFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.130.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e1:fd:0c:05:01:82:95:f8:a8:84:25:6a:dc:a9:27:fa:57:
78:3d:4c:8e:41:83:26:24:8f:07:1f:9f:94:87:b1:ad:d2:48:
f5:fc:29:b3:0a:bd:82:65:e2:ad:ba:65:bb:12:0e:3f:66:64:
fb:18:31:00:c1:ad:23:66:04:6c:1b:c4:88:25:6b:bf:54:bd:
e6:9d:91:bf:a5:b3:25:30:b1:a7:b5:20:32:80:28:7f:5c:3c:
83:75:96:28:36:7a:1a:80:0f:74:70:8e:f5:69:f6:04:e9:77:
e5:4b:45:f0:e5:e5:9b:48:6c:6a:10:3e:33:c3:93:8f:7f:04:
97:f9:bd:8f:f0:20:ff:d7:55:03:61:c9:4a:56:e7:1a:da:b9:
58:3f:10:65:1e:4d:4f:3f:c2:2d:2d:7f:cd:c5:b9:dd:fa:ac:
a8:4f:ea:da:ac:1d:5c:20:f0:b0:b8:82:28:11:5a:1e:ba:91:
c9:39:1b:72:64:0f:1f:43:fe:b8:20:13:fa:d6:e9:7b:52:12:
3b:b0:d9:03:8f:48:f8:4a:fd:40:f2:c4:f3:07:ce:ef:27:d7:
6d:17:b6:f9:35:ae:da:d7:85:13:09:28:c7:eb:37:52:2d:f4:
37:31:0a:11:a6:e3:e7:34:42:e3:d7:42:77:dd:df:32:24:8f:
c0:73:2c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:55 2025 by rpki-client