Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/twVpvlgGcn2wMFxLET5jabKj7lE.roa
File: twVpvlgGcn2wMFxLET5jabKj7lE.roa (raw, json)
Hash identifier: 6O74RoMA1Bml+kLutB1Hui+CE3ATKHf//KCCsZVvIEI=
Subject key identifier: B7:05:69:BE:58:06:72:7D:B0:30:5C:4B:11:3E:63:69:B2:A3:EE:51
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 01941FFA6E211B4EB144975BEFD8E14D0601
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/twVpvlgGcn2wMFxLET5jabKj7lE.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202468
IP address blocks: 188.213.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6e:21:1b:4e:b1:44:97:5b:ef:d8:e1:4d:06:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b70569be5806727db0305c4b113e6369b2a3ee51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:7b:d3:df:54:95:7a:c9:d7:5d:aa:6f:d0:
0c:e1:0f:ab:77:bf:4d:d7:26:4f:05:eb:ad:5e:d1:
08:42:e9:cf:aa:e2:bb:e3:2e:d6:a0:d6:0c:7c:ec:
b7:7f:29:1a:86:ee:5c:2b:77:b2:0d:84:08:42:d1:
68:8a:f2:c9:2a:19:64:be:69:49:a4:1d:e5:b0:a8:
80:8e:62:d2:10:45:5e:77:b5:d6:1e:61:fb:15:e4:
90:e9:dc:78:68:dc:36:ef:c4:08:db:b5:0a:a4:5d:
27:c0:23:99:9c:14:ac:8e:19:e7:70:ff:4e:73:44:
3c:66:1b:c9:1e:3b:90:d1:f6:ab:f1:f4:0f:a1:a2:
b3:bb:cb:91:8c:6b:5f:ff:24:fd:45:75:c4:a4:27:
31:4f:76:ae:fa:29:5b:2d:95:98:ac:41:dc:2d:69:
99:73:71:04:3f:14:63:76:47:a3:d4:18:75:62:3e:
1e:ed:5e:c1:b8:73:80:e1:a6:43:3c:9f:17:e4:07:
49:ef:4b:9d:0b:08:19:76:45:88:37:3a:62:f9:35:
c0:a5:aa:c5:fa:dd:b5:e8:aa:0b:fb:7c:b2:ef:68:
0a:3d:41:ec:cd:4f:23:04:f8:5b:5d:67:a9:0c:66:
3b:d6:18:fb:60:f6:7d:e9:b4:b0:a9:3f:3e:61:50:
a5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:05:69:BE:58:06:72:7D:B0:30:5C:4B:11:3E:63:69:B2:A3:EE:51
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/twVpvlgGcn2wMFxLET5jabKj7lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.196.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:9f:e3:ec:25:62:9f:94:d6:2e:e9:a7:c7:4b:2f:2e:9e:a7:
3c:73:00:e1:6b:a6:5f:32:9e:0d:d8:0c:54:4c:c6:fc:d0:49:
32:e1:6f:fe:f7:36:93:c6:2f:1f:96:ed:46:ed:c8:8d:a2:e6:
63:12:05:51:13:f2:4a:1a:f5:e9:0f:7a:e2:d1:04:96:60:e4:
e8:5f:17:2c:dd:ce:44:e0:d3:96:69:ed:64:7e:54:f1:eb:a4:
40:9b:a2:ab:b7:47:3a:23:f0:e1:b9:29:96:48:aa:49:f2:1c:
72:a2:4f:79:b0:aa:d3:84:6a:c7:a2:8c:91:bd:ad:69:b9:7b:
f4:7d:de:4e:6a:b3:39:2b:b5:ee:59:13:19:2b:41:60:a8:6a:
a2:69:4c:c4:49:09:b4:64:4b:c9:1f:97:7c:1b:cd:02:c7:a7:
44:7d:89:fc:1b:be:6e:57:04:91:99:e9:84:38:da:07:ae:e7:
7e:0d:68:ab:d7:71:d9:3b:1a:23:de:7b:77:1b:61:f9:f2:4c:
1d:c2:35:d8:1b:e4:95:0c:ea:d3:50:84:42:ab:6f:27:c5:4f:
9c:c3:6e:f2:78:5d:3d:a5:d2:58:ec:a6:86:12:1d:5f:85:fd:
ff:4c:60:5c:d1:b9:c5:8c:75:01:d6:00:6d:98:3b:ff:65:f1:
d2:10:db:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:43:08 2025 by rpki-client