Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/8bsQRC6tEXl8CBwmVFzVd76zzgI.roa
File: 8bsQRC6tEXl8CBwmVFzVd76zzgI.roa (raw, json)
Hash identifier: C8qiZHuVAIBOKIv/baZ/CLEIEY2S6o8WOpdp6qtA5us=
Subject key identifier: F1:BB:10:44:2E:AD:11:79:7C:08:1C:26:54:5C:D5:77:BE:B3:CE:02
Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial: 01942748672794495525F904C4EDF48C6F6E
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/8bsQRC6tEXl8CBwmVFzVd76zzgI.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 88.218.132.0/22 maxlen: 22
2a09:aa80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:67:27:94:49:55:25:f9:04:c4:ed:f4:8c:6f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1bb10442ead11797c081c26545cd577beb3ce02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:a2:5c:0b:14:82:9c:65:bc:09:7a:cc:f1:
22:5a:22:c4:2a:de:6a:63:33:ba:c0:90:be:d8:c8:
73:2f:7e:34:eb:7e:d3:a8:f8:9a:84:fd:c7:a4:8f:
a8:f4:e1:24:29:c1:bf:33:46:33:8b:95:cd:6f:91:
87:2f:e0:00:f9:69:6b:80:84:4f:0f:7e:ce:94:54:
8f:85:62:be:c3:ea:21:4f:fa:44:3c:ef:d6:3c:3b:
cb:25:98:8f:20:ce:ab:ff:76:d8:ef:a1:13:01:fe:
20:22:93:5d:0d:93:7e:ef:a6:3e:fb:1a:29:dd:e7:
00:73:04:56:0a:e6:24:a5:f1:e1:44:81:a2:fa:c4:
2f:64:ed:c5:a5:7a:e9:a6:db:ba:ea:8e:0a:0a:1f:
95:0e:b7:f4:0a:62:14:b6:c0:67:18:98:de:c8:1c:
cf:e1:e9:dc:fa:80:60:e2:52:2b:56:26:b5:bb:e0:
14:65:f1:7e:1f:4c:ae:07:3d:75:fa:82:02:14:b6:
83:31:2e:f0:e6:72:94:e2:56:03:13:2a:40:c9:8a:
f1:5c:8c:f2:2f:5f:4a:95:e5:77:ec:d3:49:58:cb:
ea:77:2c:72:51:05:2f:01:19:89:6a:03:6c:1b:64:
e7:f5:1c:9b:c0:73:a5:5d:fe:e0:d9:d9:6e:61:c8:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BB:10:44:2E:AD:11:79:7C:08:1C:26:54:5C:D5:77:BE:B3:CE:02
X509v3 Authority Key Identifier:
keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/8bsQRC6tEXl8CBwmVFzVd76zzgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.132.0/22
IPv6:
2a09:aa80::/32
Signature Algorithm: sha256WithRSAEncryption
44:dd:5a:a8:24:23:a4:39:f8:08:fd:d2:bd:47:cd:f8:bd:f7:
46:d5:d6:7d:46:ea:bf:97:68:ec:a5:fa:69:2d:4e:4c:b0:61:
a6:76:d1:11:95:93:44:92:70:f5:12:49:2b:da:96:ae:aa:68:
06:14:67:21:f4:6e:78:66:0f:da:5e:97:88:e2:e6:95:d1:36:
45:71:67:68:ca:34:0c:4e:36:e0:67:50:f6:29:17:5c:e0:ce:
34:e5:21:9c:78:fe:15:62:8d:32:a0:53:14:ef:c9:ac:c8:fc:
7a:dd:68:bc:86:16:14:c1:7c:e0:53:84:9a:88:08:c1:6b:99:
10:eb:12:90:15:46:fa:9a:2b:a1:31:47:3e:9e:5b:74:68:20:
82:82:51:22:8a:94:a9:e7:76:a8:ac:ac:2f:55:44:d9:b6:ff:
98:54:97:b8:46:37:86:fc:8c:77:87:b4:d3:0c:70:04:34:e9:
2e:b5:66:59:7e:31:32:09:8c:94:19:0b:6f:22:2f:a8:94:0f:
a4:21:70:70:48:ee:57:c4:68:1b:2a:7e:2b:86:97:66:ae:7f:
2f:d0:f0:3b:57:04:89:32:b5:9e:ac:98:91:87:50:f4:7b:fc:
49:f5:4f:f2:ca:42:cf:53:a8:e1:91:bb:10:99:c7:af:23:54:
97:39:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:40 2025 by rpki-client