Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/iqYLpAFtuo6gr-j-Ly-Vnr8R2MU.roa
File: iqYLpAFtuo6gr-j-Ly-Vnr8R2MU.roa (raw, json)
Hash identifier: qX/Ce2Cu2rGWIQEWtxm8FeM0QBiPxiljZdApDi//miE=
Subject key identifier: 8A:A6:0B:A4:01:6D:BA:8E:A0:AF:E8:FE:2F:2F:95:9E:BF:11:D8:C5
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 01942444C2B6E49EE872C5FE07D73C8EC2F6
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/iqYLpAFtuo6gr-j-Ly-Vnr8R2MU.roa
Signing time: Wed 01 Jan 2025 23:47:53 +0000
ROA not before: Wed 01 Jan 2025 23:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 188.208.143.0/24 maxlen: 24
188.241.60.0/24 maxlen: 24
188.241.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c2:b6:e4:9e:e8:72:c5:fe:07:d7:3c:8e:c2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8aa60ba4016dba8ea0afe8fe2f2f959ebf11d8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:d0:a9:91:d1:9e:0a:1d:45:d8:4c:cc:6d:
b4:20:f6:49:b2:57:19:80:41:ac:31:16:36:a9:eb:
3a:86:c1:41:97:a0:23:a9:0d:56:a9:04:2f:4e:28:
55:cc:7e:77:54:60:3c:c1:34:b6:dc:e2:6c:52:ec:
11:0f:d4:df:a0:6d:de:d7:56:c4:6f:48:59:9e:2e:
64:07:4b:3a:58:b8:29:50:5c:2e:34:31:ca:94:0e:
a4:3e:ea:e7:c3:0e:d6:e4:e4:3c:d9:61:6c:46:82:
40:14:4f:71:62:9d:3c:b7:1e:f3:a4:d4:0b:0b:04:
b9:4e:30:ea:4f:1d:b6:e3:08:49:ad:f8:9e:80:33:
fe:7a:cd:25:49:f5:9c:44:6f:85:27:da:7d:8b:83:
aa:e3:ce:45:77:74:cb:ab:e1:2f:1b:76:06:b5:ca:
68:02:3b:99:63:b8:19:75:b9:4d:f6:4a:e7:ea:a3:
29:1e:98:ad:0a:ea:91:89:60:c8:3e:89:f3:e5:41:
dd:84:67:d0:bb:ad:79:08:e4:a4:d9:52:39:b9:bd:
33:6a:c6:47:d6:a4:69:94:11:13:11:19:86:66:a9:
e7:77:12:66:1b:99:5a:18:3d:70:df:13:06:de:66:
4b:f6:18:af:ef:57:68:f6:63:db:b3:15:4f:29:29:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A6:0B:A4:01:6D:BA:8E:A0:AF:E8:FE:2F:2F:95:9E:BF:11:D8:C5
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/iqYLpAFtuo6gr-j-Ly-Vnr8R2MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.143.0/24
188.241.60.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:ec:46:01:bf:1d:b5:2e:75:d0:64:fd:ee:79:08:44:76:3f:
be:97:36:ac:e0:fc:10:4c:56:cb:c3:5f:e6:dc:cf:3f:b5:93:
81:12:63:de:03:06:e0:52:40:a1:b6:ee:4f:b4:8b:89:8d:06:
e9:22:76:5b:1a:4a:b5:68:53:7d:54:55:a3:18:cc:c8:d4:23:
1a:f9:00:e8:7b:87:a8:d4:ef:36:d1:59:2f:59:20:02:11:0d:
7f:c3:86:e9:4c:b5:d5:cb:1e:cc:24:9e:b4:e2:2c:ee:93:6f:
f0:b3:f6:cb:56:28:5e:d8:33:2c:d1:9d:e8:e7:0d:89:91:05:
30:20:c7:a6:e0:43:cb:3c:6d:9a:d3:82:16:63:1d:f8:9f:f5:
bd:28:a9:f6:ad:be:70:27:21:50:ae:7b:40:21:47:42:8b:90:
90:3e:dc:a4:27:c8:2f:f8:ae:6c:87:19:0a:70:7d:0e:23:6b:
cf:4d:7e:3e:79:d6:af:40:b3:01:da:1e:07:f5:be:38:52:47:
88:d3:b5:67:44:9f:99:2e:6d:c7:21:0e:59:1a:a0:55:82:ab:
eb:2d:71:5d:c3:63:5a:04:25:ba:89:4c:fa:5e:89:11:d4:90:
d0:5b:4a:f0:6c:f5:7c:9b:10:d1:23:14:d5:9f:18:15:47:60:
8b:5a:01:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:47 2025 by rpki-client