Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/yK4KCrl2qXYXkgzounrk4gTzQIw.roa
File: yK4KCrl2qXYXkgzounrk4gTzQIw.roa (raw, json)
Hash identifier: /zHj7081UkbXIi4O9LzmDeNT5cduqZ+oq+6eaXAh/xA=
Subject key identifier: C8:AE:0A:0A:B9:76:A9:76:17:92:0C:E8:BA:7A:E4:E2:04:F3:40:8C
Certificate issuer: /CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Certificate serial: 0194252039CD65C196E536FBA548BBABCCAC
Authority key identifier: 7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/yK4KCrl2qXYXkgzounrk4gTzQIw.roa
Signing time: Thu 02 Jan 2025 03:47:36 +0000
ROA not before: Thu 02 Jan 2025 03:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.115.88.0/24 maxlen: 24
185.115.89.0/24 maxlen: 24
185.115.90.0/24 maxlen: 24
185.115.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:39:cd:65:c1:96:e5:36:fb:a5:48:bb:ab:cc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Validity
Not Before: Jan 2 03:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8ae0a0ab976a97617920ce8ba7ae4e204f3408c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:a5:e5:0b:0e:17:19:2f:13:56:58:3d:91:
e3:25:87:af:91:58:18:14:58:66:0d:88:85:8f:f0:
88:da:71:64:91:fd:e4:d8:28:c2:7b:f2:cb:03:e8:
10:d0:83:77:f6:31:60:34:93:28:24:55:55:e5:a0:
ea:65:3f:19:87:50:ae:a4:ac:22:a6:ed:0a:fc:3d:
69:4e:d4:be:7e:75:02:3d:d1:8b:2b:aa:81:8b:2d:
c5:79:31:e7:92:3e:f7:51:d2:97:b6:23:47:9a:d8:
5e:00:41:46:33:25:48:e1:1c:a2:dd:0c:ef:71:ab:
2c:16:4e:d4:2c:67:f4:88:06:fd:f7:41:d8:5f:55:
bc:2f:a1:f8:dd:71:a1:68:79:cd:16:d7:43:dc:bc:
bc:59:83:15:c5:4d:8a:96:56:43:6c:15:be:75:7c:
5f:33:00:53:da:21:fb:b7:f8:b6:d2:2f:de:b0:eb:
49:42:0f:ac:58:ad:6e:90:fb:01:dc:ae:fa:86:64:
d9:12:ed:22:a1:12:f0:57:33:17:7a:2c:f4:ff:73:
8a:80:fd:e4:b6:70:ae:30:05:f3:0b:31:2d:e1:8b:
f6:2b:7f:29:a9:e6:59:64:33:2e:9c:d2:eb:5f:cb:
c0:76:9c:ed:88:ed:18:0a:b5:26:0a:72:58:6e:db:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AE:0A:0A:B9:76:A9:76:17:92:0C:E8:BA:7A:E4:E2:04:F3:40:8C
X509v3 Authority Key Identifier:
keyid:7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/yK4KCrl2qXYXkgzounrk4gTzQIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.88.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:e9:90:0b:03:c2:a2:cb:79:23:dd:71:c3:ad:d3:e4:6e:eb:
e0:7c:11:aa:a5:9d:a4:83:6f:da:67:02:95:6a:3c:05:29:4b:
41:a0:7d:d9:a1:41:5d:0f:a2:08:0f:b2:0d:ab:f0:75:47:62:
d8:12:1e:be:57:b7:42:65:8b:95:8d:fb:5b:59:8d:73:0e:b4:
69:8d:82:de:07:ee:4f:8d:64:cf:3c:8c:dc:24:26:6a:c3:9e:
1b:79:8d:42:5d:f8:93:47:48:e8:5c:1a:f5:69:73:c6:b7:98:
e1:6d:87:3d:f4:2b:14:80:a7:79:31:54:38:ca:5b:29:2c:47:
d7:b0:d1:dd:e9:f2:19:ba:39:24:b0:9e:36:04:f2:57:94:97:
84:56:bd:4a:d7:ac:42:e4:5e:aa:7f:41:56:e0:64:15:cb:f3:
16:04:dc:ee:71:0c:92:62:2a:80:1e:e1:19:c1:21:72:35:bf:
56:cd:ac:d9:aa:8d:11:31:11:c3:8f:22:54:dd:e1:f0:cf:81:
ea:36:f5:99:f1:eb:a1:07:42:65:f6:5e:2b:05:dc:cf:0c:1c:
bd:2a:54:0c:8d:4d:a4:0d:8a:08:5a:c3:21:af:f8:7e:1d:56:
f9:6c:3c:fd:ef:83:b9:b1:7f:d6:4c:55:e3:a5:ee:0b:27:4a:
c2:62:3c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:54 2025 by rpki-client