Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/U4oKE7CRqXAM5lKfColIg9RJWt0.roa
File: U4oKE7CRqXAM5lKfColIg9RJWt0.roa (raw, json)
Hash identifier: d+LbRIvfnzNgLwyQ+KM7aAsPai29dP8OhpmqewNJXLo=
Subject key identifier: 53:8A:0A:13:B0:91:A9:70:0C:E6:52:9F:0A:89:48:83:D4:49:5A:DD
Certificate issuer: /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Certificate serial: 01942369F7856F8D25805E2495CDA8E00FBA
Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/U4oKE7CRqXAM5lKfColIg9RJWt0.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50522
IP address blocks: 185.88.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f7:85:6f:8d:25:80:5e:24:95:cd:a8:e0:0f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=538a0a13b091a9700ce6529f0a894883d4495add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e7:67:11:ff:4a:e9:1e:55:f0:a0:98:09:e0:
07:9f:13:fc:37:2a:a6:a4:c3:5c:ad:2b:cc:2a:a3:
12:e2:da:4c:64:65:e4:ea:2f:3d:dc:93:3a:c0:9e:
97:a2:62:e2:be:7d:dc:75:3b:a1:dd:cb:9d:78:d4:
b3:e8:ec:48:cd:d8:ed:c4:c9:b0:81:f1:9f:fc:ff:
c6:75:1a:01:b3:c8:b6:97:55:61:e9:6f:ca:32:96:
4f:9b:1f:e1:43:47:2b:45:18:fe:65:d6:86:16:3e:
32:b8:d6:05:fa:8d:7c:3b:d4:d6:ac:08:ba:18:aa:
0d:a2:67:0c:58:3f:b4:1d:8a:30:73:e2:a5:b7:a3:
ac:28:14:f3:4f:ac:fd:5c:56:af:33:87:9b:b3:15:
df:64:02:8e:6f:9b:79:a2:6b:56:ba:fa:50:05:7b:
c8:b6:b6:ee:7c:d3:7c:ab:fd:38:a6:00:6c:54:0d:
2b:20:2f:ef:07:d3:8a:77:e7:d4:dd:e5:9d:bb:22:
d9:07:53:21:a5:2f:81:ee:fb:2a:2b:a9:24:c3:74:
48:9d:42:66:fa:bf:5a:b9:76:81:e7:90:a4:59:32:
44:95:87:5d:01:8f:79:ed:15:25:df:4f:de:b0:1f:
97:90:89:7f:45:3e:32:0e:3e:2a:2a:fa:f7:45:02:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8A:0A:13:B0:91:A9:70:0C:E6:52:9F:0A:89:48:83:D4:49:5A:DD
X509v3 Authority Key Identifier:
keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/U4oKE7CRqXAM5lKfColIg9RJWt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:54:5c:a8:4f:81:72:34:9a:01:34:90:20:87:dd:6b:65:20:
e2:50:bc:08:51:b2:8a:17:c8:f3:22:f3:a7:18:21:1d:39:5c:
7c:31:0f:f8:f8:32:b8:ef:0b:d2:67:d2:2d:5f:a8:31:93:fa:
fa:67:b9:7f:fb:9c:12:eb:0f:05:8b:6f:34:f3:80:78:63:49:
4f:cc:9d:7c:08:c4:b5:bd:46:75:dd:8c:8b:41:de:d5:45:43:
b7:66:1e:ac:53:05:81:73:30:b7:3f:0f:18:7d:e5:f9:45:74:
bf:0b:ec:47:df:19:90:80:c3:36:70:68:0a:f4:df:71:09:a5:
2d:6d:c6:b8:d0:a6:c0:f5:01:34:fa:fa:da:a4:21:a1:98:c6:
8e:f4:ce:7a:80:b4:c5:3e:83:27:3a:cc:0e:5e:d5:25:e3:6a:
cf:1a:5c:16:6e:bd:dc:d3:c0:05:e3:ab:4d:29:60:90:df:3d:
fd:b3:2e:1f:c9:3c:67:b4:36:a6:51:ce:b5:3c:0f:2d:18:5a:
80:43:b9:16:a7:8b:12:51:4e:cf:5e:7a:c0:f2:2d:c4:95:98:
2b:f7:14:ef:2d:bf:c7:c7:1d:ea:ad:d8:80:8e:98:45:e0:8a:
60:d3:d7:10:b5:2e:ff:89:70:73:3f:31:23:da:2a:6f:4f:f1:
32:4e:fb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:00:13 2025 by rpki-client