Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/j-nqL0xN6WbmkmqvTYJrSA6qGCQ.roa
File: j-nqL0xN6WbmkmqvTYJrSA6qGCQ.roa (raw, json)
Hash identifier: Qw7R/IgYTVpT3XgGSpkjT+8JID4fe8wv1odGKPFhq/M=
Subject key identifier: 8F:E9:EA:2F:4C:4D:E9:66:E6:92:6A:AF:4D:82:6B:48:0E:AA:18:24
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01942444D3208750F0F84D2C10CD8A1ED84F
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/j-nqL0xN6WbmkmqvTYJrSA6qGCQ.roa
Signing time: Wed 01 Jan 2025 23:47:57 +0000
ROA not before: Wed 01 Jan 2025 23:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20657
IP address blocks: 88.80.131.0/24 maxlen: 24
88.80.132.0/24 maxlen: 24
88.80.133.0/24 maxlen: 24
88.80.152.0/21 maxlen: 21
193.108.24.0/24 maxlen: 24
194.79.12.0/23 maxlen: 24
195.68.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d3:20:87:50:f0:f8:4d:2c:10:cd:8a:1e:d8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 23:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fe9ea2f4c4de966e6926aaf4d826b480eaa1824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6d:57:49:ff:fb:01:95:b3:fd:55:6a:94:b8:
5f:49:31:56:cf:fe:2b:c8:1d:06:e2:e7:c5:47:a2:
4e:4b:b5:df:86:6b:0a:f0:f7:8d:c6:e3:10:9f:ff:
18:a7:58:8d:86:79:9b:55:32:a1:ca:ba:12:27:1a:
2b:7b:d0:d0:f1:5b:0d:11:71:b7:95:4b:a5:0c:d9:
97:41:3c:f2:58:e6:3e:69:d1:1f:7d:dd:5f:af:06:
0d:96:cb:3e:06:26:ac:08:84:c4:a3:e2:5e:54:78:
c7:65:0e:a4:b7:62:3b:b7:a2:86:ab:82:89:c6:0d:
7c:6d:67:4f:b9:54:1e:2c:4a:ad:b6:fd:3f:b6:80:
65:25:e5:18:cf:99:52:9b:30:0e:cb:41:b7:b5:5a:
3f:06:10:8b:b3:68:43:93:71:56:0e:3d:e5:71:25:
b4:1c:c1:3a:44:a0:c1:cc:44:e5:01:3c:0d:e0:36:
3a:08:08:61:6d:08:76:58:c4:e5:82:0e:6d:7e:01:
98:7b:20:cf:28:e7:76:4e:b7:2d:55:ab:ab:6b:99:
40:80:ae:c7:40:b4:15:90:37:23:8d:8f:be:60:8b:
20:44:98:0a:dd:3a:6f:91:27:33:2e:8b:6d:5c:34:
fe:63:0b:75:ba:0a:ee:59:65:2d:8c:01:cf:73:35:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E9:EA:2F:4C:4D:E9:66:E6:92:6A:AF:4D:82:6B:48:0E:AA:18:24
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/j-nqL0xN6WbmkmqvTYJrSA6qGCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.131.0-88.80.133.255
88.80.152.0/21
193.108.24.0/24
194.79.12.0/23
195.68.214.0/23
Signature Algorithm: sha256WithRSAEncryption
53:18:ce:1f:02:e0:fa:b2:fd:6e:00:b6:94:a2:6b:95:57:c7:
09:63:9d:e1:93:5e:0a:48:f6:f7:b0:73:c0:57:30:a9:98:ee:
47:55:f9:bf:7b:5d:03:ac:29:f8:af:56:23:63:2e:17:ab:7c:
18:66:25:73:52:db:05:7e:16:de:9b:fd:b4:f0:53:ab:80:87:
1e:4b:16:2b:a5:27:69:10:1c:c2:0e:8e:a0:45:13:23:64:1e:
6a:bf:8c:50:47:31:f6:59:02:b3:6b:df:48:c1:34:9a:ee:22:
8c:a0:cb:fa:ff:c5:35:1e:82:43:f0:17:88:fa:a4:58:40:4d:
8f:fb:8a:a9:0b:d1:87:f0:5b:85:c4:67:60:af:e7:59:15:63:
b5:3e:d3:51:d5:f0:82:04:ff:18:87:93:3d:8c:0c:50:6b:9c:
e7:3e:c2:cb:09:6c:be:79:73:56:73:95:a1:8f:9f:77:55:d4:
0b:0c:77:c4:78:71:74:dd:91:94:75:84:08:3d:ee:5b:51:bc:
f7:14:a8:bd:6b:f5:5f:d1:e8:4b:54:0b:32:00:ac:8a:3a:27:
1a:75:e4:59:e9:05:c7:9b:d5:6c:31:dd:c2:a0:32:a0:89:25:
50:ba:7b:a7:e4:86:5c:cd:c8:f0:84:8a:e7:88:1f:62:b8:4c:
86:6d:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:26 2025 by rpki-client