Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/1-Y39Tfe6GiZJ3W9vN_BlEd6kBlc.roa
File: 1-Y39Tfe6GiZJ3W9vN_BlEd6kBlc.roa (raw, json)
Hash identifier: apn2f97Dv4c5iyBIs02XeM7xNWUPUFTvtv/5kVJWl5E=
Subject key identifier: F9:8D:FD:4D:F7:BA:1A:26:49:DD:6F:6F:37:F0:65:11:DE:A4:06:57
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA78C9C1B40CF9459A75F19C8FB6A5
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/1-Y39Tfe6GiZJ3W9vN_BlEd6kBlc.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201549
IP address blocks: 88.199.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:78:c9:c1:b4:0c:f9:45:9a:75:f1:9c:8f:b6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f98dfd4df7ba1a2649dd6f6f37f06511dea40657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:8c:a8:c6:76:ba:14:89:88:7e:5a:41:8c:
4c:ee:e6:ab:91:ae:3c:9b:67:52:04:7b:a3:40:16:
3d:f1:eb:93:94:0f:6d:e8:58:e1:63:7a:76:43:d7:
1e:b4:99:53:ee:89:d9:7e:82:f7:a8:fa:e6:4b:29:
0f:13:a7:28:f5:a0:e6:51:51:ce:32:da:f4:67:7c:
7d:46:84:82:c3:ff:4f:24:25:a0:05:26:99:6b:d8:
81:40:63:9e:a7:80:16:9a:59:b4:43:f2:1a:6a:78:
b0:e8:99:ef:ed:dd:ad:30:42:6d:87:08:62:55:4a:
f4:23:29:55:11:25:13:94:5f:08:46:d7:42:5c:53:
49:18:3d:3d:a4:1c:01:4c:d6:c1:e7:6a:09:af:d5:
2a:27:15:7b:3d:ed:11:42:3d:2a:5c:af:1c:96:7a:
18:6c:21:a8:07:27:20:8f:63:01:13:2e:f4:5d:16:
91:1d:a4:58:02:45:b1:f0:43:9d:5c:58:ee:a9:ce:
83:22:a3:69:da:1d:34:da:49:55:92:e4:7c:80:33:
1a:4b:f2:02:ed:2b:ff:f3:27:ee:44:50:7d:c0:3d:
dc:9e:3b:be:8c:75:3f:89:5e:d1:bd:99:a3:7c:fe:
35:97:6e:4f:c0:b9:6e:f8:40:d2:d8:0a:15:6b:67:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8D:FD:4D:F7:BA:1A:26:49:DD:6F:6F:37:F0:65:11:DE:A4:06:57
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/1-Y39Tfe6GiZJ3W9vN_BlEd6kBlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.199.97.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5c:d4:aa:2d:d3:8e:43:12:60:93:09:de:d3:55:ca:dc:1a:
c6:99:2a:8d:4a:02:e7:9e:18:97:8a:a9:fd:53:31:6e:6f:43:
0a:79:01:ff:ef:e8:82:e9:a3:79:ae:df:11:49:aa:b5:6d:58:
94:50:1e:3f:cc:8d:1a:fe:a1:cc:df:be:90:16:09:c3:0c:3d:
3b:c0:b9:6c:f2:f1:ed:2c:34:de:f7:37:b7:94:03:d1:97:da:
9b:83:0b:5e:3d:54:fb:23:1a:e6:70:ec:73:5f:6a:54:e2:f4:
a4:3b:2d:b0:39:a1:8c:0d:88:c2:47:13:30:0b:18:e2:4c:64:
fb:2c:e9:c2:2e:89:e9:95:ca:87:86:bc:c5:ef:b0:d5:a3:9f:
0a:ae:79:82:76:91:99:9f:2c:d4:5f:8f:93:f3:ca:4b:fb:e5:
98:c2:97:17:18:a4:1e:f6:ab:fa:77:50:eb:e6:6a:fd:75:06:
09:fb:2a:be:c3:1c:3c:62:59:e1:18:d0:e4:e4:b1:eb:4a:e5:
2f:26:24:04:3f:0b:5b:25:d2:bf:c4:33:3b:59:cb:ec:47:b7:
7f:f8:86:a9:15:69:f9:a3:d9:96:ee:ec:6e:5f:4d:fb:2b:58:
48:db:22:39:71:1f:ff:87:2b:15:b4:a9:2a:f5:c3:32:b5:c0:
e9:56:c0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:26 2025 by rpki-client