Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/S8Gv615Ih2EECVB1a2b3J3u_PZw.roa
File: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (raw, json)
Hash identifier: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=
Subject key identifier: 4B:C1:AF:EB:5E:48:87:61:04:09:50:75:6B:66:F7:27:7B:BF:3D:9C
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 019422FC1D8582E6E393FED49280DE2FE4E9
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/S8Gv615Ih2EECVB1a2b3J3u_PZw.roa
Signing time: Wed 01 Jan 2025 17:48:55 +0000
ROA not before: Wed 01 Jan 2025 17:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12479
IP address blocks: 88.87.192.0/19 maxlen: 24
94.229.192.0/20 maxlen: 24
193.254.8.0/22 maxlen: 24
212.31.32.0/19 maxlen: 24
213.151.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1d:85:82:e6:e3:93:fe:d4:92:80:de:2f:e4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bc1afeb5e488761040950756b66f7277bbf3d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:37:a8:82:97:f1:8b:7f:54:b5:9e:eb:f5:
d9:0f:fd:8c:15:28:31:60:ce:09:1e:c0:36:0c:95:
a9:1b:c1:d4:b8:e9:5c:57:84:73:58:0a:6b:7b:1c:
66:a5:59:cd:66:09:10:28:73:4a:dc:a3:b8:97:2e:
e4:10:77:07:33:ab:1e:56:bb:6e:5d:f2:9d:d0:87:
e5:e9:ed:4d:dc:30:af:43:30:85:77:f9:8a:dd:de:
e7:29:dc:32:27:09:17:fe:a5:53:5c:87:a7:1d:e1:
6d:14:13:17:24:d9:64:ef:17:ba:60:cd:fe:b4:71:
8f:e0:0d:99:66:ee:8a:1f:0e:4f:c4:f3:ed:f8:b8:
c1:82:b0:f8:ee:f4:e4:db:52:93:2d:84:8e:08:b3:
f0:5f:45:c4:58:69:97:c3:a2:5b:65:09:9c:f7:11:
69:6c:47:a7:75:36:c5:a6:51:5f:a9:64:e7:83:e7:
cc:09:21:78:2b:48:2a:c2:eb:3a:39:b8:d6:89:10:
a3:30:c5:23:2c:77:2e:db:82:93:49:e0:b6:60:58:
dc:3a:15:04:1e:ff:cc:d3:3a:f6:41:58:d9:f3:4a:
9d:a1:1b:81:2f:7f:02:3f:f9:07:de:2b:86:36:c0:
79:df:50:43:c3:4f:08:fa:86:38:06:b8:08:3a:7b:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C1:AF:EB:5E:48:87:61:04:09:50:75:6B:66:F7:27:7B:BF:3D:9C
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/S8Gv615Ih2EECVB1a2b3J3u_PZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.87.192.0/19
94.229.192.0/20
193.254.8.0/22
212.31.32.0/19
213.151.96.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:43:30:66:a7:8d:f4:23:47:dd:7e:34:24:94:58:f4:de:5b:
6c:41:39:a9:42:a3:f8:5c:26:90:d9:7b:06:4f:27:dd:dd:62:
67:de:24:c3:eb:c2:39:e2:1c:a4:29:9d:d2:8d:e7:d4:42:a2:
d4:ad:71:58:92:b2:09:0f:14:b3:75:92:13:83:70:23:78:6c:
cf:27:ed:33:91:5c:13:84:9e:e8:dd:e6:72:2b:d2:ff:bc:0b:
ac:dc:a1:f7:0b:f5:b8:68:9b:74:f4:16:de:00:11:78:3d:d6:
9f:1d:ef:2d:dd:f2:cb:be:7b:ab:37:31:19:9b:0a:ed:29:df:
2e:3f:4e:9d:92:b9:c5:7f:02:c1:87:90:f5:bc:41:98:df:16:
e9:1a:94:7b:ff:0f:83:2c:18:90:d5:ae:c5:10:ad:30:49:95:
09:b3:4f:4e:0d:8b:0b:ce:aa:ca:2a:1e:ed:b5:a3:9b:95:93:
6c:fb:e7:24:c5:0e:0d:bd:83:67:1d:64:9d:27:31:c1:8d:39:
7d:ca:41:ee:04:3e:5b:a0:ee:2c:11:67:a1:54:82:1c:02:4d:
07:5b:f3:01:7e:ca:1e:ac:b5:7c:f3:6b:d0:ab:25:04:39:ff:
29:c6:82:94:28:f7:a9:ad:e5:40:fc:04:71:d0:ea:45:38:50:
19:b9:56:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:17:03 2025 by rpki-client