Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/_HxOSGDLp42EFmYvwzkWMgsUDRc.roa
File: _HxOSGDLp42EFmYvwzkWMgsUDRc.roa (raw, json)
Hash identifier: ld3Ed4rdMoSUbT+R2+5BJt8zZUTSFFBqMJ22iFdBG+s=
Subject key identifier: FC:7C:4E:48:60:CB:A7:8D:84:16:66:2F:C3:39:16:32:0B:14:0D:17
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194221F7E22EB1D55FAA72CF7CA597D9D50
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/_HxOSGDLp42EFmYvwzkWMgsUDRc.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209371
IP address blocks: 188.241.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7e:22:eb:1d:55:fa:a7:2c:f7:ca:59:7d:9d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc7c4e4860cba78d8416662fc33916320b140d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ed:6c:d4:69:38:94:1b:5b:72:c6:3b:37:2e:
e3:48:3e:eb:a2:0b:30:91:5e:c7:e6:cb:99:1e:8d:
60:ac:d6:98:42:6e:24:67:bc:2e:ee:91:7d:92:55:
1d:9c:6e:5b:d5:64:42:be:a5:d0:7e:75:f8:8a:7b:
9d:91:da:82:93:5e:91:ff:ce:99:0d:75:e0:43:c8:
17:6a:f0:c7:42:65:0c:cc:98:65:95:1e:a1:23:b9:
3a:8e:aa:fa:61:cc:9f:62:7e:16:1b:cd:3b:3f:9e:
99:be:87:4e:5b:50:1a:f2:57:ec:4f:55:3a:76:f0:
6c:19:8f:94:c5:3d:b1:94:28:4d:0f:78:2e:22:53:
0a:af:36:91:67:24:8d:6d:a4:01:b6:8b:84:19:57:
65:76:80:1a:5b:c2:68:04:e8:25:72:52:1f:7f:34:
1a:e9:9e:97:8e:63:da:f2:b3:21:a4:3e:8e:c0:a9:
a9:66:5e:9b:53:d6:c7:e5:a9:fb:8c:ac:62:e7:a5:
15:1d:68:30:34:4e:c7:41:2d:49:dc:c8:76:38:fd:
ae:cb:33:4e:a0:13:5d:1f:47:6f:5d:29:5d:be:7b:
2c:d4:4e:1d:f0:11:1e:30:07:d4:67:90:28:0a:e9:
fe:2a:03:93:20:20:b8:ef:b0:a2:cc:2a:42:b4:d5:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7C:4E:48:60:CB:A7:8D:84:16:66:2F:C3:39:16:32:0B:14:0D:17
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/_HxOSGDLp42EFmYvwzkWMgsUDRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9f:f8:16:01:13:f6:4e:b3:0b:48:8f:09:42:a8:63:90:ba:
4d:17:88:41:ea:43:20:c7:6f:79:10:66:24:ca:74:f8:68:54:
ca:9f:f0:64:29:98:42:a7:e8:7a:6a:45:d5:71:65:d2:05:14:
4e:62:6e:63:3b:46:8f:87:52:9b:23:cc:ea:47:f6:fc:ab:b7:
21:5e:d0:58:83:67:91:2d:15:1c:2e:bb:1b:87:03:d8:c7:c7:
9d:ab:82:45:79:72:2e:76:dd:5d:d5:f8:15:4d:8e:b0:52:47:
45:b3:3d:d8:b8:94:63:0e:fe:5b:31:c0:00:e5:58:5d:39:58:
20:08:1c:f4:13:c5:2b:8a:c5:a3:14:e8:b4:6a:ba:d8:7d:e0:
de:6e:7d:92:75:5a:87:78:5d:ab:86:b8:03:0c:41:5f:21:d7:
f6:9e:48:f8:d6:89:c3:1a:bc:f2:29:f3:e7:1a:19:54:f1:4c:
95:f9:74:07:8a:d7:bc:16:e3:12:f8:b7:d3:57:f2:02:2a:b1:
71:a0:cc:9e:52:0f:5f:11:81:41:2c:06:73:90:5c:53:ba:54:
57:98:28:6d:97:92:25:0d:ec:04:cb:27:f7:47:f0:fa:ca:0f:
f2:c6:93:40:e1:76:be:fa:ae:9f:36:e3:14:8d:fc:d5:04:eb:
f1:92:5b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:12 2025 by rpki-client