Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/mM6GiN-fB7HqQ5hEvmqNqpmWRsw.roa
File: mM6GiN-fB7HqQ5hEvmqNqpmWRsw.roa (raw, json)
Hash identifier: Ek9jyOtYbrdAk+R69tpAey1b1/LsfeE3z27cYGaMX5Q=
Subject key identifier: 98:CE:86:88:DF:9F:07:B1:EA:43:98:44:BE:6A:8D:AA:99:96:46:CC
Certificate issuer: /CN=7f2ba86df787888f6f8592a806a6ffea3046c07a
Certificate serial: 01942067CF7DA515A72B6D09EEB79BA795CF
Authority key identifier: 7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/mM6GiN-fB7HqQ5hEvmqNqpmWRsw.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44789
IP address blocks: 88.132.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cf:7d:a5:15:a7:2b:6d:09:ee:b7:9b:a7:95:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f2ba86df787888f6f8592a806a6ffea3046c07a
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98ce8688df9f07b1ea439844be6a8daa999646cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:be:c7:81:f8:e9:de:9e:2d:4b:c5:cb:64:
9c:e6:50:54:e4:2f:ae:4d:a3:70:a5:4e:2e:12:32:
5c:34:09:dc:38:b2:32:85:ab:23:e9:23:02:8d:1d:
13:42:b2:1e:fe:ce:7e:3f:1e:ef:59:64:c0:b2:83:
f4:3a:15:cb:a9:29:4a:4a:d3:6b:e9:9c:0d:b2:1b:
95:3c:b5:cc:ff:57:73:aa:41:90:ac:63:82:a5:64:
a8:0a:bb:b0:68:3e:18:4a:7b:77:88:00:e2:f9:43:
c3:e1:da:64:22:2e:9a:ea:cf:a3:ce:16:f5:e2:d8:
95:f4:e6:96:29:1d:9f:28:a5:b0:e8:c8:58:13:4f:
f5:27:0f:eb:c1:34:cc:0d:b4:99:20:fe:e8:a4:27:
d1:fb:6b:5f:06:53:3e:5c:74:71:e2:a2:6f:43:e7:
ef:9c:ea:19:82:ac:c0:02:5e:fd:20:99:fd:81:16:
4f:63:46:87:72:b8:c1:c3:e5:24:77:c9:35:d6:08:
6d:26:9f:a3:9f:67:1e:33:02:7f:f8:79:fe:eb:c6:
42:5b:02:64:46:2f:fb:0e:97:dd:88:03:44:ef:dc:
06:c9:59:c2:4b:8c:83:0a:1d:88:7b:82:dc:2c:63:
28:1e:0a:ac:d4:76:ea:ea:f3:8a:c4:04:f9:ae:b4:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:86:88:DF:9F:07:B1:EA:43:98:44:BE:6A:8D:AA:99:96:46:CC
X509v3 Authority Key Identifier:
keyid:7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/mM6GiN-fB7HqQ5hEvmqNqpmWRsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.132.252.0/22
Signature Algorithm: sha256WithRSAEncryption
e1:e6:7d:c4:0d:04:e4:ef:6d:9c:dd:76:40:4b:2f:19:14:95:
45:77:f4:4e:0c:7d:02:65:b8:e0:a1:10:9a:fa:05:71:f9:00:
d5:e1:b6:1c:0c:fa:7a:d5:f7:65:c8:cd:a6:27:3f:a1:35:a9:
5a:39:6c:a1:87:2b:f2:bc:9f:6c:35:10:72:e1:50:cc:14:58:
3b:23:d9:c5:3c:35:09:0f:3c:07:a6:91:2c:e8:d7:71:bf:37:
85:82:e4:af:ac:35:dd:53:68:da:45:9c:76:1e:f5:8f:68:63:
6b:86:22:e3:84:df:d9:6f:92:7a:d3:9f:26:25:35:84:27:f1:
c2:7e:67:ca:ac:d5:b4:f7:48:55:39:f5:b2:63:d5:01:ce:28:
15:f2:f0:25:ef:a0:5b:7a:54:20:03:48:c3:8d:68:d5:79:d1:
de:30:3b:52:dd:8d:f0:84:24:c9:94:ad:97:a0:e6:d1:e7:88:
43:62:60:dc:04:d9:36:57:01:8f:95:97:af:a6:56:99:1a:ad:
e7:6b:13:5d:00:95:56:9b:ed:64:65:d7:cf:8a:55:78:7a:8d:
28:8c:2e:7e:00:25:74:12:2d:a0:95:d7:34:a6:02:87:a3:fd:
14:a0:94:e0:4e:75:ee:76:27:e8:99:db:c5:a5:a1:26:6e:84:
c5:77:36:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:39 2025 by rpki-client