Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/A09bEJooJTcvK0ZiSfYXHxkaLVc.roa
File: A09bEJooJTcvK0ZiSfYXHxkaLVc.roa (raw, json)
Hash identifier: RyGqaInMe6qa8vL6M4ba5gm5+3s+cE1rhQwi6RrY5Vo=
Subject key identifier: 03:4F:5B:10:9A:28:25:37:2F:2B:46:62:49:F6:17:1F:19:1A:2D:57
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB97DAB1F22FB0B3710A81C1CCFFF5
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/A09bEJooJTcvK0ZiSfYXHxkaLVc.roa
Signing time: Wed 01 Jan 2025 17:48:21 +0000
ROA not before: Wed 01 Jan 2025 17:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48011
IP address blocks: 88.209.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:97:da:b1:f2:2f:b0:b3:71:0a:81:c1:cc:ff:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=034f5b109a2825372f2b466249f6171f191a2d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2b:93:e6:77:bf:11:aa:88:a7:fe:ee:fb:37:
b3:d2:bf:64:58:9e:8a:2f:82:ac:22:44:aa:b3:75:
cc:c9:79:4f:a5:20:46:1c:ea:79:51:23:13:ea:21:
12:22:92:00:49:79:d1:37:ae:1d:fe:b3:f3:7f:ac:
1b:d8:8f:81:79:36:6b:60:c6:7f:03:41:6e:ca:be:
27:64:01:09:51:53:ca:b7:56:07:e1:89:e5:cb:be:
e5:b2:40:9e:60:dd:46:3b:0c:f0:6c:d2:40:d3:a8:
35:82:2e:da:f0:34:99:f4:7e:fd:29:bc:37:9a:0e:
76:44:59:7a:c9:53:82:58:1b:69:43:7f:82:ea:48:
75:c2:73:38:45:9f:6a:0e:98:e0:91:4b:ab:5a:68:
5f:45:fd:32:ff:a1:1f:7e:b3:10:f8:6f:80:34:00:
bc:6a:9e:f6:95:bd:d9:bc:23:d6:8a:87:8a:9a:86:
71:f1:52:b1:50:32:6e:bd:4f:ce:44:15:c8:9b:e5:
df:ec:d3:93:4d:62:4c:bb:62:55:f3:d2:99:c2:06:
ff:f7:f9:6c:5b:1b:2c:48:7b:e8:4d:00:2c:b1:79:
1e:4c:a4:ee:04:69:1d:86:05:ae:f6:44:9e:45:e3:
8b:33:9a:e2:17:df:f6:f1:9c:0e:8c:14:7d:9b:8c:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4F:5B:10:9A:28:25:37:2F:2B:46:62:49:F6:17:1F:19:1A:2D:57
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/A09bEJooJTcvK0ZiSfYXHxkaLVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.249.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:89:dc:52:86:c2:13:be:bd:d9:c7:2c:cc:a0:93:6d:de:27:
3d:1e:40:70:49:1d:a2:c0:70:58:24:e5:3d:c7:cc:11:4d:f0:
e8:ac:75:c6:01:78:0d:53:b0:c9:5c:2a:d0:44:48:4f:88:ec:
65:07:00:ea:39:51:49:45:0b:e8:e9:91:07:06:93:5d:fa:02:
00:cd:84:d1:88:0a:ef:af:24:eb:47:c1:c1:56:3c:3f:b1:67:
d6:0b:70:72:fc:70:2f:6c:86:9f:9a:15:50:08:69:5c:01:b2:
7a:ad:ff:a0:73:bd:38:0c:83:0b:51:4a:b8:d4:af:1e:4a:db:
d9:70:aa:29:2d:f9:6f:fb:18:42:6d:da:6f:9f:5d:3d:cb:6a:
38:cd:69:f6:fc:fe:fd:04:95:27:92:e2:47:70:c6:87:ae:26:
69:ef:fb:e5:05:54:08:35:64:1c:9d:d9:69:7f:ee:81:13:91:
8f:84:60:44:0f:a2:af:74:b2:d3:20:be:8d:12:61:f3:28:fe:
67:58:72:ff:6b:11:84:5e:11:f6:83:87:53:55:fa:ba:3c:bd:
c9:57:a2:a0:00:dc:9b:15:84:a0:e7:1c:3c:b5:72:e3:7d:5a:
46:33:e5:71:f9:ae:e5:a5:2c:1e:c2:ad:ec:f0:a2:99:a8:09:
90:13:80:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:59 2025 by rpki-client