Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/m__VQxzAUsknIpsFag2nsIGsYAs.roa
File: m__VQxzAUsknIpsFag2nsIGsYAs.roa (raw, json)
Hash identifier: fbsWG3S+SJk1wI79NGdTUX1pVOzYF+IQAcNaMUAUETY=
Subject key identifier: 9B:FF:D5:43:1C:C0:52:C9:27:22:9B:05:6A:0D:A7:B0:81:AC:60:0B
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0194282393650D56C4C08F7802711CBAD957
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/m__VQxzAUsknIpsFag2nsIGsYAs.roa
Signing time: Thu 02 Jan 2025 17:50:07 +0000
ROA not before: Thu 02 Jan 2025 17:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 188.209.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:93:65:0d:56:c4:c0:8f:78:02:71:1c:ba:d9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 17:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bffd5431cc052c927229b056a0da7b081ac600b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:ab:f6:06:ec:df:ab:cc:46:40:1f:05:bd:
5d:ee:97:90:22:5e:8e:20:44:93:3f:b8:c8:8f:48:
67:84:37:80:67:76:a8:1e:1c:d1:c5:d9:f0:f2:09:
7d:25:d1:e1:ab:52:41:47:a4:6c:ad:98:13:73:cd:
65:35:8d:77:90:de:22:42:f3:aa:0c:ec:fa:2e:08:
fb:11:1d:fe:96:8c:1a:36:df:9b:33:69:fc:d5:09:
92:e3:08:c3:30:8c:0d:64:d7:b8:c2:a9:2e:a4:d7:
d2:9b:79:9b:41:2f:46:ad:38:7a:af:fd:1e:c2:79:
62:bf:84:72:b8:16:5c:3f:5a:41:6c:34:64:f3:97:
11:12:3c:b1:78:51:d3:76:87:94:d0:1e:55:d9:36:
1d:68:52:9d:ec:83:b6:0b:fd:21:68:1d:ae:1e:e9:
ec:0c:68:39:f6:b2:e1:cd:53:6c:93:de:94:5c:6a:
a8:94:31:98:99:ee:22:15:ea:51:f1:1b:6c:0b:60:
33:08:2e:f0:42:a6:eb:c8:20:6e:01:99:7e:45:ca:
af:8f:04:cf:6f:66:d0:a2:60:82:93:0a:72:85:22:
ac:c9:fe:f5:a0:a9:cc:85:85:d6:2e:08:bf:1e:79:
a0:97:fd:59:d8:59:3b:30:ad:58:74:16:1a:38:3c:
2b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FF:D5:43:1C:C0:52:C9:27:22:9B:05:6A:0D:A7:B0:81:AC:60:0B
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/m__VQxzAUsknIpsFag2nsIGsYAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.140.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:5a:fe:41:2d:5c:ef:85:48:54:85:08:d9:74:83:a3:38:64:
93:81:99:3a:bd:f8:aa:86:07:4a:6a:44:ed:08:c6:ab:ad:5a:
5a:25:54:26:2d:40:56:ce:07:e6:eb:e9:73:51:c6:3b:3b:bd:
c6:01:da:c1:17:8e:87:d2:1c:6d:a4:e5:01:27:95:d1:13:59:
5c:12:5f:8f:45:4f:83:d5:94:3c:09:75:42:07:30:9d:da:b3:
94:40:16:e2:84:60:73:6f:ee:10:8e:0a:d4:3c:d0:a2:bf:00:
91:c6:a9:02:d7:05:43:1a:a3:7d:81:98:57:3b:bb:9f:9d:ad:
7f:c9:f3:2b:fc:d1:25:02:b4:f3:d2:dc:ac:61:86:34:2f:d1:
f0:a5:50:0a:e4:d4:b4:86:17:22:f4:20:32:db:77:9c:74:ce:
ad:f6:be:4a:dd:3e:00:ce:58:be:ae:e5:e5:ff:bf:fd:ab:70:
83:01:bc:3f:4c:df:73:c7:28:3c:f0:c3:74:09:cf:a1:80:d4:
93:2b:0f:e8:40:71:1a:94:ca:ca:dc:b9:a1:91:53:e8:00:01:
7b:91:72:ae:0a:48:93:6e:8f:f1:a4:d0:4d:43:4c:5d:f5:8b:
57:1a:02:d2:65:2e:e4:00:33:6b:dc:ab:40:6e:aa:0c:85:34:
04:d9:b8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:52 2025 by rpki-client