Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/R5JbJw73tUKFEZc8KHsRGOO-T7g.roa
File: R5JbJw73tUKFEZc8KHsRGOO-T7g.roa (raw, json)
Hash identifier: 7h9x7JhftPvq8vJMpR76JidhZQXgqSWBF0m8uqPyDV4=
Subject key identifier: 47:92:5B:27:0E:F7:B5:42:85:11:97:3C:28:7B:11:18:E3:BE:4F:B8
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018C24A4AEAAA39E39D15BE65543354525F4
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/R5JbJw73tUKFEZc8KHsRGOO-T7g.roa
Signing time: Fri 01 Dec 2023 09:10:21 +0000
ROA not before: Fri 01 Dec 2023 09:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 88.135.96.0/20 maxlen: 24
213.159.136.0/21 maxlen: 24
141.136.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:a4:ae:aa:a3:9e:39:d1:5b:e6:55:43:35:45:25:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Dec 1 09:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47925b270ef7b5428511973c287b1118e3be4fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:b9:01:5f:26:bb:35:a8:f9:93:dd:b1:69:
61:99:71:c4:73:83:fc:53:1e:10:53:9e:cc:2d:b0:
98:9e:d6:13:d9:cc:d8:da:6b:68:1a:a7:0d:22:9a:
ca:ae:a9:48:30:1d:d8:d2:50:30:2c:5b:63:a9:8b:
63:19:66:5a:d1:c6:73:9c:67:8d:13:68:55:fa:c3:
8a:21:c5:c1:fb:90:13:73:da:66:c8:fc:9a:1b:e7:
53:84:14:1e:cd:40:7b:8b:82:80:82:3e:d1:09:31:
a8:63:75:e5:f9:82:5a:22:9b:cc:d6:61:54:af:d0:
1c:34:35:7c:5c:c4:39:aa:c9:3e:ee:7e:1e:95:d3:
bf:51:0e:e5:30:41:2e:dc:8a:6d:d8:fe:f1:6a:e3:
b0:4b:78:45:60:88:8c:14:06:f1:3c:e5:66:2f:7b:
f0:76:db:e5:e2:1d:61:6b:bb:c4:87:2e:e6:6c:f9:
31:e6:ab:16:b4:2e:9d:63:3f:61:fa:1e:18:8f:95:
5a:e2:ac:bf:b7:de:e8:31:ec:18:7c:16:05:83:35:
71:f5:ce:9f:9a:d5:9e:1c:79:76:dd:d5:04:a6:2a:
39:f6:fe:a8:e0:26:ef:14:fc:a6:7d:e8:e9:5f:57:
01:f6:60:e0:d1:94:32:a4:df:f7:f1:8a:15:30:95:
11:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:92:5B:27:0E:F7:B5:42:85:11:97:3C:28:7B:11:18:E3:BE:4F:B8
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/R5JbJw73tUKFEZc8KHsRGOO-T7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.96.0/20
141.136.16.0/20
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:df:8f:87:8c:93:0b:fd:9c:09:c6:1b:7f:cb:c4:68:3b:47:
7d:a1:d1:48:61:d4:c7:ad:a7:7d:ce:fb:07:b2:6c:2c:46:09:
1a:25:9e:ee:83:50:6c:77:40:5b:15:dd:5f:a8:f9:6a:d8:92:
d3:1f:34:27:fd:6c:cf:79:eb:8d:4a:c7:60:50:d4:b2:69:ab:
44:b9:8a:8b:18:50:00:61:e1:a0:06:3e:10:a2:0a:70:59:8b:
87:4b:fa:d9:f0:d1:e4:e1:df:d1:c0:92:a7:5a:47:b9:92:75:
23:c2:ff:c8:fb:2d:aa:db:87:8f:34:99:c0:9a:12:4e:a7:aa:
3a:f7:40:e5:3a:fd:37:56:b8:01:a2:eb:00:1a:d3:b9:04:6c:
76:7f:83:3f:d8:2f:a2:bf:23:79:2b:ac:ea:e7:bb:92:05:56:
25:f5:41:a4:d7:73:cd:eb:7d:a8:27:01:06:d3:dc:57:13:94:
09:e4:6e:0c:7b:a8:61:d0:15:f6:29:ac:1c:09:76:4d:d5:ed:
5b:7d:f4:f3:f1:61:37:e1:5e:da:c3:fc:67:c4:c4:08:7c:a4:
eb:87:d7:37:38:a0:a9:8d:b7:79:a2:32:a6:59:0d:60:94:c0:
f2:14:84:a0:55:70:1f:88:e1:96:0c:48:f0:77:f8:5b:fc:09:
d2:39:a5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:50:36 2025 by rpki-client