Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/i3b6Uydy-YqOdSODkXFQXXlnBoc.roa
File: i3b6Uydy-YqOdSODkXFQXXlnBoc.roa (raw, json)
Hash identifier: Si05doS89p5J4Ypo6sYTz/XsfVagdvdngbVmVqUQmOo=
Subject key identifier: 8B:76:FA:53:27:72:F9:8A:8E:75:23:83:91:71:50:5D:79:67:06:87
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018B8547C94E8D7663560EF1F930FC6A1A87
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/i3b6Uydy-YqOdSODkXFQXXlnBoc.roa
Signing time: Tue 31 Oct 2023 10:29:16 +0000
ROA not before: Tue 31 Oct 2023 10:29:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216063
IP address blocks: 88.151.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:47:c9:4e:8d:76:63:56:0e:f1:f9:30:fc:6a:1a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 31 10:29:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b76fa532772f98a8e7523839171505d79670687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:18:49:f3:fb:e8:e1:c0:50:5d:6a:ef:12:
14:96:86:00:fc:0b:f9:a3:1d:ac:54:ab:0f:0e:9d:
ba:2a:8e:9a:cd:b9:36:54:c7:cc:08:e0:a7:57:42:
96:8d:48:a1:7a:d8:99:8e:e5:19:e1:75:55:46:f6:
44:46:a3:14:42:8d:67:4d:ef:2f:ec:fc:f6:24:c8:
0f:c8:3c:ca:a3:6c:b3:f7:71:a1:93:6a:cb:a4:17:
6c:01:0f:65:44:89:82:d2:2f:e4:54:a9:14:d3:19:
dc:dc:80:dc:73:25:b7:b0:81:4f:e0:d6:94:b5:b4:
7a:ec:87:f9:12:33:7d:1a:59:6d:98:da:4b:24:3e:
b2:6c:e9:10:bc:a0:88:45:12:66:3a:2b:9f:70:1b:
4c:79:73:43:00:d5:9d:59:f1:86:90:05:db:2c:06:
67:f0:59:3e:bd:71:9a:fd:5b:b1:2f:86:9c:80:8f:
c1:df:ec:85:17:fc:76:8f:1a:bd:90:a3:50:71:cc:
0e:7c:ae:f2:73:a5:fc:a5:69:b6:a3:ea:d7:03:96:
97:1b:11:ae:a6:ab:e9:85:1e:79:5c:94:39:3a:ac:
ed:2d:c1:35:10:8a:be:de:45:b3:2b:d9:84:c0:a7:
4a:83:69:12:ff:27:d5:88:f8:3e:85:88:05:be:fd:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:76:FA:53:27:72:F9:8A:8E:75:23:83:91:71:50:5D:79:67:06:87
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/i3b6Uydy-YqOdSODkXFQXXlnBoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c6:a7:14:0c:c9:75:83:cd:71:98:7e:73:5a:f6:49:7b:8d:
08:63:a1:e3:37:63:65:7f:43:d4:f1:a6:bb:c4:ac:22:a5:e6:
4d:72:52:c5:eb:cb:90:52:05:01:02:7c:08:88:56:ca:d7:61:
80:c8:2e:0e:2e:c5:4f:35:04:e9:59:6b:e8:1a:eb:2d:02:08:
0e:46:af:09:90:a0:e9:64:ee:31:d1:cf:97:49:3d:ef:ca:69:
bd:bf:72:60:80:74:ed:ea:f8:00:54:51:87:9d:50:0f:62:5c:
6f:a3:ad:5c:b6:6f:d4:c9:52:74:e4:de:c7:e1:44:9b:8e:7d:
c8:f0:d6:5c:ef:2e:98:e0:e2:67:77:57:8f:f2:8b:83:cd:7f:
3e:cd:63:92:26:2d:02:8c:3c:43:97:76:b7:dd:79:3d:26:1a:
8d:c2:fa:7a:5c:1a:6a:2a:42:9f:ce:5a:65:59:28:9e:ad:a1:
ee:c2:0b:d6:db:21:46:ff:1a:76:a2:61:cd:bc:d8:2c:24:cb:
8d:45:1e:43:d5:a5:eb:ef:19:e5:d5:cd:05:69:e8:b8:ad:f8:
f8:b0:af:a8:c5:bd:2c:1b:65:ce:33:24:20:f6:ca:c0:41:59:
95:dd:06:c3:f3:ad:19:73:91:db:5c:a6:51:0d:a9:e8:a1:68:
84:2c:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:02 2025 by rpki-client