Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/iK9udSOii6eVubAybBf08kgqr4w.roa
File: iK9udSOii6eVubAybBf08kgqr4w.roa (raw, json)
Hash identifier: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=
Subject key identifier: 88:AF:6E:75:23:A2:8B:A7:95:B9:B0:32:6C:17:F4:F2:48:2A:AF:8C
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 0194258F1502D1161C3EB928A4C16698E019
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/iK9udSOii6eVubAybBf08kgqr4w.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54113
IP address blocks: 185.221.87.0/24 maxlen: 24
2a0d:8000:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:15:02:d1:16:1c:3e:b9:28:a4:c1:66:98:e0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88af6e7523a28ba795b9b0326c17f4f2482aaf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:96:2b:f8:5a:16:82:04:a3:0d:72:aa:af:e3:
ad:5d:80:9c:c1:33:a1:f7:51:81:c3:7c:f8:32:a8:
a0:b0:7e:b2:fe:25:ff:99:f4:f8:a5:36:d3:15:e6:
37:09:59:c2:fb:9c:fa:60:f2:9b:04:1d:8c:44:32:
48:ee:40:51:2d:fe:26:6f:63:c9:c1:87:68:48:bb:
37:3b:be:d8:78:9a:72:5f:bb:f4:3e:5f:33:c8:f0:
7a:85:fc:49:00:73:ff:a3:0d:1a:1c:8b:9a:47:e6:
df:b8:d5:30:1b:2f:7a:12:57:4a:03:78:12:f3:33:
a3:a3:6e:84:5a:8e:47:55:f7:38:02:5f:63:33:c4:
63:26:22:b4:c2:69:fe:93:67:73:01:e1:00:9a:7f:
5f:72:ff:c1:45:19:b8:a0:3e:80:fc:09:aa:29:d8:
2c:1a:29:ea:5a:a3:96:59:e2:a2:5e:15:71:14:61:
0b:b2:b2:dd:76:59:d7:e5:f7:bc:13:5f:be:69:da:
2c:ba:a1:eb:d9:74:c0:31:c9:d3:97:a0:00:c2:e1:
db:8b:4b:38:a1:d8:38:7d:f7:29:7d:27:51:d5:52:
ac:2e:b8:8f:fa:61:70:f3:eb:eb:b0:4e:9e:22:ec:
c5:a0:bc:f6:68:8b:a2:91:57:b2:e6:fc:9c:0c:82:
3e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:6E:75:23:A2:8B:A7:95:B9:B0:32:6C:17:F4:F2:48:2A:AF:8C
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/iK9udSOii6eVubAybBf08kgqr4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.87.0/24
IPv6:
2a0d:8000:1::/48
Signature Algorithm: sha256WithRSAEncryption
1e:cb:7d:bd:53:ac:11:81:ab:e4:f0:14:aa:7e:b8:c7:00:ac:
8f:c5:42:de:34:13:c2:aa:c5:f9:7d:41:10:40:e0:fa:d2:ce:
56:ce:94:5e:ca:10:b6:4a:6f:1d:88:ee:a5:12:15:12:60:40:
f5:61:5d:c4:47:40:0a:fb:43:13:32:15:6e:40:14:ac:52:ac:
ba:8f:ea:9c:1e:26:71:98:3b:f2:0d:2c:16:e8:dc:ad:78:59:
b7:54:1d:eb:35:95:b1:ed:1e:c1:29:d9:0c:a4:fb:74:9d:4d:
8d:9d:29:8c:5b:50:56:d3:bc:d0:a3:88:17:63:7a:d9:bb:02:
fa:40:59:b8:ea:ed:b7:cd:82:0b:ed:21:ae:00:e7:ac:fe:33:
ea:e0:94:ce:5d:81:92:73:80:be:89:38:57:a1:f5:6b:a4:47:
c6:b8:40:c7:23:4a:ff:b8:20:22:55:00:44:2d:09:9d:45:a5:
92:03:fa:4f:04:75:3c:8d:bd:9e:ff:ef:0d:b4:cd:ba:e6:b2:
e4:b5:49:d1:48:15:bf:af:76:56:01:4c:56:98:93:e1:46:9e:
fb:5c:35:be:83:2c:a2:ab:c9:7d:3d:69:8e:30:63:af:dd:4d:
34:74:4d:af:fa:6a:a2:51:21:f1:82:dd:45:f7:8e:e1:19:20:
5a:9e:2f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:58:57 2025 by rpki-client