Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/oFivsgN0FMqS4f-3RZe9UEjDfuQ.roa
File: oFivsgN0FMqS4f-3RZe9UEjDfuQ.roa (raw, json)
Hash identifier: fm1CYvs1LdprxXOBxGxgqr2QhWf21biWowJSmoheo40=
Subject key identifier: A0:58:AF:B2:03:74:14:CA:92:E1:FF:B7:45:97:BD:50:48:C3:7E:E4
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D3B53AEFFCD2D5D2515A0B1162D89
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/oFivsgN0FMqS4f-3RZe9UEjDfuQ.roa
Signing time: Wed 01 Jan 2025 15:47:48 +0000
ROA not before: Wed 01 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204357
IP address blocks: 188.164.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3b:53:ae:ff:cd:2d:5d:25:15:a0:b1:16:2d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a058afb2037414ca92e1ffb74597bd5048c37ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:2a:dc:4d:86:71:fd:6f:6b:3b:b4:8a:5e:
28:a3:a5:de:9e:0a:23:5a:3d:f8:bd:76:d8:e7:fd:
0e:6d:50:9c:17:b8:d9:fd:39:cd:ce:9a:93:21:2e:
4e:f8:09:0c:2c:57:4c:b1:82:43:6c:df:12:3b:60:
e4:f0:6f:7f:31:bb:ab:db:5c:db:84:ce:9e:2b:f6:
8f:ea:2f:e5:95:30:c6:e3:19:f0:f3:e7:41:68:62:
42:86:e8:38:b6:5c:a8:66:51:97:45:89:4d:0c:ea:
74:3b:b3:4c:25:c6:89:13:52:f3:54:b0:a0:93:fd:
7b:29:ea:44:51:5a:a1:07:e3:2b:c3:d9:dc:95:17:
5c:d3:5e:fc:4f:33:d9:82:fb:ff:7a:02:e6:b6:cf:
0e:5e:e8:9a:2f:90:3a:9b:f3:ad:9d:b7:7b:3d:50:
60:72:bb:67:e8:f9:26:d6:75:ca:77:62:29:61:3d:
75:bf:88:80:d9:bf:84:3c:a1:cc:22:d8:de:d9:6b:
86:36:df:66:e6:f4:05:ac:98:eb:03:ce:82:bf:63:
e0:e2:24:e9:37:a7:89:c3:7a:21:25:2d:2d:93:99:
1d:fe:a8:6f:af:72:b4:b3:b6:9c:0b:3b:94:64:d8:
ef:58:32:68:fc:85:0f:67:28:53:06:ab:bb:a5:62:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:58:AF:B2:03:74:14:CA:92:E1:FF:B7:45:97:BD:50:48:C3:7E:E4
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/oFivsgN0FMqS4f-3RZe9UEjDfuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.211.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d7:75:d1:17:de:cc:27:33:b5:32:82:e6:37:dd:5f:1d:c0:
2c:2d:d0:8b:b5:b5:33:92:6c:33:a9:d6:d8:23:98:4a:64:9e:
d8:0a:b3:aa:45:ee:0e:3d:99:20:b0:e9:e6:dd:69:42:e5:80:
d3:0e:9d:0b:a6:31:b5:c2:02:7f:16:61:e2:49:d6:9e:1a:d2:
6e:34:a9:5a:85:79:31:06:d4:55:39:c1:69:66:99:fa:fe:c8:
07:93:5b:32:c2:40:01:d2:bf:5a:e5:e6:62:60:a5:4b:88:41:
8a:96:96:4b:e1:17:05:32:91:81:79:1f:52:d0:12:70:d7:da:
b9:26:43:38:b7:ab:7a:e7:7e:35:d8:c6:c9:12:57:ee:2f:5a:
f4:24:b9:66:7f:c5:98:fc:04:c9:7d:62:1a:09:83:d1:cf:dd:
14:e0:c8:b6:b3:98:04:04:1a:eb:22:67:de:c9:4c:60:4a:b3:
50:88:65:68:10:f8:c4:7f:bc:50:d6:32:bc:4f:da:ab:9c:25:
5b:01:be:70:e4:c7:55:ff:04:6c:eb:3d:bc:75:4c:c5:e2:ff:
6a:83:76:db:fa:81:32:b2:d5:4f:36:77:a9:39:e9:9d:67:ec:
f2:a7:9e:50:5e:db:da:db:e0:b1:73:c8:16:1f:5c:0e:9f:b2:
7b:e8:f0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:38:37 2025 by rpki-client