Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/7gpUO99SfoacmIWvz5o-z3ESpPc.roa
File: 7gpUO99SfoacmIWvz5o-z3ESpPc.roa (raw, json)
Hash identifier: jBBU4x8HtuG0AJgjijT3pv++S+IgCjRtCv3AjftIABQ=
Subject key identifier: EE:0A:54:3B:DF:52:7E:86:9C:98:85:AF:CF:9A:3E:CF:71:12:A4:F7
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 019425214513DBD8349534C63C680217B0AC
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/7gpUO99SfoacmIWvz5o-z3ESpPc.roa
Signing time: Thu 02 Jan 2025 03:48:44 +0000
ROA not before: Thu 02 Jan 2025 03:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199652
IP address blocks: 94.177.148.0/23 maxlen: 23
188.214.151.0/24 maxlen: 24
188.241.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:45:13:db:d8:34:95:34:c6:3c:68:02:17:b0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Jan 2 03:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee0a543bdf527e869c9885afcf9a3ecf7112a4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:87:3d:8c:d7:13:7c:9a:2e:b6:6b:d7:3e:ae:
de:7b:83:25:60:fe:91:9b:f1:4e:0d:60:a6:e2:61:
ca:ea:45:d9:f3:4e:20:d7:b6:0a:9c:e5:a8:b9:86:
ed:62:1e:ce:21:ab:78:b8:c2:89:db:b8:23:13:60:
eb:6c:e2:da:00:3e:e7:9e:0e:34:8a:35:fd:de:c0:
67:34:d0:bd:16:46:7b:ae:e3:13:53:f5:8c:ba:e5:
58:8d:a7:7f:a1:4b:38:fd:af:97:73:2d:a9:97:8a:
03:6c:7c:33:2b:7c:d2:13:ef:e8:ab:57:95:ea:a9:
e4:f7:5d:55:f9:64:f3:1b:4d:a4:83:a2:2e:5f:a2:
ad:64:27:d7:fa:99:60:f5:0f:cc:90:bc:85:95:b9:
fb:22:c2:51:1a:8d:59:bd:7d:d4:59:0b:b2:05:b6:
f0:7f:6d:c0:76:a4:80:af:f2:87:5f:1d:9b:94:fe:
53:b4:53:e9:ae:15:17:78:15:03:fb:10:ac:bb:2d:
c6:fa:3b:de:ce:f8:af:b0:48:d6:f7:0c:96:fa:0b:
97:67:f9:f0:4a:b2:a2:8b:09:a9:1d:05:8c:92:30:
95:e4:27:74:cd:4a:0c:2c:f4:dc:e2:1f:92:c1:b6:
95:9e:90:36:f3:a2:75:78:13:ce:d0:96:e1:a8:4e:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0A:54:3B:DF:52:7E:86:9C:98:85:AF:CF:9A:3E:CF:71:12:A4:F7
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/7gpUO99SfoacmIWvz5o-z3ESpPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.148.0/23
188.214.151.0/24
188.241.69.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:06:79:39:d3:79:f6:55:15:63:be:23:77:c9:b1:ad:3e:ef:
f7:46:67:34:42:04:dc:dd:2d:0c:57:09:b9:71:a7:d6:a0:53:
c1:c7:67:b5:11:2a:85:25:2e:f9:17:64:0d:76:85:da:b1:a2:
e6:80:bc:ea:6e:30:0b:f5:fb:18:35:2e:80:45:bf:80:d8:72:
79:85:1d:f7:70:19:7f:28:6c:9a:a1:47:21:db:1b:13:cb:09:
ee:c4:44:e3:cd:0e:64:ea:12:74:9f:d3:ae:e3:bd:8f:18:9d:
ed:0f:12:73:8d:ab:67:05:24:c6:99:e2:13:e3:9f:a0:72:91:
db:77:f5:0f:9a:8e:67:b9:e3:f7:bb:7b:53:14:29:85:10:d0:
03:76:63:bf:f6:31:01:f4:23:0c:c9:b0:94:f5:41:53:2b:0f:
76:fc:65:43:2d:8f:98:1b:ba:ff:a5:94:86:29:dc:21:cc:6c:
5b:da:c9:de:c2:a1:33:b3:3b:ec:73:39:1b:31:19:5b:2f:5f:
16:5a:b4:35:d9:4c:30:20:88:d8:46:37:47:b7:1c:e4:04:fd:
68:f2:3d:a8:28:7e:ba:86:5c:22:5e:24:41:bf:ce:d3:75:e7:
ee:df:9a:d9:9c:5e:03:9b:fa:5f:7e:ba:70:4d:56:e4:81:32:
16:7d:b9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:40 2025 by rpki-client