Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/_Q5q23PPHO-mRvT-qL8ygRyZcq8.roa
File: _Q5q23PPHO-mRvT-qL8ygRyZcq8.roa (raw, json)
Hash identifier: MlSwzzd2g428PzEfHlimkQJSWkAp7XxXXCW+AJUIUOw=
Subject key identifier: FD:0E:6A:DB:73:CF:1C:EF:A6:46:F4:FE:A8:BF:32:81:1C:99:72:AF
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 0194228D51961C8EB853AF39AD54BF3AD58B
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/_Q5q23PPHO-mRvT-qL8ygRyZcq8.roa
Signing time: Wed 01 Jan 2025 15:47:54 +0000
ROA not before: Wed 01 Jan 2025 15:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24990
IP address blocks: 88.84.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:51:96:1c:8e:b8:53:af:39:ad:54:bf:3a:d5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Jan 1 15:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd0e6adb73cf1cefa646f4fea8bf32811c9972af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:d5:ea:76:4f:6f:67:fb:bf:18:22:dd:d1:
db:61:24:33:46:91:ad:aa:9d:86:b3:07:fa:a7:8b:
45:e2:3a:67:2d:05:1e:1a:b2:3f:d6:dd:71:5c:c3:
3e:d1:3f:43:f8:70:ad:80:65:08:d5:b2:57:af:ec:
9e:13:84:a9:20:d8:ce:4e:7f:1f:92:46:13:79:e5:
0b:db:6f:71:9b:36:ab:bb:ac:28:83:11:8f:5d:c2:
b9:db:59:b0:92:e5:cd:74:e7:9e:d3:3a:05:d5:6c:
1f:38:45:48:1a:68:84:7c:fa:eb:68:5f:6b:7d:4c:
60:b1:27:ca:ae:5b:ac:01:ba:e0:b0:e4:c4:36:ac:
d0:d2:4b:ad:b4:37:21:b5:9b:d7:4b:d6:61:69:06:
d4:69:96:f2:77:8a:2d:3e:bb:66:bb:bc:71:76:52:
e2:d5:ce:55:a6:b7:ef:99:81:87:d3:57:b2:ed:25:
9c:db:f1:58:72:5e:aa:81:c1:94:8b:ad:83:0a:99:
34:f4:a8:3d:de:11:57:fa:d3:42:19:5a:52:a4:08:
f0:40:6a:10:8d:69:7d:b1:b6:fd:fa:70:86:d6:b8:
95:4e:20:f8:eb:f3:2a:2c:14:9a:84:fe:d1:a8:5d:
15:08:d8:94:95:69:a2:bb:cd:b0:70:89:e1:4c:28:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0E:6A:DB:73:CF:1C:EF:A6:46:F4:FE:A8:BF:32:81:1C:99:72:AF
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/_Q5q23PPHO-mRvT-qL8ygRyZcq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.144.0/21
Signature Algorithm: sha256WithRSAEncryption
06:4f:01:e7:0a:3a:b9:6c:ca:a4:33:78:c0:1a:c5:82:a2:dc:
36:47:93:0d:56:68:c1:50:71:a6:72:4f:6b:75:d3:a3:be:25:
d9:b8:85:04:74:cb:61:55:00:c8:f6:2d:b7:87:da:44:e2:f2:
02:b7:7e:bd:09:3f:83:3d:28:5c:45:3b:dd:0e:6f:b4:ef:16:
ba:a9:c9:ab:cd:f8:38:eb:e0:2d:4d:62:d5:c9:bb:a0:ee:da:
a8:96:89:23:bb:e8:b3:ac:12:d1:fe:f6:20:cc:27:fa:78:8b:
d5:fb:7d:7a:7c:95:62:f5:ea:e3:d0:55:28:99:eb:bf:a7:f8:
8a:fe:b5:cb:3b:d0:36:df:29:50:52:de:7d:5b:c3:d7:27:88:
a9:57:df:8c:00:e9:42:5c:9a:07:0d:e5:6d:1a:33:3b:84:7b:
84:fb:c4:26:05:1e:a6:88:2b:55:d7:6e:73:61:65:be:b0:5d:
a5:ce:7e:78:85:ac:4b:5e:b7:5c:90:52:e2:ce:04:ed:71:c8:
8f:cf:14:b5:23:ec:42:4f:8b:16:cd:b3:92:bf:8d:d3:06:e0:
b8:25:99:76:93:ac:38:5d:df:c0:f9:1d:0b:6b:cf:78:14:b2:
9a:da:53:7d:5a:cc:b9:21:3e:aa:01:6e:47:f6:9c:bf:cd:90:
aa:d6:65:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:29 2025 by rpki-client