Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/fdOHadbduUc9htmWTS-jPq_zv2U.roa
File: fdOHadbduUc9htmWTS-jPq_zv2U.roa (raw, json)
Hash identifier: gZYnTf+6Tdj5UA3epTVfXJljvvit6fFaXTM2YVnS+ZA=
Subject key identifier: 7D:D3:87:69:D6:DD:B9:47:3D:86:D9:96:4D:2F:A3:3E:AF:F3:BF:65
Certificate issuer: /CN=821219469c6df76cf476f274cdcf27e52f8f0df8
Certificate serial: 01942368CC07D50241BAE77E6238D2AD709C
Authority key identifier: 82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/fdOHadbduUc9htmWTS-jPq_zv2U.roa
Signing time: Wed 01 Jan 2025 19:47:37 +0000
ROA not before: Wed 01 Jan 2025 19:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56485
IP address blocks: 188.65.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:cc:07:d5:02:41:ba:e7:7e:62:38:d2:ad:70:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821219469c6df76cf476f274cdcf27e52f8f0df8
Validity
Not Before: Jan 1 19:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dd38769d6ddb9473d86d9964d2fa33eaff3bf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:3f:6c:5f:ff:b9:f1:2a:94:0c:88:0d:b2:
5b:61:b7:45:09:ce:d2:34:95:9e:e8:de:c2:56:d3:
7f:e6:7e:90:ae:6b:4b:12:26:90:80:c5:30:b4:c8:
b9:ee:6b:9c:b9:ef:70:5e:5d:d0:be:be:e9:a5:03:
1e:e3:3d:63:b2:94:c6:0b:bd:2f:8d:c8:01:56:6c:
c0:a4:d3:a6:3f:c3:22:af:17:c5:bc:2e:0d:ae:3a:
50:50:70:df:77:6d:c6:94:66:fe:fa:4d:ba:04:96:
ee:64:17:b3:fc:a6:5e:e4:b9:ae:21:2a:26:fb:43:
49:6e:30:ba:c2:0b:ba:a1:4f:20:f9:8c:c6:7b:b1:
2d:34:85:56:79:1b:9d:e7:17:a9:6c:78:a5:1e:64:
e7:83:4a:d2:8e:71:be:c3:67:59:df:ea:18:7e:35:
45:16:45:5e:55:d9:0f:50:53:ee:da:8c:4e:b5:ec:
42:31:5a:77:58:32:a6:cc:2c:e1:47:8b:38:60:d0:
69:03:db:06:30:e6:cf:98:76:9c:07:f3:e2:64:0a:
f9:31:7c:6b:91:eb:f3:8f:b8:54:51:61:df:01:02:
51:93:38:8e:ac:46:53:62:46:e3:a9:aa:23:f1:d1:
bb:24:9c:c6:b1:e8:11:62:1e:01:92:db:6d:0e:b0:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D3:87:69:D6:DD:B9:47:3D:86:D9:96:4D:2F:A3:3E:AF:F3:BF:65
X509v3 Authority Key Identifier:
keyid:82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/fdOHadbduUc9htmWTS-jPq_zv2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.65.160.0/24
Signature Algorithm: sha256WithRSAEncryption
70:88:3a:05:33:76:2a:cb:fe:10:61:19:0e:e4:42:fb:11:a0:
5a:cf:6c:21:35:c6:51:bb:77:27:57:2b:8a:ff:f2:0f:b9:86:
e9:8a:1b:bb:b0:b4:d4:7d:3b:0f:c2:bb:a4:fa:aa:da:f4:31:
3b:0a:80:d4:2e:8e:73:ea:64:51:ed:08:b7:45:dd:5c:87:cf:
fa:20:f3:94:3b:db:bb:8b:69:68:c0:02:ef:fd:f6:4f:a1:6a:
76:c6:db:33:1a:d8:8f:b6:d3:bb:b6:be:cb:73:76:34:2b:91:
25:85:e1:36:4a:88:53:05:ac:08:67:86:49:4d:6e:bc:ab:0e:
eb:9b:41:db:23:13:e2:e1:50:e1:66:95:4c:3e:3b:b4:04:e8:
ae:2a:4d:77:ab:bd:07:68:6f:1a:7f:a4:3d:ff:34:c1:5c:21:
e5:64:7d:8a:76:b4:3c:67:18:84:6e:74:8c:0b:76:6e:77:f7:
5b:35:37:c6:b0:db:cb:a3:b8:26:d4:22:57:b3:6a:a1:3f:5d:
8f:f5:00:70:20:d6:bf:47:c7:43:eb:81:93:f8:bc:4c:37:87:
9a:43:3a:f6:28:6a:e5:9e:13:37:07:94:ed:9e:6e:70:8d:af:
0a:54:26:51:77:86:f5:6b:44:ba:ff:31:7a:44:40:de:b7:60:
ad:70:7a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:29 2025 by rpki-client