Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/vixyzoRGMiAPIQs9FKTrZIreWAU.roa
File: vixyzoRGMiAPIQs9FKTrZIreWAU.roa (raw, json)
Hash identifier: Ou0w2YovPY60UVVQ46iOV1rhX+zd7oOQHHPd6ZGynZI=
Subject key identifier: BE:2C:72:CE:84:46:32:20:0F:21:0B:3D:14:A4:EB:64:8A:DE:58:05
Certificate issuer: /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Certificate serial: 01941F8C053AF1959BE6A94F50C88724A463
Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/vixyzoRGMiAPIQs9FKTrZIreWAU.roa
Signing time: Wed 01 Jan 2025 01:47:37 +0000
ROA not before: Wed 01 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209277
IP address blocks: 88.214.16.0/24 maxlen: 24
88.214.17.0/24 maxlen: 24
88.214.18.0/24 maxlen: 24
88.214.19.0/24 maxlen: 24
185.38.192.0/24 maxlen: 24
185.38.193.0/24 maxlen: 24
185.38.194.0/24 maxlen: 24
185.38.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:05:3a:f1:95:9b:e6:a9:4f:50:c8:87:24:a4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Validity
Not Before: Jan 1 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be2c72ce844632200f210b3d14a4eb648ade5805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:95:61:f8:57:f3:3c:08:73:e3:9d:49:fb:
3f:8e:19:51:6d:39:ec:73:42:c0:90:7d:6f:40:35:
e6:3c:2f:e0:06:96:ba:0f:1e:27:04:fc:d2:37:4b:
bd:fa:87:84:66:90:6b:4c:df:88:80:22:9f:5a:91:
75:50:85:20:94:1f:24:02:ee:d4:48:65:3f:b4:ac:
30:2f:48:90:53:66:28:31:e3:ae:f6:76:fa:57:4e:
fd:ea:b1:f4:a0:84:8d:5e:2f:5d:49:a7:f1:40:1f:
32:96:ed:27:59:a8:39:1b:e7:44:f7:c8:32:22:4f:
9d:de:89:0f:95:22:b0:70:01:ec:4f:bd:7e:b5:68:
75:a5:b2:4b:8f:f6:37:74:f7:96:11:d5:06:84:ed:
36:fa:b6:35:6d:8b:d5:93:de:4d:5d:98:90:0d:c5:
ae:2c:09:ca:89:b9:47:78:aa:33:54:61:e9:55:ec:
d0:83:82:5e:a4:6c:83:26:ee:d5:f6:15:1b:41:7e:
02:8f:9c:50:6a:87:c3:07:1a:3b:7d:76:37:39:ac:
28:79:42:c9:c4:63:b6:e9:b9:8b:7c:58:f5:b0:da:
a5:b4:c8:8c:2e:7c:8b:6f:c0:79:34:ce:f3:e4:7a:
9e:c5:35:ce:8c:2e:0a:a1:49:5c:43:83:cc:0c:a0:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2C:72:CE:84:46:32:20:0F:21:0B:3D:14:A4:EB:64:8A:DE:58:05
X509v3 Authority Key Identifier:
keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/vixyzoRGMiAPIQs9FKTrZIreWAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.16.0/22
185.38.192.0/22
Signature Algorithm: sha256WithRSAEncryption
69:50:ad:b5:3d:05:ba:8a:38:ac:3e:eb:a0:65:89:eb:0d:ac:
d7:92:50:78:f6:ac:6a:da:f3:c6:05:11:75:0a:a6:41:11:89:
d0:c2:44:1b:8e:c0:0a:31:58:fa:c4:c1:52:59:8f:e7:f0:00:
ac:63:8e:8a:78:8f:2e:e5:78:08:32:c4:fc:c5:a8:da:87:9a:
8e:84:ad:ce:b5:33:0a:d9:d1:cc:c5:09:40:e1:53:e3:5c:bd:
fc:43:ae:2d:91:b6:17:52:22:48:12:2e:37:ea:f5:21:48:e1:
55:4a:fd:d6:82:cf:5d:fb:8b:b9:78:7a:16:30:a3:df:1a:3a:
e3:d9:30:00:2a:ff:01:50:27:04:49:0d:07:1c:d0:f9:d1:9b:
c7:3b:3f:57:c7:53:0e:f9:83:4c:6f:bd:e6:9e:e2:e4:cc:4b:
1a:ec:3c:a8:81:94:cc:cb:fe:04:50:bd:7a:82:71:64:3b:d3:
24:f4:2c:58:1c:11:60:3e:23:86:f3:81:06:51:07:90:66:af:
25:68:1e:30:54:aa:90:36:f9:c8:44:19:8f:42:38:6e:a7:2d:
52:3c:c8:80:ee:a2:bc:a4:3b:59:38:e6:36:a3:0a:b7:80:db:
00:e3:91:b2:69:8f:40:5c:3c:2e:c7:86:d1:ff:e8:52:fb:b2:
2d:36:fb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:54 2025 by rpki-client