Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/f-luTA_tx0v0TH5JKilbt6SzcJU.roa
File: f-luTA_tx0v0TH5JKilbt6SzcJU.roa (raw, json)
Hash identifier: +LXN4TEg0fwtohb1kuvdLScMnEdA9CiLPdalbBVCXxU=
Subject key identifier: 7F:E9:6E:4C:0F:ED:C7:4B:F4:4C:7E:49:2A:29:5B:B7:A4:B3:70:95
Certificate issuer: /CN=3501772457e0f827b9e920b00cd114824a5fa621
Certificate serial: 019425215FEFBED9130256559A03AE9CD657
Authority key identifier: 35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/f-luTA_tx0v0TH5JKilbt6SzcJU.roa
Signing time: Thu 02 Jan 2025 03:48:51 +0000
ROA not before: Thu 02 Jan 2025 03:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200911
IP address blocks: 185.88.120.0/22 maxlen: 22
185.88.120.0/23 maxlen: 23
185.88.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5f:ef:be:d9:13:02:56:55:9a:03:ae:9c:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3501772457e0f827b9e920b00cd114824a5fa621
Validity
Not Before: Jan 2 03:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fe96e4c0fedc74bf44c7e492a295bb7a4b37095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:d2:cd:05:6e:e5:24:71:bc:60:98:86:95:
34:76:d6:fb:41:ea:13:6a:02:9e:a5:bf:43:b1:9d:
65:6b:db:ec:94:77:0b:a2:98:4f:c8:f4:d6:07:0a:
d2:43:1f:35:dc:4e:6a:89:c3:52:e8:92:4b:14:83:
73:e4:f9:cb:14:e5:d7:4e:16:82:3a:e7:a9:79:09:
e2:9e:d7:df:45:30:39:d6:1d:de:0a:72:c9:81:9d:
f6:0a:e6:71:02:bb:e8:1e:af:d8:bf:78:87:b6:fb:
ed:32:83:60:92:a5:03:d3:2b:6a:17:ea:fb:9d:8b:
0c:f7:c7:b0:29:c3:c6:b3:92:22:5d:8c:64:e8:62:
91:27:d4:80:76:7b:06:91:18:b8:e6:65:b7:60:0d:
dd:cb:7b:4b:1a:b1:f3:55:51:7e:10:33:85:b8:49:
97:5d:a2:d9:76:c2:56:93:19:14:27:bc:a8:c1:e0:
11:ff:55:fb:3c:48:31:d3:e6:4e:25:57:40:e5:ee:
d5:2d:35:0a:fe:a2:e7:ee:9f:11:5f:70:1f:a5:aa:
24:5b:7c:a4:63:14:85:90:84:0b:43:45:42:34:b0:
ee:82:65:64:3a:51:d4:f3:36:08:03:b6:1b:ff:3e:
0b:fc:73:19:f6:d2:16:bb:0d:e8:1d:0c:3a:47:c0:
4e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E9:6E:4C:0F:ED:C7:4B:F4:4C:7E:49:2A:29:5B:B7:A4:B3:70:95
X509v3 Authority Key Identifier:
keyid:35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/f-luTA_tx0v0TH5JKilbt6SzcJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:5d:c2:d4:31:10:8a:0a:f2:6d:07:ba:4a:c7:69:a5:cf:55:
ae:60:48:30:50:c2:03:5c:7f:2b:6e:4d:7c:e0:b7:dc:df:6f:
a3:68:c8:b0:e3:d7:b4:b3:cc:3e:76:74:60:6a:e4:30:76:c4:
47:2d:8f:95:34:76:e3:91:2e:88:74:d1:ed:31:c9:a3:91:03:
1a:96:aa:0c:68:a3:51:7b:6f:eb:93:45:3a:6f:d8:84:b8:2f:
3c:18:f6:d6:8e:5f:ab:2e:cc:73:4c:31:78:cd:e9:33:fa:54:
93:1f:f1:b5:04:83:01:ef:9e:b4:22:ea:54:63:75:cf:d3:a1:
0e:fb:2c:47:ce:ba:aa:8d:1e:57:e5:da:3e:57:a8:e0:11:6a:
58:b2:3c:2a:f2:21:f4:92:e4:f7:d4:aa:f3:97:0a:e8:18:ef:
7d:36:97:7c:b7:dd:75:21:bc:1b:e8:ad:9f:7a:26:65:d3:ae:
22:75:13:a1:14:e9:6c:86:3d:dd:70:38:77:61:9e:50:87:76:
84:e8:86:e0:0f:f5:5d:48:a3:c6:7e:1c:69:34:3c:21:05:ed:
d2:a4:f7:f4:cc:84:21:a9:35:67:7f:03:7d:65:27:f3:0d:4c:
d0:05:a1:7e:0a:08:52:7f:dc:69:c6:1e:56:0c:13:ee:b5:b9:
2a:d5:3a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:39 2025 by rpki-client