Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/yArUxJuVZr7ZjsAQ50iIy89Di3E.roa
File: yArUxJuVZr7ZjsAQ50iIy89Di3E.roa (raw, json)
Hash identifier: FYImSGmHMUN8RyvNxZTCDINMDJQGeXHDQkBay1ZLpaA=
Subject key identifier: C8:0A:D4:C4:9B:95:66:BE:D9:8E:C0:10:E7:48:88:CB:CF:43:8B:71
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019420D5DC0070061F6A4337641045A14390
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/yArUxJuVZr7ZjsAQ50iIy89Di3E.roa
Signing time: Wed 01 Jan 2025 07:47:53 +0000
ROA not before: Wed 01 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 88.151.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:dc:00:70:06:1f:6a:43:37:64:10:45:a1:43:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c80ad4c49b9566bed98ec010e74888cbcf438b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:e6:55:9c:42:51:aa:67:0c:5e:d3:15:1b:
07:5d:95:7c:11:73:ca:a7:b2:e8:27:62:61:56:2c:
59:ec:d0:9d:f0:2f:d1:52:b4:83:af:bb:bb:71:d7:
99:c3:91:d2:49:c4:9a:60:e7:66:0c:ea:c5:f6:bb:
a1:8f:0a:16:05:24:75:cf:d7:9e:5f:6c:3e:4c:d7:
4d:23:f9:30:8c:79:43:97:fa:68:1a:54:0d:00:f2:
b6:9b:9a:47:a3:59:b1:c1:b6:11:11:f2:61:50:94:
c5:39:92:b9:9b:bd:b4:12:3a:11:65:d9:13:1a:8f:
68:a7:e0:b5:22:22:b8:a0:54:79:58:c3:aa:77:e4:
b9:c8:c4:f8:65:41:30:fc:11:00:f0:16:9b:c2:b8:
53:37:db:3d:90:95:63:e6:7e:9f:77:12:60:42:16:
1c:db:97:37:70:25:10:bc:a6:f4:70:56:5e:2f:99:
ad:67:c2:12:69:aa:2e:6e:2c:98:c8:f0:2c:89:8e:
3b:25:44:f2:80:52:14:98:ee:3c:75:fd:37:f8:14:
1c:8d:e8:92:d7:66:a0:d7:44:95:f3:6a:31:75:3f:
7c:dd:b9:fa:66:88:34:b2:33:cc:94:92:1a:8a:75:
39:6b:80:a0:f8:7d:8e:dd:50:90:44:b3:64:f2:ac:
09:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0A:D4:C4:9B:95:66:BE:D9:8E:C0:10:E7:48:88:CB:CF:43:8B:71
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/yArUxJuVZr7ZjsAQ50iIy89Di3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.194.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:9e:60:03:e5:9b:a3:e4:09:2b:b1:35:4b:61:77:9b:de:67:
ce:5b:a3:10:1e:68:83:f4:1c:03:0b:3f:78:25:f3:b1:d6:b6:
43:84:f2:78:dd:0b:2f:06:37:99:1d:66:26:22:a6:39:cc:b9:
70:eb:1a:39:09:6a:e8:60:67:14:ae:ca:98:b0:d7:d1:3f:12:
e0:60:84:65:76:4a:11:b0:3b:3a:87:27:90:b0:34:86:de:88:
21:d0:55:76:e4:f9:bc:b3:0e:ce:9e:81:32:63:a2:c2:18:84:
24:10:99:d2:d8:aa:9a:74:70:3b:9e:79:93:f3:57:10:f7:c2:
70:96:84:c7:0b:4e:ce:96:ea:be:bd:60:d2:8a:05:bf:ed:1b:
31:f4:38:26:c8:51:ba:d1:b7:5f:33:1b:f3:4f:3a:4b:a9:a3:
1b:77:87:1f:fb:2c:3d:84:41:e1:1e:6f:f7:e9:a6:2c:62:5f:
9a:46:af:ec:a1:4a:ce:56:84:4c:6e:40:15:2f:33:5c:f7:d2:
fe:4d:dc:14:65:c4:d3:c7:f3:19:18:fa:15:a3:d4:ef:16:2f:
74:c5:9f:a4:49:20:7e:c1:88:3d:2f:eb:14:2d:63:77:b5:ab:
1b:56:99:eb:9f:8f:f6:52:4f:0a:8f:de:bb:63:56:5b:df:54:
56:9c:a5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:11 2025 by rpki-client