Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/s9iWXfzg6KeJY55inKj57nSWYPs.roa
File: s9iWXfzg6KeJY55inKj57nSWYPs.roa (raw, json)
Hash identifier: ES15YJqDXrxdozbubWzA4wTSapUQW86wCre2VndijgU=
Subject key identifier: B3:D8:96:5D:FC:E0:E8:A7:89:63:9E:62:9C:A8:F9:EE:74:96:60:FB
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0194A73C7CAE7876834C0D0F2A22C2AB91F2
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/s9iWXfzg6KeJY55inKj57nSWYPs.roa
Signing time: Mon 27 Jan 2025 10:09:06 +0000
ROA not before: Mon 27 Jan 2025 10:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 188.132.188.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.190.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:3c:7c:ae:78:76:83:4c:0d:0f:2a:22:c2:ab:91:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 27 10:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3d8965dfce0e8a789639e629ca8f9ee749660fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:81:3f:07:b1:25:f1:d0:c7:e0:ce:c6:13:f1:
68:8a:b6:a9:c8:0d:19:51:cc:13:5b:eb:5d:51:55:
8c:27:e4:c3:d5:0f:15:fa:03:89:bc:9e:72:78:15:
38:30:5e:de:57:4c:0d:87:17:ee:dc:c7:b6:89:d1:
34:a5:3b:a6:0e:cc:8e:ab:0d:8d:65:a3:b5:5a:a1:
38:9f:cb:e1:65:55:96:5f:e1:c9:9e:a1:c3:99:5a:
6c:fc:bb:e0:29:27:f6:d2:b6:b5:a2:a2:2f:a9:e7:
e7:95:88:93:27:7f:84:a4:0e:95:02:76:e2:c6:40:
02:37:a2:78:9f:17:22:2c:36:09:bc:d7:b3:eb:18:
5e:c7:24:39:f0:c1:93:38:6b:8d:c1:aa:b6:61:fe:
67:42:10:38:d1:b2:55:cc:5f:80:b2:ec:4a:79:39:
5f:04:40:70:b4:37:3d:62:9e:63:2c:ea:1f:3b:00:
85:a5:9b:78:04:bb:d8:e7:d8:b0:8a:ab:8f:f6:f8:
e6:b0:f5:2d:42:28:52:06:9b:c6:aa:37:04:61:b3:
be:7b:3e:eb:85:15:0c:11:c1:7a:c3:6a:5d:22:e2:
6f:9a:ca:94:a8:46:b5:9c:39:6b:6f:f6:d5:3a:dc:
4f:66:28:92:d0:54:6d:c8:05:25:0c:0a:41:0a:30:
05:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D8:96:5D:FC:E0:E8:A7:89:63:9E:62:9C:A8:F9:EE:74:96:60:FB
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/s9iWXfzg6KeJY55inKj57nSWYPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.188.0/22
188.132.206.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
94:b0:da:e6:31:f1:d1:c4:81:93:ea:67:65:73:65:5f:66:79:
de:db:de:82:83:ad:1d:65:46:02:c0:8d:84:03:d0:56:3b:5f:
43:ce:0c:d2:c7:46:55:0b:af:a6:f8:df:a7:0f:c2:ae:61:a2:
e2:65:30:2e:a3:12:13:79:18:ee:76:1b:ed:26:bb:1d:c0:1f:
38:13:f3:be:40:09:c3:da:f0:2a:bc:04:5e:8f:0a:fb:3b:ab:
84:29:29:10:c1:09:21:c0:99:9c:eb:d0:bc:ef:17:c5:a7:a2:
45:cc:fa:af:ff:98:ab:77:ac:91:90:5e:8a:ad:78:ab:55:61:
a4:d4:fa:b6:df:39:0a:5a:49:6e:3d:56:cd:02:7b:14:eb:2a:
65:06:46:79:f6:07:d7:19:ff:d5:8b:f3:df:49:35:9e:19:d9:
67:54:03:12:3b:5d:92:0d:15:9d:1d:47:49:4b:66:80:cc:93:
5a:d7:f2:0b:63:cc:bd:37:e7:66:19:4d:c6:f4:5e:90:b2:be:
bd:9e:b3:84:96:f1:08:ac:08:75:d4:77:25:73:72:18:05:2c:
97:2f:92:2a:a1:c2:89:fd:79:15:a8:3e:08:f5:27:fb:7b:50:
7e:ab:fc:10:39:ac:57:3d:f7:dc:db:d8:fb:32:b8:b2:e2:75:
78:a4:19:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:46 2025 by rpki-client