Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/KkHO8EEeZBOm7_l5HOIZAS3NulY.roa
File: KkHO8EEeZBOm7_l5HOIZAS3NulY.roa (raw, json)
Hash identifier: RzjK6AcZX2b5y/bRXqcCT15lqpVsguGvpbBBd8QAuKo=
Subject key identifier: 2A:41:CE:F0:41:1E:64:13:A6:EF:F9:79:1C:E2:19:01:2D:CD:BA:56
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018CD684ACB861717F816ED05FCD6F79133D
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/KkHO8EEeZBOm7_l5HOIZAS3NulY.roa
Signing time: Thu 04 Jan 2024 22:07:48 +0000
ROA not before: Thu 04 Jan 2024 22:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 88.135.104.0/21 maxlen: 24
88.135.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d6:84:ac:b8:61:71:7f:81:6e:d0:5f:cd:6f:79:13:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 4 22:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a41cef0411e6413a6eff9791ce219012dcdba56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:fd:80:69:97:11:8e:4b:fd:0b:ef:6d:f0:
75:7c:9f:ed:8b:8c:b7:f0:9c:17:fe:42:30:b4:7f:
96:09:fb:8c:6e:13:60:0d:a9:17:78:5f:93:07:e4:
be:1e:61:3a:e0:ec:e8:2f:cc:63:9c:d9:ad:ea:94:
5b:4d:3c:25:0e:5d:8b:9d:f0:26:f0:12:1f:5f:c4:
f0:ae:06:e3:43:15:9b:65:98:11:35:5f:74:70:f8:
8f:9f:05:ac:bd:c3:3a:a9:83:8a:8c:06:f7:73:ca:
bf:25:18:83:b9:a2:0c:05:5f:47:8e:3e:60:2a:63:
31:c2:38:11:c5:5d:5a:9f:06:2a:bc:d8:da:d2:5a:
be:6b:e9:a2:23:4c:b9:ac:ec:53:83:8d:8a:3f:10:
b7:54:b9:2f:a8:64:2f:c3:6c:ab:ec:56:da:18:cc:
46:55:ea:1e:ac:f1:c9:92:ee:7d:74:c8:2c:2c:d0:
66:dd:67:90:e9:7e:11:3e:46:10:76:60:38:18:4e:
95:14:da:cd:50:90:4a:f0:74:b7:5f:9f:92:4a:66:
f9:22:cf:86:8b:57:bc:4c:17:e7:25:10:fd:59:15:
79:19:6d:bc:13:57:7d:7c:dd:7e:21:b0:9e:73:56:
de:74:a6:2f:71:7b:65:a2:c9:da:65:51:d0:e5:f4:
fc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:41:CE:F0:41:1E:64:13:A6:EF:F9:79:1C:E2:19:01:2D:CD:BA:56
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/KkHO8EEeZBOm7_l5HOIZAS3NulY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.100.0-88.135.111.255
Signature Algorithm: sha256WithRSAEncryption
41:d3:78:2e:1d:81:43:16:13:be:8f:aa:11:26:a6:da:56:de:
95:61:21:2b:4d:03:be:14:8d:85:01:1e:25:08:de:b6:f8:43:
2a:3e:d7:f5:3d:55:8a:bb:0f:c1:41:1a:02:15:f5:92:e3:3a:
cf:25:bc:2e:1d:6c:b6:e7:52:59:38:0f:57:c3:22:a5:a2:e2:
ca:15:fa:85:52:ee:c6:b3:4e:05:dc:af:45:8e:e5:84:f5:36:
84:77:dc:0c:ce:bb:5e:ef:ab:60:c7:b4:0c:1b:db:b4:a4:48:
63:55:4c:1e:c3:43:86:5e:4d:3c:f0:62:9f:e8:be:cd:fb:49:
3f:bf:14:e2:a1:1f:66:ea:5c:18:8b:34:d7:ff:e2:46:35:5d:
1f:65:78:42:33:d0:06:8f:9d:2e:e5:4e:4f:13:59:41:e7:80:
aa:7d:6a:ce:c6:d3:07:7d:35:9c:38:a5:1f:f2:0a:d9:55:9a:
0d:9f:fb:12:ed:68:f6:dc:78:74:00:ef:76:f1:0e:ba:0b:b7:
30:e4:5f:8c:28:d0:0e:89:32:12:18:81:7b:9f:c2:86:01:bb:
f2:5d:a6:11:0e:14:5f:ed:18:0f:28:a2:61:28:3e:64:a8:96:
e7:42:c8:48:68:ff:98:9a:17:86:a6:ba:09:54:89:14:93:fb:
35:4c:72:ab
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzWhKy4YXF/gW7QX81veRM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZThjYzhmNWFmMWU3MzYyZDQ1NGYzZGQ5MWE4Mjk1Mjkx
OWRiNjEwHhcNMjQwMTA0MjIwNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTQxY2VmMDQxMWU2NDEzYTZlZmY5NzkxY2UyMTkwMTJkY2RiYTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzX9gGmXEY5L/QvvbfB1fJ/ti4y3
8JwX/kIwtH+WCfuMbhNgDakXeF+TB+S+HmE64OzoL8xjnNmt6pRbTTwlDl2LnfAm
8BIfX8TwrgbjQxWbZZgRNV90cPiPnwWsvcM6qYOKjAb3c8q/JRiDuaIMBV9Hjj5g
KmMxwjgRxV1anwYqvNja0lq+a+miI0y5rOxTg42KPxC3VLkvqGQvw2yr7FbaGMxG
VeoerPHJku59dMgsLNBm3WeQ6X4RPkYQdmA4GE6VFNrNUJBK8HS3X5+SSmb5Is+G
i1e8TBfnJRD9WRV5GW28E1d9fN1+IbCec1bedKYvcXtlosnaZVHQ5fT8QQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCpBzvBBHmQTpu/5eRziGQEtzbpWMB8GA1UdIwQY
MBaAFNvozI9a8ec2LUVPPdkagpUpGdthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMt
MjYyMWQ1Yzk5Y2FiLzEvS2tITzhFRWVaQk9tN19sNUhPSVpBUzNOdWxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMtMjYyMWQ1Yzk5Y2Fi
LzEvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJYh2QD
BARYh2AwDQYJKoZIhvcNAQELBQADggEBAEHTeC4dgUMWE76PqhEmptpW3pVhIStN
A74UjYUBHiUI3rb4Qyo+1/U9VYq7D8FBGgIV9ZLjOs8lvC4dbLbnUlk4D1fDIqWi
4soV+oVS7sazTgXcr0WO5YT1NoR33AzOu17vq2DHtAwb27SkSGNVTB7DQ4ZeTTzw
Yp/ovs37ST+/FOKhH2bqXBiLNNf/4kY1XR9leEIz0AaPnS7lTk8TWUHngKp9as7G
0wd9NZw4pR/yCtlVmg2f+xLtaPbceHQA73bxDroLtzDkX4wo0A6JMhIYgXufwoYB
u/JdphEOFF/tGA8oomEoPmSoludCyEho/5iaF4amuglUiRST+zVMcqs=
-----END CERTIFICATE-----
Generated at Wed Mar 12 06:57:15 2025 by rpki-client