Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/ydSirsqi4dbK6knaPYIImnjk4mM.roa
File: ydSirsqi4dbK6knaPYIImnjk4mM.roa (raw, json)
Hash identifier: dhGNwSuMJazH9HoW/UFqWsyZFul3Ssqhjzr0Tegzke4=
Subject key identifier: C9:D4:A2:AE:CA:A2:E1:D6:CA:EA:49:DA:3D:82:08:9A:78:E4:E2:63
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018CC56EC691AF44CB19D027481C66E41FD4
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/ydSirsqi4dbK6knaPYIImnjk4mM.roa
Signing time: Mon 01 Jan 2024 14:30:20 +0000
ROA not before: Mon 01 Jan 2024 14:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 88.135.96.0/20 maxlen: 24
213.159.136.0/21 maxlen: 24
141.136.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c6:91:af:44:cb:19:d0:27:48:1c:66:e4:1f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 1 14:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9d4a2aecaa2e1d6caea49da3d82089a78e4e263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:2b:d6:81:81:73:12:c3:e7:00:5e:1d:99:
94:e2:61:4d:4e:bd:7d:3d:3b:bb:ed:04:8f:d5:2b:
aa:14:fd:b3:64:08:22:06:9e:d8:74:43:8e:e5:db:
20:15:06:5c:d8:c0:d1:f2:82:1f:a0:38:e5:a1:0c:
7d:2e:a7:df:9f:e5:58:e3:80:b5:cc:ac:76:54:53:
9c:04:0e:29:4b:21:84:2f:44:96:ed:78:5e:ee:e3:
db:dc:c8:7a:71:5c:f2:6a:a2:bf:9b:e2:d6:74:67:
fb:d1:17:b6:ea:5b:62:2e:66:1c:59:09:d3:2a:54:
51:57:40:33:0f:34:7b:93:8b:45:50:6c:b7:f9:ba:
87:66:8a:48:a5:60:ce:00:25:06:13:e1:7e:9f:42:
2c:f7:1b:62:d1:dd:ce:88:2f:c6:c7:2c:75:3f:76:
3a:e1:83:12:2c:7b:45:52:24:06:1d:48:0e:19:c5:
13:a8:f6:e3:e0:c7:8d:5e:11:df:a0:6f:a0:a8:48:
99:ba:b4:60:58:17:e3:02:e1:d9:9c:1a:19:b9:cf:
a2:ac:66:7a:66:b6:21:f5:ae:09:38:b7:94:9a:08:
ab:73:42:af:c7:d5:28:9f:0c:29:0d:a9:13:ae:05:
25:28:c4:81:52:3b:ed:d3:3f:0b:17:bb:6e:c8:61:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D4:A2:AE:CA:A2:E1:D6:CA:EA:49:DA:3D:82:08:9A:78:E4:E2:63
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/ydSirsqi4dbK6knaPYIImnjk4mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.96.0/20
141.136.16.0/20
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
65:3b:e3:30:ed:73:84:8f:11:f7:a0:75:84:75:6e:7e:c9:ce:
1f:91:88:dd:62:96:41:6e:78:9e:a7:83:55:6d:78:4a:b3:63:
57:56:54:49:dd:56:2e:80:16:81:f0:b5:d1:66:c4:c0:bc:c3:
d3:76:ad:9f:44:0f:49:72:9c:a8:78:6d:ca:1d:f9:14:e0:58:
ff:5a:55:92:e7:a1:f8:65:77:55:51:ec:94:b4:16:c0:a7:06:
62:a5:26:42:1c:74:da:7c:49:5b:fc:80:dd:13:51:9f:7e:69:
f8:c0:90:a4:a2:b8:78:e2:4a:27:f4:b9:f1:71:fa:98:72:80:
9d:9f:55:9d:1e:8c:ba:93:e2:7e:4d:bf:67:cd:d8:1c:1b:44:
70:63:b6:9a:3e:0d:2b:ff:88:16:31:32:68:78:0e:5d:d7:3a:
51:a3:19:3b:77:08:78:8e:f5:50:66:f0:94:98:32:42:be:52:
0e:27:a6:95:2a:f2:a6:89:f2:12:ec:5b:d7:af:b8:0c:8d:ff:
97:2b:49:d6:9a:5e:60:de:cd:9a:6f:8b:a0:50:8b:11:75:82:
e1:04:97:1b:19:a1:f4:7a:4f:4b:2c:84:71:ab:6a:04:8f:a5:
b2:61:29:ee:ac:27:46:df:d5:46:2a:0f:e4:09:a9:39:79:a5:
0d:6c:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:49:29 2025 by rpki-client