Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Tx3v9e0yzEMC7tCcuxVg6yP_VK0.roa
File: Tx3v9e0yzEMC7tCcuxVg6yP_VK0.roa (raw, json)
Hash identifier: s9Efy6kC9GxQ7aCVJwRHkEofGcZ/YMTfltR6+fIZtSA=
Subject key identifier: 4F:1D:EF:F5:ED:32:CC:43:02:EE:D0:9C:BB:15:60:EB:23:FF:54:AD
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01950558873AC3EAB65214F4B5CCA8FF00CF
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Tx3v9e0yzEMC7tCcuxVg6yP_VK0.roa
Signing time: Fri 14 Feb 2025 16:44:02 +0000
ROA not before: Fri 14 Feb 2025 16:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4637
IP address blocks: 88.209.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:05:58:87:3a:c3:ea:b6:52:14:f4:b5:cc:a8:ff:00:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 14 16:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f1deff5ed32cc4302eed09cbb1560eb23ff54ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:22:a9:27:56:b9:f0:e8:33:ef:c4:26:f0:
57:a8:fb:fa:b2:9e:9d:9f:c5:16:06:b7:b1:b1:42:
6d:9d:27:8e:d9:08:ec:f2:38:14:e2:c5:3f:ad:92:
54:d2:30:34:9c:50:39:ce:70:dd:44:8b:6d:49:4d:
9b:11:68:fe:7e:d7:2f:11:26:7b:8d:ec:43:04:b5:
a5:24:ee:2b:13:a9:fe:ce:19:05:31:cf:7f:69:e4:
f5:f9:e9:a7:3c:ea:fd:9b:fb:86:b5:b3:a7:02:31:
b0:f8:ee:8e:28:7d:42:70:e3:ee:b2:35:16:40:61:
67:a7:11:6f:26:ac:7b:52:4d:cd:05:8a:f0:99:df:
cf:4b:2f:70:87:cc:43:20:de:fa:26:e8:8d:ef:b6:
1d:7e:8d:3a:ec:84:ab:38:b5:af:c9:c1:c3:fd:90:
21:5d:ff:30:77:46:ff:3e:77:07:ce:f6:8b:68:d7:
b3:4b:bb:63:99:66:f4:0e:20:63:84:80:25:31:e5:
ba:9e:33:67:5e:b2:a7:50:ca:78:52:16:3b:00:67:
ed:a9:a6:cd:4e:1a:3c:83:cc:c2:51:10:69:dd:bd:
04:bf:f1:4e:f9:b5:c6:9b:5f:c0:94:78:9b:e4:90:
4e:79:b1:b8:dd:d1:d6:59:a6:f3:aa:50:bd:b1:5e:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1D:EF:F5:ED:32:CC:43:02:EE:D0:9C:BB:15:60:EB:23:FF:54:AD
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Tx3v9e0yzEMC7tCcuxVg6yP_VK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.195.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:2c:30:44:b3:23:bf:72:ff:b9:f9:c4:2c:95:83:8a:56:c8:
9b:6d:d8:17:50:3e:d6:02:45:92:54:7b:87:e5:a3:f1:4d:dc:
be:f8:99:db:1f:6a:e3:b3:33:88:6b:3d:b2:42:bd:fd:c8:e4:
1f:bd:f5:69:e4:26:6f:20:33:1e:65:a1:11:e4:a3:80:5b:c3:
2a:70:86:80:52:27:2b:39:a9:79:d3:25:d4:51:b9:b5:2b:a4:
54:0f:7c:b1:ba:ec:22:eb:93:27:61:46:2e:57:15:3b:3b:31:
89:bf:ae:f4:b7:e0:14:b5:cd:49:df:29:8c:2f:11:d2:69:f8:
7c:37:c5:3a:7b:f9:4d:bc:c1:17:4d:99:a4:4c:7d:b7:95:03:
2c:31:d9:5f:a5:3b:c2:ba:57:a3:8c:f2:18:65:d1:7f:62:1c:
70:35:e3:c6:c0:00:1a:d7:63:45:42:b8:b2:bf:17:1f:d1:e3:
c6:f3:88:83:87:c0:5e:b9:80:40:de:02:f0:46:06:2c:33:29:
39:4f:6d:36:b4:26:e4:18:f8:c6:a8:47:3f:4b:cb:01:57:5d:
f4:0f:9f:f7:92:6d:da:c4:23:ca:07:2a:c5:e0:12:42:d5:44:
97:b8:0a:e7:af:de:bd:11:03:e8:d8:fb:88:57:fb:c7:61:b2:
12:9c:e3:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUFWIc6w+q2UhT0tcyo/wDPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjUwMjE0MTY0NDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjFkZWZmNWVkMzJjYzQzMDJlZWQwOWNiYjE1NjBlYjIzZmY1NGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc8iqSdWufDoM+/EJvBXqPv6sp6d
n8UWBrexsUJtnSeO2Qjs8jgU4sU/rZJU0jA0nFA5znDdRIttSU2bEWj+ftcvESZ7
jexDBLWlJO4rE6n+zhkFMc9/aeT1+emnPOr9m/uGtbOnAjGw+O6OKH1CcOPusjUW
QGFnpxFvJqx7Uk3NBYrwmd/PSy9wh8xDIN76JuiN77Ydfo067ISrOLWvycHD/ZAh
Xf8wd0b/PncHzvaLaNezS7tjmWb0DiBjhIAlMeW6njNnXrKnUMp4UhY7AGftqabN
Tho8g8zCURBp3b0Ev/FO+bXGm1/AlHib5JBOebG43dHWWabzqlC9sV6AEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE8d7/XtMsxDAu7QnLsVYOsj/1StMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvVHgzdjllMHl6RU1DN3RDY3V4Vmc2eVBfVkswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNHDMA0G
CSqGSIb3DQEBCwUAA4IBAQCNLDBEsyO/cv+5+cQslYOKVsibbdgXUD7WAkWSVHuH
5aPxTdy++JnbH2rjszOIaz2yQr39yOQfvfVp5CZvIDMeZaER5KOAW8MqcIaAUicr
Oal50yXUUbm1K6RUD3yxuuwi65MnYUYuVxU7OzGJv670t+AUtc1J3ymMLxHSafh8
N8U6e/lNvMEXTZmkTH23lQMsMdlfpTvCulejjPIYZdF/YhxwNePGwAAa12NFQriy
vxcf0ePG84iDh8BeuYBA3gLwRgYsMyk5T202tCbkGPjGqEc/S8sBV130D5/3km3a
xCPKByrF4BJC1USXuArnr969EQPo2PuIV/vHYbISnOMA
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:46 2025 by rpki-client