Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8EX9MzegT3mEFX-Kzb0PouG0G98.roa
File: 8EX9MzegT3mEFX-Kzb0PouG0G98.roa (raw, json)
Hash identifier: 1UE1h6aIf1mSGW7/6UBKGRhsP9krIE2MRpEDOOxZbb8=
Subject key identifier: F0:45:FD:33:37:A0:4F:79:84:15:7F:8A:CD:BD:0F:A2:E1:B4:1B:DF
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0195C921CA841E4DA55479AD2ABC38DAA354
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8EX9MzegT3mEFX-Kzb0PouG0G98.roa
Signing time: Mon 24 Mar 2025 17:09:49 +0000
ROA not before: Mon 24 Mar 2025 17:09:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.151.56.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:21:ca:84:1e:4d:a5:54:79:ad:2a:bc:38:da:a3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 24 17:09:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f045fd3337a04f7984157f8acdbd0fa2e1b41bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:39:cf:dc:66:d6:65:0a:0a:f7:4e:f2:57:
a1:6c:24:37:51:f1:fb:e7:37:5e:bc:99:99:97:62:
a3:1c:64:7d:90:bf:0a:ba:e4:f0:bc:00:0b:6a:ee:
fd:bc:9b:cf:37:56:57:37:74:27:5a:23:55:d9:81:
09:c3:9a:62:4e:4f:cb:21:52:29:13:e6:d3:cb:b4:
da:a3:f2:74:6e:42:ab:32:72:81:30:82:95:b1:5f:
79:b2:d0:1a:5e:a2:70:3e:29:a2:94:18:2b:59:17:
37:62:86:45:85:38:cf:a2:4e:b6:aa:e0:5c:bf:d6:
cd:5d:e2:b3:72:19:64:0b:c1:d2:c3:92:2b:75:57:
72:3e:d7:79:34:17:82:89:d7:a6:a3:2a:e5:11:1a:
26:49:bd:b3:3b:26:fc:07:60:24:42:e3:e2:11:c7:
30:2a:bd:61:b7:f2:8e:1f:e4:41:2c:3e:9f:fa:88:
ef:6c:31:e9:1d:c3:c8:4b:db:ad:d4:cb:bb:06:4a:
84:0d:15:fc:80:c7:db:44:1a:d6:25:66:71:1a:35:
4a:22:a8:4d:3b:cd:1e:c9:e8:fe:89:33:cd:9d:86:
5a:32:28:93:6b:70:46:ae:bd:36:5a:45:1e:e3:7b:
1a:ef:64:86:e7:e0:0a:65:4e:af:eb:b7:ff:f3:0d:
01:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:45:FD:33:37:A0:4F:79:84:15:7F:8A:CD:BD:0F:A2:E1:B4:1B:DF
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8EX9MzegT3mEFX-Kzb0PouG0G98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.224.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
86:04:c8:3c:78:dc:a9:01:2a:5a:33:c3:44:5b:74:bf:85:a5:
26:2f:e9:85:02:26:95:4c:01:ee:79:5a:e8:ff:ea:34:85:a5:
b8:ee:7f:47:69:9d:c8:a0:21:d0:35:ea:45:ed:6a:4f:32:0a:
c4:52:f1:cf:35:91:8c:85:08:1f:af:cb:34:12:26:38:0b:e3:
5e:c6:a4:25:27:ca:70:e1:22:c8:dc:42:7b:c2:f9:37:49:ac:
b2:a8:ba:ee:20:b5:9e:2b:c1:9a:8a:2a:94:66:3c:69:03:c6:
ce:4f:f8:c3:b0:ec:00:7a:94:c8:78:21:5d:d9:5b:e1:fa:f4:
8a:8b:2a:0c:b7:11:a9:8b:64:3c:c4:dd:38:1b:89:f3:53:5d:
e9:84:03:e3:f3:ef:d9:d5:68:4c:e8:5f:8a:a6:16:ff:3c:21:
18:4e:69:c6:d7:55:ef:1b:5b:59:5b:0f:1d:dd:d2:0c:6e:ae:
78:3b:82:80:dd:db:7a:f3:b8:f0:98:43:3a:4e:05:dd:70:22:
07:4f:83:88:99:fc:bb:e3:a5:1a:19:74:c5:f3:11:ba:90:22:
bb:af:b3:00:0f:73:fc:a1:6b:ca:2e:db:51:a5:5a:6b:ba:d0:
11:1f:45:3d:32:39:dc:e4:63:89:2d:57:44:50:a0:e4:a1:6a:
96:be:b5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:25:31 2025 by rpki-client