Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Ig4Dk6CI_DeU9EN8C2E4cODArpY.roa
File: Ig4Dk6CI_DeU9EN8C2E4cODArpY.roa (raw, json)
Hash identifier: ABrOM7GbWlix43A/ifiklh84uBmGi8JDOCuibDEz/tI=
Subject key identifier: 22:0E:03:93:A0:88:FC:37:94:F4:43:7C:0B:61:38:70:E0:C0:AE:96
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB9154E8757ACC696A24EDD9EA4753
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Ig4Dk6CI_DeU9EN8C2E4cODArpY.roa
Signing time: Wed 01 Jan 2025 17:48:19 +0000
ROA not before: Wed 01 Jan 2025 17:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 88.209.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:91:54:e8:75:7a:cc:69:6a:24:ed:d9:ea:47:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=220e0393a088fc3794f4437c0b613870e0c0ae96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:4e:89:60:94:7b:55:b1:39:e0:5a:f2:c4:
52:5d:9e:e4:a3:15:9d:2b:5a:ae:6c:42:64:3c:74:
b7:34:c3:e7:4c:29:c4:f2:f5:fd:0a:33:6c:4b:7c:
5f:e2:eb:41:00:6e:99:1c:cf:cd:f7:ae:99:bc:82:
6c:7e:c7:fc:24:df:c5:ae:f6:0c:31:06:30:8d:fa:
5b:9c:bd:45:32:8d:9c:68:ab:7c:f5:d0:6d:51:9c:
a2:1a:01:00:01:94:64:88:93:d2:d5:7b:5b:b9:27:
ac:c6:b5:71:04:b1:9c:98:99:db:22:7f:d0:9e:c1:
fe:87:f2:f2:45:da:a6:27:45:81:3f:91:e2:9c:e5:
17:3d:b0:eb:aa:3c:ba:e2:4c:c1:f3:ca:f6:c5:0a:
07:05:46:0d:cb:24:14:50:72:a3:b7:df:31:42:83:
d0:6c:4f:a0:e3:d0:50:45:7f:2b:0b:60:7e:d1:ec:
e0:31:f4:5d:a1:4b:b5:50:66:62:6b:40:c6:43:86:
d8:4f:2c:98:6b:c6:b9:f7:6d:c9:e2:a8:2c:94:dc:
2f:77:3c:76:85:4e:b0:51:a7:d9:e7:c1:8c:b0:0c:
7f:36:e0:fc:c9:7c:7b:d3:ad:ec:a8:7d:f8:0e:d1:
0d:88:1e:1c:bf:dd:60:cf:01:f7:24:75:95:96:17:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0E:03:93:A0:88:FC:37:94:F4:43:7C:0B:61:38:70:E0:C0:AE:96
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Ig4Dk6CI_DeU9EN8C2E4cODArpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.240.0/22
Signature Algorithm: sha256WithRSAEncryption
82:d0:47:59:71:16:57:53:cb:59:80:fd:b5:a0:b4:29:33:9a:
d5:f2:36:23:5a:db:13:4b:a5:e9:e7:04:7e:f8:6b:54:e8:d3:
d8:a5:53:d0:db:9c:f8:9a:f5:d7:e6:aa:62:d2:0c:5c:06:00:
29:11:1d:1c:77:f5:db:d3:b4:28:72:e4:88:d3:c6:2b:68:d5:
a0:8c:21:cf:5c:58:2f:76:c4:b3:5a:95:25:17:cf:53:df:1c:
89:81:01:a0:37:f3:59:9d:a5:2c:f7:d5:26:55:df:e8:cb:03:
7c:94:99:4a:a1:b6:ca:e8:6b:0b:71:d1:e3:e0:f0:73:21:fe:
dc:bb:6b:25:9a:bb:68:45:98:31:3f:99:13:51:03:74:f7:ca:
2a:5a:81:59:73:54:6a:cd:5e:9f:aa:4d:62:6e:8e:d9:83:f5:
fa:ba:38:a6:21:6d:97:a2:2c:c9:cd:bf:bb:c1:d6:b9:34:7b:
6b:af:7d:e8:9d:6f:4d:11:a1:dc:8a:e8:8a:07:35:44:b4:a6:
9f:ae:36:ee:34:e0:c2:de:1c:fb:79:b8:ee:82:db:98:f3:23:
3f:c0:66:45:98:df:3b:bd:95:e7:41:7c:8f:24:1c:89:2d:ee:
48:a2:58:1e:62:f8:b6:6f:c9:61:13:c0:e5:78:8b:1d:5f:2b:
a6:64:ad:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:04 2025 by rpki-client