Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/y8rUqaqv7ENTk3dMoJ53cbPWsS4.roa
File: y8rUqaqv7ENTk3dMoJ53cbPWsS4.roa (raw, json)
Hash identifier: xuqlNaZw0JfK1zeCz1wuG1Q98hbdJatlBMg2l2xV/d8=
Subject key identifier: CB:CA:D4:A9:AA:AF:EC:43:53:93:77:4C:A0:9E:77:71:B3:D6:B1:2E
Certificate issuer: /CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Certificate serial: 019423D7F12BAD60E1898337F88856C80D50
Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/y8rUqaqv7ENTk3dMoJ53cbPWsS4.roa
Signing time: Wed 01 Jan 2025 21:49:01 +0000
ROA not before: Wed 01 Jan 2025 21:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399641
IP address blocks: 188.93.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f1:2b:ad:60:e1:89:83:37:f8:88:56:c8:0d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Validity
Not Before: Jan 1 21:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbcad4a9aaafec435393774ca09e7771b3d6b12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fc:4e:11:95:ea:20:de:3b:a3:4c:96:66:53:
22:16:37:20:72:1e:9b:cc:67:d7:ea:a5:08:5b:bc:
8a:45:03:3a:bd:80:bf:e4:dd:81:ee:19:f9:9b:71:
93:f7:0a:56:23:51:81:c2:e6:47:bc:0d:e0:87:a2:
56:8f:aa:c9:a3:fd:a5:1b:c9:07:72:67:df:25:b0:
15:02:6c:55:08:24:b8:c2:e1:36:ff:a1:3c:45:b2:
f6:ee:4f:b6:45:eb:63:b8:9a:fc:d3:30:dc:ad:bc:
92:3b:b8:3f:2d:4b:a1:95:22:7b:e0:ce:19:39:ef:
84:ce:17:9f:2e:0b:5b:3b:b1:b7:e0:f1:1f:84:19:
57:ea:98:ca:a9:73:6c:d2:eb:f6:6f:0c:17:f9:98:
08:d1:b9:25:61:a7:80:77:5b:8d:a7:f0:3f:d9:aa:
3a:40:c0:0c:d3:0a:33:fe:a2:a2:ca:4c:16:83:b7:
b0:2b:0f:45:80:8e:16:67:01:33:35:69:77:e3:f6:
24:2b:52:b5:18:e5:2f:0a:d1:86:bd:f5:4c:0f:eb:
42:36:47:f7:67:3f:28:4b:69:7c:9f:70:e3:f6:2c:
c9:1d:85:e2:6c:69:75:c8:c9:0b:d8:f3:15:8a:60:
ea:dc:62:04:04:aa:b4:5e:14:66:3a:63:f9:b5:48:
96:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CA:D4:A9:AA:AF:EC:43:53:93:77:4C:A0:9E:77:71:B3:D6:B1:2E
X509v3 Authority Key Identifier:
keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/y8rUqaqv7ENTk3dMoJ53cbPWsS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.119.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:2e:53:ff:f1:97:fb:23:6a:66:c8:54:8e:dd:0d:77:61:e5:
c2:df:81:f9:ad:68:4c:f1:b4:f4:72:7c:c7:3a:fc:cc:6f:15:
47:6a:7a:c5:12:fb:6f:42:a2:22:cf:1b:5d:24:58:0b:1a:ac:
10:86:ff:91:22:0e:b2:86:de:35:df:ec:a3:2f:65:13:7d:de:
f7:2f:f1:7d:6b:0d:dd:3a:10:ec:13:f1:14:65:12:3a:d3:75:
f6:2e:b1:79:db:f5:1a:94:96:6d:46:42:c0:18:6f:45:bf:54:
c7:a4:ca:71:55:29:9e:91:36:ed:eb:75:8c:1a:e5:83:b1:b5:
81:bf:92:51:46:ba:f3:4c:e0:e1:8b:b6:b8:7b:5b:ca:1e:ba:
aa:a0:14:de:e8:9a:f6:20:de:eb:e0:03:6a:7b:7c:f8:49:49:
66:5d:9a:75:91:3d:63:85:42:0b:f1:c5:2d:7b:fe:14:34:75:
d5:7e:4b:d3:52:20:ca:41:c8:99:ff:b2:95:dc:03:e2:4f:04:
4c:58:02:12:56:cd:23:a4:57:2d:fe:f8:85:ce:03:28:42:bf:
02:72:91:65:15:26:06:91:9e:41:f9:9d:2c:55:6b:ae:85:76:
b3:b4:f6:52:c4:f3:f9:d2:db:9a:8e:45:c2:ca:59:aa:f4:36:
39:9c:b3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:31 2025 by rpki-client