Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/v-Zyc-8gXfCAs8hhOf7JEov0XFQ.roa
File: v-Zyc-8gXfCAs8hhOf7JEov0XFQ.roa (raw, json)
Hash identifier: 6+ea9BVfVupiKipjKzEQYkv6CJOZM8C0elI+moY54XI=
Subject key identifier: BF:E6:72:73:EF:20:5D:F0:80:B3:C8:61:39:FE:C9:12:8B:F4:5C:54
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019504E097E6A81EA4BF7265538045FAD5B3
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/v-Zyc-8gXfCAs8hhOf7JEov0XFQ.roa
Signing time: Fri 14 Feb 2025 14:33:02 +0000
ROA not before: Fri 14 Feb 2025 14:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 188.214.228.0/22 maxlen: 24
188.215.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:e0:97:e6:a8:1e:a4:bf:72:65:53:80:45:fa:d5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Feb 14 14:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfe67273ef205df080b3c86139fec9128bf45c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4c:8e:f7:f3:7f:83:d7:e4:ea:3e:be:65:17:
86:49:7d:fc:03:2d:ca:52:b4:d8:0b:61:06:f0:69:
51:f6:e6:0c:08:2c:0f:58:d8:8c:d1:99:80:7e:1b:
e3:72:96:27:ba:31:fe:9c:fb:74:20:ce:d4:72:f2:
aa:c7:d9:fa:e4:7e:6e:4e:02:80:8a:e0:0b:c3:3e:
7f:af:b6:78:be:97:8a:b3:cd:56:47:02:4f:09:da:
b3:de:28:76:60:6b:83:25:ef:ad:2c:31:3e:35:96:
cd:ea:78:a3:b9:27:a4:fd:f5:9c:90:0d:81:0b:ff:
3b:9d:5e:1e:35:2a:d3:39:9d:a8:6b:69:70:11:39:
23:6e:64:a6:f1:ac:a4:03:3d:18:27:c6:7c:87:18:
ed:95:f3:5f:8c:09:5a:e5:86:b8:77:e6:a9:e4:ff:
20:94:39:d2:4c:eb:4c:65:30:5a:17:f5:b1:80:08:
9f:3a:27:96:ae:d4:ba:2c:a9:00:b9:e1:10:87:89:
70:17:d9:cb:36:d6:04:ac:94:2e:6e:b5:ce:fb:8d:
7d:28:2d:54:24:07:91:28:e7:37:a3:77:3f:cf:49:
a4:67:cb:23:55:8f:85:77:f4:f1:c4:4d:68:1d:b7:
a0:9c:de:39:90:b3:be:04:34:cf:89:11:0d:76:b9:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E6:72:73:EF:20:5D:F0:80:B3:C8:61:39:FE:C9:12:8B:F4:5C:54
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/v-Zyc-8gXfCAs8hhOf7JEov0XFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.228.0/22
188.215.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:c7:6c:81:36:0a:29:51:89:11:fb:5f:6b:16:e1:b5:05:b5:
f7:ea:ea:ff:42:5f:80:8f:60:c3:ec:7b:ea:c3:cd:64:13:47:
26:f3:57:cb:61:4c:ae:21:94:33:0e:82:4c:f2:b9:c0:37:9f:
c6:a7:aa:6c:5b:70:62:8e:54:d6:0c:5e:13:30:00:e9:fb:33:
dc:20:e6:df:a5:b5:e3:30:ed:63:4f:40:aa:c1:35:3a:fc:1a:
f0:8b:e1:f1:ef:df:c5:05:c0:61:58:43:c2:44:50:6a:e4:e3:
a7:18:d3:f5:b8:6d:18:6f:ce:6b:17:f8:28:aa:52:00:b7:fb:
d7:df:8d:37:74:6d:91:18:f7:39:46:5e:94:3e:c0:b2:f6:a6:
40:7c:94:1b:69:4b:46:0d:81:0b:9a:dc:a9:dc:57:fd:e1:e5:
87:c2:80:fc:fe:41:d4:78:14:d9:f7:49:bc:de:25:60:df:2e:
b4:3a:0e:c6:18:74:b8:ed:fe:df:13:50:56:24:4b:f8:02:13:
a5:8e:a5:d2:20:c2:be:bc:a7:ea:2a:de:67:95:11:07:04:ac:
61:6a:7b:c3:42:b4:44:44:1e:38:8e:c1:31:85:2b:39:e8:93:
24:48:00:cc:26:01:85:82:84:5a:1e:7f:73:ac:df:bd:db:f9:
e9:8f:51:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:43 2025 by rpki-client