Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/AbkTRSTpSf4RCic-uEQyOad4xIk.roa
File: AbkTRSTpSf4RCic-uEQyOad4xIk.roa (raw, json)
Hash identifier: IunjPQkl9q42BYU50J6+yiU3eFdiMRBnXS6eDSx/fTc=
Subject key identifier: 01:B9:13:45:24:E9:49:FE:11:0A:27:3E:B8:44:32:39:A7:78:C4:89
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0189BD065C3C57AB7AE2CFB2D6BF73343997
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/AbkTRSTpSf4RCic-uEQyOad4xIk.roa
Signing time: Thu 03 Aug 2023 20:10:57 +0000
ROA not before: Thu 03 Aug 2023 20:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 88.135.100.0/22 maxlen: 24
88.135.104.0/21 maxlen: 24
213.159.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bd:06:5c:3c:57:ab:7a:e2:cf:b2:d6:bf:73:34:39:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Aug 3 20:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01b9134524e949fe110a273eb8443239a778c489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:c1:72:47:5e:87:49:50:06:94:2d:d3:bc:
5a:d9:93:0e:7b:bf:be:88:b2:14:dd:bb:ef:21:45:
9d:c6:51:f4:21:d6:57:e4:5f:8e:f8:c8:59:9e:00:
63:fc:42:e5:16:61:15:8b:db:ff:46:f5:8e:72:45:
32:8b:8d:3e:fc:1f:19:36:16:1f:25:53:3d:12:56:
b9:45:9c:89:1e:f2:d0:31:5e:7f:86:92:57:f8:f0:
a6:bd:79:d5:b2:04:3d:f0:29:43:ad:8f:2b:ce:8b:
96:91:69:f1:17:08:9d:91:59:9d:23:03:c3:b2:88:
f2:11:92:68:2e:b0:a0:5b:d9:0d:18:ea:2e:7d:e8:
0a:4e:f9:70:1c:26:1c:08:cb:6c:72:11:03:53:41:
91:fc:28:83:43:47:a1:df:ad:bf:33:d2:99:8e:1d:
0c:51:b6:78:98:bc:2c:75:0a:b5:e3:bb:2e:47:b6:
86:ad:9c:31:d5:16:c5:82:2e:b9:3f:f9:93:25:e7:
c8:ae:9a:b0:ce:7b:95:55:15:91:3b:d0:c2:47:29:
39:b4:58:c9:c0:14:e3:5e:f1:2b:47:61:c0:09:c6:
af:a3:9f:9d:08:50:1b:d9:02:a0:f3:bb:c6:b7:ab:
f5:37:a7:48:ae:4d:37:97:f3:42:cc:d8:77:7a:8c:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B9:13:45:24:E9:49:FE:11:0A:27:3E:B8:44:32:39:A7:78:C4:89
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/AbkTRSTpSf4RCic-uEQyOad4xIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.100.0-88.135.111.255
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
60:9c:47:88:20:c4:8f:53:96:b0:d2:fa:cb:39:4d:3c:24:83:
58:95:01:7b:ab:47:65:e4:9b:35:0c:fd:14:78:09:0a:1b:85:
bd:a8:64:0a:b4:4a:b5:95:c9:59:2a:9a:e8:fb:b7:8f:bb:a5:
04:23:58:61:c5:bd:08:f1:6d:1a:0a:65:32:23:56:de:f2:8d:
f0:c7:98:a2:69:4b:b4:9c:7c:e3:6e:12:65:9b:ff:b3:23:ee:
e3:49:b2:0d:62:55:30:a2:45:c5:61:67:1a:98:03:f0:28:0f:
6e:d4:fe:4a:03:54:88:d3:35:5d:22:cd:90:98:35:68:78:f3:
cb:cb:1a:3d:e8:72:7c:6e:71:aa:15:e7:6e:87:a8:8d:70:6f:
17:25:fa:bc:2c:bf:ad:34:21:43:5e:28:e4:63:e9:e1:ca:ae:
86:3d:8a:ec:d8:c3:1a:79:89:fe:c3:cb:94:15:7e:f7:e0:ec:
89:fa:30:90:df:87:80:79:00:5e:69:1d:fc:18:d9:d4:f2:cc:
a5:b0:97:c8:00:5e:95:93:f9:7a:d5:cf:30:e3:04:e4:91:72:
ae:3d:d1:74:72:9e:33:0c:bb:e8:31:98:5a:ac:70:2e:89:20:
f4:19:df:e5:e0:0d:63:f1:67:62:e6:d5:c7:7d:96:ce:e1:ef:
6b:5d:71:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 12 06:44:58 2025 by rpki-client