Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/iOg6nBqVzcdi2Akc2tXxbjOUGMU.roa
File: iOg6nBqVzcdi2Akc2tXxbjOUGMU.roa (raw, json)
Hash identifier: 7kGU2Yz8c6ke6znrEKsk6Gl+moXJfyEygACJlbdXCNU=
Subject key identifier: 88:E8:3A:9C:1A:95:CD:C7:62:D8:09:1C:DA:D5:F1:6E:33:94:18:C5
Certificate issuer: /CN=802fa5b984226183201b701596b0368a27ca9196
Certificate serial: 019424B2D35BC135B547CF00831A88E3EA16
Authority key identifier: 80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/iOg6nBqVzcdi2Akc2tXxbjOUGMU.roa
Signing time: Thu 02 Jan 2025 01:48:06 +0000
ROA not before: Thu 02 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209363
IP address blocks: 185.253.124.0/22 maxlen: 22
193.34.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:d3:5b:c1:35:b5:47:cf:00:83:1a:88:e3:ea:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802fa5b984226183201b701596b0368a27ca9196
Validity
Not Before: Jan 2 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88e83a9c1a95cdc762d8091cdad5f16e339418c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:a9:9c:47:35:2b:cc:b1:b3:ac:b2:7b:88:
5f:00:9e:f7:9a:30:62:cf:65:2f:68:42:e5:b5:74:
f1:36:21:e4:37:ec:83:6d:6a:28:97:42:2b:da:11:
a7:1e:0b:da:b6:c8:bb:82:c4:63:3b:e9:90:f3:b6:
65:c4:0a:de:b3:eb:fe:f2:aa:4b:fa:5c:df:6d:ea:
77:b4:13:4f:b4:b4:8f:ea:66:80:4e:47:11:16:02:
62:cc:76:ac:2c:38:5d:47:74:8a:82:2e:e1:07:84:
30:c8:b4:31:c6:0f:33:0f:88:b9:56:2a:6a:7f:ac:
ee:9b:1f:1d:c5:a7:35:ea:ab:c3:37:d1:a6:91:ae:
5f:92:d0:66:44:12:c4:19:dd:8e:d7:6d:21:cf:f5:
ef:18:51:d2:24:06:9d:f1:bb:f3:2d:c0:66:70:22:
dc:a6:26:bd:89:78:c0:30:b9:d6:55:a0:6a:51:11:
f3:ef:7b:5b:66:ef:96:28:2e:da:c9:e9:83:d3:39:
6d:2b:1c:1c:0b:c2:cd:85:61:72:68:f3:7e:c3:3b:
72:7c:99:ea:fc:9d:65:38:dd:aa:ab:38:48:03:b6:
78:1e:4d:86:00:bf:32:47:fc:36:2f:64:d8:7c:73:
5b:91:4f:1c:9e:74:f0:0b:0f:b8:2e:8b:c7:cd:eb:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E8:3A:9C:1A:95:CD:C7:62:D8:09:1C:DA:D5:F1:6E:33:94:18:C5
X509v3 Authority Key Identifier:
keyid:80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/iOg6nBqVzcdi2Akc2tXxbjOUGMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.124.0/22
193.34.148.0/23
Signature Algorithm: sha256WithRSAEncryption
87:4a:03:92:e2:c3:97:cf:1e:d5:e5:3b:b7:55:99:de:1b:1b:
6f:01:8c:91:78:58:5e:79:e1:c9:27:20:99:5a:64:93:38:16:
18:72:ab:56:a3:de:5f:69:89:43:9f:8a:56:e2:f4:b1:45:38:
b3:be:d7:29:7d:58:bd:cc:80:b2:81:70:f3:22:fb:3e:0c:0b:
a0:bf:85:fe:17:70:cd:39:0e:81:23:6f:96:e7:d0:d3:77:4e:
65:5d:a2:ea:05:6c:da:7c:ae:4f:43:d9:7a:37:ca:88:aa:18:
a8:70:3d:59:90:c2:43:73:df:b4:4d:fc:00:0b:9e:3e:bc:5f:
a2:34:3c:de:48:55:d7:51:81:98:83:a7:2d:ef:19:64:ab:a8:
5d:f6:e8:7c:89:7f:39:d6:42:c1:9d:bb:e7:d1:6b:c7:69:39:
ed:d7:4b:da:db:be:d0:e9:97:b1:f0:8b:f0:33:37:00:2a:95:
48:90:bc:d1:65:bc:d5:9e:3e:c7:46:29:f2:42:51:11:15:06:
26:e8:2f:ac:fe:a9:0b:30:12:5a:b6:ac:21:ed:12:b6:d7:41:
30:18:ca:25:a3:b8:de:46:8f:67:95:c1:f4:e2:d2:b0:ad:ee:
a3:f6:b7:3e:5e:cd:4a:bb:2c:ee:66:0b:3c:65:fe:a8:bb:5d:
dc:79:38:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:49 2025 by rpki-client