Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/cEhFqbjTQFHrRV4Ybw-hc_cZuJo.roa
File: cEhFqbjTQFHrRV4Ybw-hc_cZuJo.roa (raw, json)
Hash identifier: W1+Ofl4oiuSVllcGbGWdf+VY2bftQGwfHUHzFsY/Q7Y=
Subject key identifier: 70:48:45:A9:B8:D3:40:51:EB:45:5E:18:6F:0F:A1:73:F7:19:B8:9A
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 019425217607D2C40B5A4A41C8D980529D2B
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/cEhFqbjTQFHrRV4Ybw-hc_cZuJo.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 188.211.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:76:07:d2:c4:0b:5a:4a:41:c8:d9:80:52:9d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=704845a9b8d34051eb455e186f0fa173f719b89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:ef:5d:d6:1a:5b:b9:6d:b8:35:48:72:d1:
36:75:df:df:b6:f9:22:e8:f2:af:ea:30:26:e8:d2:
30:b7:78:d1:79:24:d3:a9:1a:b4:5f:97:0f:66:61:
df:b8:51:15:a3:b8:41:d1:b3:8e:6a:56:82:3c:a7:
b3:0d:f9:92:a6:8c:90:37:07:b4:87:04:ef:17:fb:
e4:31:9c:b0:3c:e1:02:30:6a:9f:c9:02:50:28:fa:
12:3a:cb:49:ed:8c:dc:34:90:64:f2:52:b3:ac:55:
8f:c9:85:a9:6c:c1:ec:96:14:3a:44:de:da:d2:25:
00:6a:9d:58:bf:47:45:dd:9b:8e:62:0f:c4:8d:e3:
05:23:6d:2e:7b:2e:27:f1:29:a0:30:8a:71:b4:03:
1f:14:9a:d2:a9:ad:94:45:0d:32:f3:0a:eb:14:f2:
a1:f5:83:4c:8f:a4:2f:f7:4d:60:4a:3a:2f:dd:a6:
03:b9:23:54:ac:e3:69:a0:c8:5b:21:eb:2d:01:3b:
c2:90:d8:86:01:1d:d2:01:ac:9d:68:5a:8f:b0:38:
22:b7:59:1a:9c:8e:d3:7d:b1:e8:02:37:a9:35:71:
9e:1a:a4:8c:1b:e0:16:ff:4e:84:8f:60:1c:09:90:
44:39:37:23:9d:68:35:1a:57:e6:97:d7:c5:4f:10:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:48:45:A9:B8:D3:40:51:EB:45:5E:18:6F:0F:A1:73:F7:19:B8:9A
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/cEhFqbjTQFHrRV4Ybw-hc_cZuJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.211.166.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b5:c6:05:34:29:fd:52:c2:83:49:08:d5:ab:8b:a2:3a:60:
1b:7b:2a:a5:2d:f6:01:0e:9f:0b:4a:0d:1e:fd:57:9a:0a:d7:
7a:93:ed:16:ba:b0:63:2c:ce:1c:82:3c:c1:f1:b8:9f:cd:19:
6d:19:42:f0:46:66:79:5a:1f:ec:37:d6:b0:c3:71:93:fe:26:
f3:81:0b:0b:24:fa:3b:c8:ff:3a:de:ad:20:77:8f:14:a2:49:
f0:20:13:36:7f:32:c5:25:f6:0d:12:05:f8:d4:25:6b:9f:73:
2c:93:90:46:82:44:36:ea:70:8c:aa:b3:60:03:32:85:4f:f5:
5c:97:c6:0b:8a:44:6d:42:84:50:0b:0e:53:b9:cb:05:0a:d8:
bc:1d:63:e9:70:fb:d8:f3:c0:7c:02:ed:be:c3:c7:8e:a0:3f:
01:6c:c0:2e:6f:27:d7:d4:55:a4:9c:bc:81:86:f8:93:d7:e9:
2d:80:16:0a:e6:7c:a1:9b:da:89:a2:4d:b3:07:5e:34:0c:c0:
dc:65:5a:c7:a1:b0:0a:f5:a7:b7:ef:24:df:9a:db:26:dd:ea:
14:d0:52:0b:36:6e:d1:5c:52:3c:04:2e:fd:a2:c5:92:3a:f2:
e0:91:03:ac:ad:8e:76:29:9d:da:f7:a6:b2:a9:b8:af:1e:4b:
0f:f8:1a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:12:02 2025 by rpki-client