Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/52ZQ5PtYcXOVHNH-cKfCvXr-NLk.roa
File: 52ZQ5PtYcXOVHNH-cKfCvXr-NLk.roa (raw, json)
Hash identifier: IeCBQ+eKPNR/krpQbJSGOw+keX8AySOWQVyhW1zLVTg=
Subject key identifier: E7:66:50:E4:FB:58:71:73:95:1C:D1:FE:70:A7:C2:BD:7A:FE:34:B9
Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial: 0194221FC37DEEDB6AED4DDD6A80CD510969
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/52ZQ5PtYcXOVHNH-cKfCvXr-NLk.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 188.64.17.0/24 maxlen: 24
188.64.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c3:7d:ee:db:6a:ed:4d:dd:6a:80:cd:51:09:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e76650e4fb587173951cd1fe70a7c2bd7afe34b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:fa:1f:e7:a0:98:f0:a1:e8:06:3f:e6:db:
b5:cf:fc:c7:dd:86:bc:c4:5f:8b:ea:42:7f:93:cc:
82:80:7b:11:0d:48:47:37:81:15:df:5c:a9:b7:04:
59:5c:c3:a1:32:a8:19:29:22:a4:18:3c:ef:42:2e:
a0:19:d3:45:d3:c5:10:76:58:fc:50:9c:68:78:c6:
d1:2c:e0:fd:2e:39:3a:98:dc:43:66:80:45:1e:a1:
40:45:b3:e8:67:af:56:0c:a9:42:b6:7f:d8:73:2a:
e6:36:a1:da:ab:12:44:1b:0a:99:af:a3:00:d1:7c:
28:6a:c8:ee:8a:b1:dd:67:36:70:bf:45:7f:67:29:
3f:96:77:61:16:cf:83:d1:6b:69:be:00:5f:64:66:
89:74:2a:12:f6:0f:b0:85:2f:99:8c:83:13:09:b8:
a5:4c:d7:5b:8f:19:eb:7b:72:28:6b:48:82:39:ea:
e6:0c:ac:60:2e:47:6c:94:5a:15:75:a7:6c:bd:6f:
aa:bd:0a:a4:b9:c6:b0:3c:39:df:38:98:35:cf:72:
37:a1:8c:f3:8a:c6:10:a6:1d:b5:25:72:42:cf:56:
d7:63:25:18:f0:b3:ec:6a:d5:c9:9f:65:44:f1:ff:
af:4e:ea:23:ca:dc:21:68:06:36:e5:cd:57:bb:c1:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:66:50:E4:FB:58:71:73:95:1C:D1:FE:70:A7:C2:BD:7A:FE:34:B9
X509v3 Authority Key Identifier:
keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/52ZQ5PtYcXOVHNH-cKfCvXr-NLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.17.0-188.64.18.255
Signature Algorithm: sha256WithRSAEncryption
02:87:46:81:a5:ed:06:3a:82:21:2e:64:d4:75:5a:93:9e:66:
16:d0:6c:d6:fb:6f:09:96:d2:e3:20:e4:24:fe:a0:aa:6a:a0:
77:9e:ad:54:df:31:e6:6d:68:09:dd:ce:7d:97:a8:9c:29:45:
a4:84:4c:58:dd:38:df:a1:6d:55:8f:02:24:2f:5d:ab:69:e2:
7e:8b:4f:fd:a0:88:8e:97:9b:41:b4:e7:ff:a3:64:7b:7d:a4:
59:1d:66:21:70:2c:17:f2:41:34:1a:2f:62:f4:ec:e5:29:6d:
a3:ac:a8:79:08:b2:74:e0:e7:5e:af:04:1c:80:25:73:39:d8:
28:56:14:62:01:40:1e:4a:4e:7d:2b:05:67:9f:c9:5c:a9:83:
ac:e0:be:d4:2a:bf:3b:65:61:e1:c2:2d:2b:0f:33:4f:e4:44:
47:f7:67:87:15:3d:c8:e9:ba:1b:4c:c1:fb:56:c8:55:44:3d:
8e:e8:0a:c0:9e:91:1c:6e:1f:89:a6:2c:29:c1:fd:c4:32:d3:
b0:a5:71:e4:e5:09:74:cc:80:93:86:7e:31:ab:e2:da:d2:01:
48:2b:8e:4d:ed:20:36:b8:ed:59:3a:01:ca:ac:d7:1e:6d:dc:
50:9d:83:50:a8:da:94:a4:d6:c1:20:13:cd:e4:cf:54:e2:b6:
22:c5:04:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:38 2025 by rpki-client