Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/1-kWouvqhvO6QXm5D6yd0r-fU40A.roa
File: 1-kWouvqhvO6QXm5D6yd0r-fU40A.roa (raw, json)
Hash identifier: JCShaFnKnvA8sZMMixxLfe1BsbpkwxYTmgfNpAOFDxA=
Subject key identifier: FA:45:A8:BA:FA:A1:BC:EE:90:5E:6E:43:EB:27:74:AF:E7:D4:E3:40
Certificate issuer: /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Certificate serial: 01942143C8CC7EBDC4447A659EA61BBBA952
Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/1-kWouvqhvO6QXm5D6yd0r-fU40A.roa
Signing time: Wed 01 Jan 2025 09:47:57 +0000
ROA not before: Wed 01 Jan 2025 09:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205774
IP address blocks: 185.159.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c8:cc:7e:bd:c4:44:7a:65:9e:a6:1b:bb:a9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Validity
Not Before: Jan 1 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa45a8bafaa1bcee905e6e43eb2774afe7d4e340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:79:55:a2:ee:fb:52:75:56:00:e1:b3:c8:
26:a4:3a:c5:95:0c:32:3e:5f:ee:25:d5:4a:67:49:
f1:7e:2a:79:91:6c:82:d1:b3:56:12:d2:1b:48:7a:
fe:a3:62:c5:77:24:26:79:dd:4b:de:5f:71:cc:39:
01:ed:bd:f4:9d:c4:a8:de:83:b2:8c:0d:bd:1b:cc:
b7:c9:74:75:5b:52:cb:ba:7b:6e:f0:09:d8:24:dd:
31:2a:21:7f:65:d7:9d:f2:a8:fc:53:e3:2c:6d:5d:
12:67:3c:12:db:98:e4:d4:a7:7f:9c:b3:2a:ef:25:
eb:df:b0:a3:c6:60:88:2a:ed:0c:28:7e:8b:a6:0f:
0a:6b:c2:f8:35:f9:f9:79:49:7f:75:b3:0f:da:a5:
13:38:e1:65:4b:c9:97:0e:8c:a0:9c:19:94:5b:c8:
b6:a7:7b:3d:97:93:bb:ba:7c:4e:32:66:d6:63:a6:
50:3a:21:46:f7:ba:3f:1b:96:68:b4:fd:e8:bc:25:
bb:36:64:31:c1:05:c1:a0:16:d6:3a:1c:29:7f:2a:
56:91:af:72:53:e7:52:ff:6b:64:2b:a6:9a:21:58:
db:4c:19:46:f5:4f:c0:0a:1e:97:ab:db:7a:4e:6b:
97:88:56:d0:61:b1:aa:3f:a8:94:15:d3:6e:5a:6c:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:45:A8:BA:FA:A1:BC:EE:90:5E:6E:43:EB:27:74:AF:E7:D4:E3:40
X509v3 Authority Key Identifier:
keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/1-kWouvqhvO6QXm5D6yd0r-fU40A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.88.0/24
Signature Algorithm: sha256WithRSAEncryption
59:cf:67:a4:87:0d:27:31:71:d2:2a:f6:35:21:0c:a6:65:a8:
54:39:b6:46:43:a7:64:eb:e0:2d:47:a2:bd:7c:11:f1:30:bf:
ea:a4:de:01:4b:0b:dc:b7:66:97:6d:09:1b:e5:6e:72:1c:7a:
58:27:b8:31:0c:67:5e:7b:1c:0b:14:0d:c3:6c:d6:24:56:52:
35:fb:80:91:8e:64:7f:7c:ac:00:c3:16:60:0b:dd:af:70:c6:
bc:18:59:6f:de:10:69:8f:ce:55:31:dd:3f:c0:87:c3:35:08:
00:4b:a2:21:f0:51:d6:ec:23:34:b6:f5:63:f0:91:78:57:07:
57:c6:f9:ce:11:43:87:8f:93:87:d3:c3:de:cb:79:c8:ff:21:
60:7d:b3:f9:14:5d:b8:b1:ec:f5:3e:1d:be:93:bc:01:27:b2:
15:6a:6a:2c:46:ad:03:67:5b:27:fd:95:a7:ac:b7:8a:c1:57:
65:fc:95:33:b7:4d:93:f7:f7:7f:8a:bd:16:6f:04:c7:8a:04:
3d:af:85:12:0e:9f:36:3e:10:ab:03:cd:f9:9c:0e:e3:0a:24:
c4:ab:dc:0f:e9:ba:63:86:a0:97:f7:e0:ce:72:02:f3:06:e1:
f4:09:85:56:b2:56:93:67:7d:81:bd:6e:d3:c1:12:0a:a2:94:
14:4b:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:55 2025 by rpki-client