Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa
File: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (raw, json)
Hash identifier: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=
Subject key identifier: 0E:20:7F:6F:57:F4:CE:5A:99:E1:8F:51:94:80:A0:6C:E1:8C:27:BA
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 019421446B5ABD1B749BB305ECD7086C0870
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206376
IP address blocks: 185.188.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6b:5a:bd:1b:74:9b:b3:05:ec:d7:08:6c:08:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e207f6f57f4ce5a99e18f519480a06ce18c27ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:35:94:3b:47:3c:d0:99:83:47:4b:03:6d:
c6:ee:29:d5:c5:18:b3:a9:fb:08:16:7d:d4:d4:0b:
ef:dd:18:cb:9a:12:de:c7:da:30:ba:e8:47:76:bc:
29:22:eb:31:7a:b1:f7:f8:86:cf:3d:08:11:c0:b0:
53:63:c1:74:b3:82:38:bc:d6:aa:8d:a1:b2:d0:98:
c3:66:35:8c:31:78:54:30:b2:05:57:af:c2:83:ac:
0f:2d:c7:16:05:ed:8e:99:7f:ba:00:61:63:40:41:
75:7a:67:e8:b5:d5:9b:dd:ce:f2:78:20:82:4a:d1:
4b:7c:f7:47:af:4b:bf:df:20:00:ac:f9:2a:89:a1:
cf:fb:70:b1:b5:4a:74:a7:08:e6:b4:29:0f:b7:a6:
64:90:52:f2:15:d1:1e:5f:a9:48:59:53:7c:49:20:
cd:ea:1c:8a:13:9d:c7:c8:59:cb:25:49:96:dc:f3:
e2:fd:52:3b:90:f2:af:af:6c:04:8b:82:5f:b6:0a:
4f:37:6f:f0:9d:82:1a:19:e3:33:29:3e:63:99:22:
20:48:74:5c:8a:2b:3b:c5:eb:ae:06:10:dc:58:39:
42:86:fd:18:b4:ef:2d:5e:74:f1:9b:f9:6b:9d:29:
20:4e:6c:eb:d6:8c:f6:cb:bf:30:ce:8f:40:db:ca:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:20:7F:6F:57:F4:CE:5A:99:E1:8F:51:94:80:A0:6C:E1:8C:27:BA
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.124.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:ae:ad:75:65:e4:45:fd:25:f4:ed:ec:2a:3b:ea:79:88:c4:
85:8d:b6:a8:e9:cd:63:a5:76:a9:f9:55:bb:43:76:02:c5:ea:
99:af:d6:8e:ee:1d:4e:fb:36:41:0a:62:7e:77:60:5b:5d:75:
b5:7b:9d:fe:16:d2:60:f0:98:4e:9d:7b:22:dd:61:cf:34:57:
70:2c:5c:43:24:84:f7:c3:1d:c0:f8:88:52:e1:99:50:98:95:
48:12:96:59:52:73:a1:e6:a0:02:e6:53:d8:68:7a:e4:11:ba:
e1:28:71:c1:43:5d:60:b0:b7:59:75:ea:b8:9d:db:87:90:a5:
90:a6:6b:2a:4b:a7:4a:57:b5:f2:11:c0:3a:a4:5a:f8:0c:c7:
1f:9e:18:1b:5d:4b:00:57:d0:2a:1c:f7:b7:ce:24:a9:30:31:
8d:d3:82:ab:c9:45:e4:e6:17:f1:0a:44:0b:33:d5:49:ab:46:
7e:ab:98:79:88:1e:24:17:20:52:00:ab:4e:ca:fd:a4:71:c1:
98:ab:6f:36:35:06:8b:50:d6:e0:c2:c2:e0:38:f2:7b:33:81:
15:41:e9:d3:be:a4:62:9d:44:8d:09:65:19:19:ee:1e:5c:95:
ae:84:91:ef:91:cb:bf:dc:65:1d:03:5b:d5:16:1f:43:53:30:
d9:b4:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:38:29 2025 by rpki-client