Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/H4KA0sxWbQn0TsS16gkHA_XLpks.roa
File: H4KA0sxWbQn0TsS16gkHA_XLpks.roa (raw, json)
Hash identifier: aXldWw/SJurvCLdfL24USIy9/ELw56XWGz7XXExpHyU=
Subject key identifier: 1F:82:80:D2:CC:56:6D:09:F4:4E:C4:B5:EA:09:07:03:F5:CB:A6:4B
Certificate issuer: /CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Certificate serial: 01941FFA1EAB3FFBDC1410423BD7F202F81A
Authority key identifier: BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/H4KA0sxWbQn0TsS16gkHA_XLpks.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49487
IP address blocks: 188.94.240.0/24 maxlen: 24
188.94.241.0/24 maxlen: 24
188.94.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1e:ab:3f:fb:dc:14:10:42:3b:d7:f2:02:f8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f8280d2cc566d09f44ec4b5ea090703f5cba64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:9e:cb:60:a7:17:c5:5f:05:a4:a6:cb:35:
15:e0:4a:d1:88:7e:58:0a:fb:0c:2c:ab:d2:17:49:
e8:5b:d9:16:50:cb:db:ac:a9:b3:f4:48:ab:6c:30:
35:e3:1a:b5:82:87:e5:31:50:5c:b6:8c:a0:bb:19:
49:58:6c:1a:26:1a:25:e6:7a:0e:41:fb:33:83:71:
09:6d:18:85:ce:da:5d:ba:e0:05:46:58:7b:b8:5d:
e1:9e:d2:2b:cf:20:1c:f1:0b:11:2c:b2:5f:69:97:
c5:41:21:59:f9:5c:a7:52:bd:d4:95:e0:cd:b6:3e:
b5:5c:6f:e7:f2:3d:9b:9e:f5:7f:3d:10:fe:fe:50:
c6:86:b0:fe:c7:c7:60:8d:c8:56:ca:08:74:7c:6d:
97:e1:94:7a:fa:05:3c:49:07:a4:b5:a9:da:64:b0:
b1:1e:2b:0f:32:ce:04:b1:d9:07:b0:4b:df:aa:a9:
54:68:47:5a:01:59:04:4b:14:0d:f3:44:e4:51:f6:
06:b7:6a:2d:e8:4a:76:f1:02:31:3f:ef:cd:43:07:
31:ea:34:4f:45:03:80:ad:9d:36:a3:d0:78:52:57:
27:49:cd:07:7a:52:bc:8e:b3:29:b1:cf:bd:2e:e9:
cf:86:41:28:17:91:d8:a1:96:c9:e7:e3:83:1f:33:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:82:80:D2:CC:56:6D:09:F4:4E:C4:B5:EA:09:07:03:F5:CB:A6:4B
X509v3 Authority Key Identifier:
keyid:BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/H4KA0sxWbQn0TsS16gkHA_XLpks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.240.0-188.94.242.255
Signature Algorithm: sha256WithRSAEncryption
1a:88:ec:89:63:2d:53:23:f0:89:72:f2:1d:47:4a:76:b4:e8:
e7:36:97:3c:8c:5a:4d:74:6a:53:4b:81:c8:fb:03:42:75:d6:
5c:1f:ae:5b:98:98:08:fa:d4:3a:c6:2a:d2:b2:27:64:f4:51:
a2:36:f7:2a:52:da:8f:b6:c0:58:43:64:28:2f:58:a7:56:05:
39:3d:09:e1:a7:51:31:ec:ba:af:2a:79:b5:7d:81:77:74:5f:
5a:e4:2c:f5:7c:4d:09:fa:dd:84:b1:c8:91:de:5e:db:95:63:
94:75:ec:ad:eb:8b:3d:5f:da:f8:50:b7:08:10:6b:ec:94:fd:
92:fb:5b:eb:72:8b:e7:69:d2:6e:d3:72:ed:35:83:07:89:19:
7b:47:85:98:43:60:a2:70:1c:63:38:cd:37:d5:7f:d4:ef:64:
02:30:86:d6:e9:63:1e:ac:2e:c3:22:23:f8:bf:6d:9f:e5:ec:
4a:e5:ad:76:b0:5d:f5:c2:22:46:f6:f1:c6:e1:4c:cd:23:45:
e2:7d:17:9e:fb:3d:1c:31:b9:69:91:f6:de:0b:d3:b0:6f:93:
54:30:48:8e:a6:bf:6b:a9:2a:16:6f:f0:7a:f1:f6:bc:75:2b:
a2:46:22:c2:59:ee:80:f2:6e:fb:3e:b7:12:ec:e3:38:08:59:
8a:8d:d3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:25 2025 by rpki-client