Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/OdavAlmZTVSUEn8DEUG0x7Aup4c.roa
File: OdavAlmZTVSUEn8DEUG0x7Aup4c.roa (raw, json)
Hash identifier: zvm6Bet4M7SswbKtgyqQXpZEDV7VAUhO/RsUj5lDxjA=
Subject key identifier: 39:D6:AF:02:59:99:4D:54:94:12:7F:03:11:41:B4:C7:B0:2E:A7:87
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 0194252122430A75F74C7F7CF87FC06B8EDB
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/OdavAlmZTVSUEn8DEUG0x7Aup4c.roa
Signing time: Thu 02 Jan 2025 03:48:35 +0000
ROA not before: Thu 02 Jan 2025 03:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202787
IP address blocks: 185.137.8.0/24 maxlen: 24
185.137.9.0/24 maxlen: 24
185.137.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:22:43:0a:75:f7:4c:7f:7c:f8:7f:c0:6b:8e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Jan 2 03:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39d6af0259994d5494127f031141b4c7b02ea787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:fb:3b:29:63:a0:6c:0e:1c:ed:05:89:df:
10:b9:ed:46:3d:8c:62:43:28:ee:32:5a:a9:09:db:
ee:36:f5:f4:9c:03:10:60:de:91:2b:ad:a5:d7:0e:
22:1e:8f:d5:27:1b:b8:ec:e9:ad:a1:d9:fe:47:36:
59:1d:4a:38:67:3e:7c:f7:80:80:fa:d7:46:e4:2b:
ae:65:02:de:84:d9:c5:45:ac:a3:e1:31:fe:aa:3b:
3b:6f:cb:3a:29:65:16:6a:0b:71:88:20:c9:0d:64:
14:34:1a:78:d0:d5:77:e5:53:de:dc:dc:0d:72:dd:
74:c0:f2:61:4e:3a:a6:5c:f3:bd:e8:0f:e5:d5:6f:
74:ae:98:85:be:17:e5:70:4f:cd:98:69:a7:4b:53:
d7:be:22:88:4c:8c:8e:3f:9d:f2:f6:de:b5:c7:45:
f7:78:d5:a3:1b:52:7f:c2:df:03:fe:2a:d1:ac:1f:
f5:4f:62:65:b4:23:f1:8f:fc:44:68:59:e8:cb:1c:
20:41:14:33:5e:78:37:90:9d:5d:e5:7d:db:35:74:
63:4c:14:6c:8a:b8:8b:dc:21:bd:62:13:01:ba:c3:
3c:52:73:ff:95:da:e7:50:6d:0e:8e:72:08:b3:3b:
da:35:3f:4e:fe:df:a8:08:04:05:24:fc:86:e8:a3:
58:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D6:AF:02:59:99:4D:54:94:12:7F:03:11:41:B4:C7:B0:2E:A7:87
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/OdavAlmZTVSUEn8DEUG0x7Aup4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.8.0-185.137.10.255
Signature Algorithm: sha256WithRSAEncryption
55:e7:3f:97:01:a6:be:45:80:4f:c1:87:d4:89:76:f1:be:d4:
33:96:6d:6a:8a:5b:ff:56:6b:2c:f5:6b:ac:b6:be:16:e0:c6:
17:8c:e7:b1:21:59:77:22:eb:e0:1d:04:41:c0:b2:e3:b0:f8:
b4:ca:a4:b8:ab:34:e8:2a:81:af:77:a0:26:35:4c:e0:8f:97:
e8:be:1c:54:93:12:1c:8b:ca:03:c4:b6:a9:24:23:3e:aa:3b:
09:46:67:6d:c5:03:1b:4b:32:32:80:b9:65:75:57:3c:1c:76:
e6:9a:17:23:0c:c8:76:8d:be:96:91:c0:25:70:1a:da:48:b2:
54:75:8f:c9:51:75:02:1d:d5:27:58:23:f8:53:d2:60:73:df:
f2:20:66:8f:ae:90:b7:81:b6:bf:3f:8a:c4:6a:1e:31:fd:91:
91:e2:a5:90:86:ce:33:10:47:ca:6d:6b:e1:10:dc:e6:91:e8:
34:aa:8c:b4:0b:f2:a6:a2:b7:36:cf:f9:b1:fa:25:7f:32:06:
74:9c:1b:ab:34:c8:ec:25:7e:2a:60:81:34:80:cd:21:5c:59:
6b:c6:ef:87:78:58:e0:b9:c7:05:06:3b:b5:41:e1:28:c0:56:
a5:fc:c2:89:3e:44:e1:15:56:16:b2:f6:fb:c7:36:9a:50:7a:
46:85:9f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:21 2025 by rpki-client