Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ce8k7XCQyghvYHchvwALfCrVJwg.roa
File: ce8k7XCQyghvYHchvwALfCrVJwg.roa (raw, json)
Hash identifier: yQNx287pWR7HRDZfUEYypC3YO0EWbPD76GUoO2g6XzE=
Subject key identifier: 71:EF:24:ED:70:90:CA:08:6F:60:77:21:BF:00:0B:7C:2A:D5:27:08
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01942444DBD245B6E3DBC022688C6A198997
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ce8k7XCQyghvYHchvwALfCrVJwg.roa
Signing time: Wed 01 Jan 2025 23:48:00 +0000
ROA not before: Wed 01 Jan 2025 23:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215492
IP address blocks: 88.80.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:db:d2:45:b6:e3:db:c0:22:68:8c:6a:19:89:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 23:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71ef24ed7090ca086f607721bf000b7c2ad52708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:e6:33:87:38:f4:97:7e:c8:e6:07:51:5d:
e0:dc:c5:2e:78:34:bf:e2:f3:9f:a4:fa:51:49:0c:
b9:0f:84:0c:c2:22:67:2a:5d:67:7e:7b:d1:8a:6a:
ea:5d:c9:e8:44:4b:f5:f3:8a:30:41:f1:bf:67:78:
a3:22:27:10:e6:61:7e:9c:fb:c8:ae:37:70:68:0b:
84:74:24:7d:f1:7c:6b:b4:7e:19:f6:b1:38:c0:7c:
ca:6b:fe:7e:1b:84:70:c6:82:bd:d9:32:12:e2:e1:
d2:50:02:f9:64:59:0c:1b:f6:9f:24:96:c5:91:0b:
bb:8a:fc:a1:81:9a:8d:26:f8:00:30:4f:a3:d9:5b:
c2:bc:78:d5:cb:37:ee:d7:d5:4f:82:27:13:b0:01:
9a:64:ca:c1:1e:25:8b:5c:31:ed:ec:86:96:4c:c0:
e8:af:65:af:18:fb:a9:16:15:b7:fb:cc:28:0a:83:
62:9e:e3:8d:b1:75:7c:8f:c3:c4:0c:13:01:66:cc:
8b:48:36:40:24:de:4e:15:d3:52:58:b1:65:23:a6:
56:15:80:78:0d:31:e5:7d:4c:33:e4:38:43:74:e4:
7f:1b:b7:d9:88:39:c3:75:50:23:60:7e:ea:16:b8:
a8:69:9b:b1:ec:46:b6:8f:f7:39:5f:36:17:d0:9b:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EF:24:ED:70:90:CA:08:6F:60:77:21:BF:00:0B:7C:2A:D5:27:08
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ce8k7XCQyghvYHchvwALfCrVJwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.140.0/24
Signature Algorithm: sha256WithRSAEncryption
41:12:f2:16:1f:5a:9a:24:e3:02:6a:d2:f4:ca:76:11:c9:97:
53:33:88:dd:aa:15:25:5c:c2:d5:31:64:06:a8:e6:29:1a:a8:
4d:a4:55:be:8c:55:17:54:59:16:a1:8d:07:59:67:fb:e2:90:
8c:79:64:d8:e4:98:11:f0:d4:77:60:cd:aa:fd:57:13:6d:56:
a5:d7:e0:98:8b:06:9c:55:99:02:99:6b:9e:58:94:c1:fe:48:
35:f2:53:17:dd:c6:b0:b8:69:97:44:5b:6f:f6:f9:e1:4f:2a:
bf:0d:04:81:de:e0:81:cd:c9:1a:77:ca:73:25:e5:0e:83:91:
3a:75:d8:8f:4b:21:14:23:87:ed:31:92:48:d5:40:cf:4d:b9:
38:43:24:08:a3:2c:75:4d:77:23:8e:79:cf:42:52:a2:ee:89:
3c:21:7b:c6:b7:f7:ea:e1:52:76:93:a6:a4:3d:e4:0e:8d:9b:
9f:80:d8:9f:ef:a1:0c:8e:1a:d0:98:86:bd:95:68:03:73:0e:
e3:bc:0e:e9:d0:22:4a:b3:0c:ba:13:30:e6:e3:5a:f5:9d:92:
ec:59:79:2f:09:87:55:ad:59:b4:64:af:ce:05:3e:d5:76:0c:
b1:3a:e3:28:d5:3b:1e:19:0f:3c:f2:a7:08:de:bc:11:3b:a3:
b0:bb:cf:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRNvSRbbj28AiaIxqGYmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjUwMTAxMjM0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWVmMjRlZDcwOTBjYTA4NmY2MDc3MjFiZjAwMGI3YzJhZDUyNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yHmM4c49Jd+yOYHUV3g3MUueDS/
4vOfpPpRSQy5D4QMwiJnKl1nfnvRimrqXcnoREv184owQfG/Z3ijIicQ5mF+nPvI
rjdwaAuEdCR98XxrtH4Z9rE4wHzKa/5+G4RwxoK92TIS4uHSUAL5ZFkMG/afJJbF
kQu7ivyhgZqNJvgAME+j2VvCvHjVyzfu19VPgicTsAGaZMrBHiWLXDHt7IaWTMDo
r2WvGPupFhW3+8woCoNinuONsXV8j8PEDBMBZsyLSDZAJN5OFdNSWLFlI6ZWFYB4
DTHlfUwz5DhDdOR/G7fZiDnDdVAjYH7qFrioaZux7Ea2j/c5XzYX0JvEwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHHvJO1wkMoIb2B3Ib8AC3wq1ScIMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvY2U4azdYQ1F5Z2h2WUhjaHZ3QUxmQ3JWSndnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCMMA0G
CSqGSIb3DQEBCwUAA4IBAQBBEvIWH1qaJOMCatL0ynYRyZdTM4jdqhUlXMLVMWQG
qOYpGqhNpFW+jFUXVFkWoY0HWWf74pCMeWTY5JgR8NR3YM2q/VcTbVal1+CYiwac
VZkCmWueWJTB/kg18lMX3cawuGmXRFtv9vnhTyq/DQSB3uCBzckad8pzJeUOg5E6
ddiPSyEUI4ftMZJI1UDPTbk4QyQIoyx1TXcjjnnPQlKi7ok8IXvGt/fq4VJ2k6ak
PeQOjZufgNif76EMjhrQmIa9lWgDcw7jvA7p0CJKswy6EzDm41r1nZLsWXkvCYdV
rVm0ZK/OBT7VdgyxOuMo1TseGQ888qcI3rwRO6Owu8+A
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:40:17 2025 by rpki-client