Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa
File: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (raw, json)
Hash identifier: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=
Subject key identifier: 27:B1:13:C1:9E:CA:D9:F0:A0:C9:5D:57:69:7E:80:BB:F5:2D:3A:94
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 019424457C0709DFE04AC7D700100973DF88
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa
Signing time: Wed 01 Jan 2025 23:48:41 +0000
ROA not before: Wed 01 Jan 2025 23:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209582
IP address blocks: 188.190.108.0/22 maxlen: 22
2a0d:d1c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7c:07:09:df:e0:4a:c7:d7:00:10:09:73:df:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Jan 1 23:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27b113c19ecad9f0a0c95d57697e80bbf52d3a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6c:6c:6e:34:67:8f:15:99:97:19:6d:21:f0:
29:c8:9a:ae:08:f8:f5:8e:a6:be:e8:58:ec:d3:64:
44:59:ed:f9:52:0e:92:fc:cb:77:63:d6:87:c3:96:
7e:0b:76:71:35:50:c3:8c:b0:43:bb:6e:09:71:ff:
dc:13:b3:22:04:8a:83:87:74:96:b2:29:7e:61:e8:
6e:ff:e0:1b:1f:d2:b9:63:2d:18:7f:60:aa:1b:4d:
e7:ba:81:20:af:ab:87:0d:7a:e8:a3:0e:5e:8a:13:
56:bf:65:d7:62:0b:08:d0:42:f6:89:bc:ef:bb:f7:
bc:a8:8b:4d:df:66:97:53:48:06:c5:69:60:cc:6b:
14:ff:d5:90:c5:9f:0e:ce:e3:d1:93:7b:e4:68:b5:
ad:7c:d1:e6:9d:6d:aa:8f:3b:fb:04:e4:a0:af:91:
84:ee:67:be:47:ee:77:bf:fb:b6:e2:90:d4:67:fb:
6f:9d:2b:e9:9b:45:70:be:5e:a8:b2:65:e7:0f:d8:
2e:cd:fe:0f:26:e2:0e:85:3d:23:89:70:85:4b:b4:
3e:fc:09:f8:9c:65:7c:c7:65:1a:aa:d9:73:63:07:
75:c3:62:62:fe:74:ee:59:74:fc:0a:8e:32:9d:ba:
75:a1:c9:4c:0b:f5:08:aa:43:c2:cc:c1:4c:bc:38:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B1:13:C1:9E:CA:D9:F0:A0:C9:5D:57:69:7E:80:BB:F5:2D:3A:94
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.108.0/22
IPv6:
2a0d:d1c0::/32
Signature Algorithm: sha256WithRSAEncryption
a9:35:5c:6d:9f:2d:86:33:c8:d6:f5:3e:54:16:ca:98:0d:48:
f4:9f:5c:5a:1a:8e:b3:0d:83:3f:c2:75:b9:c8:cb:56:c2:26:
07:04:4c:0b:f5:fb:96:ee:ae:a2:53:99:b5:87:fe:09:e8:60:
64:b7:ec:c0:d4:e4:ee:10:df:f1:40:99:32:9a:e5:9f:e8:f1:
5a:eb:4c:d4:2c:f4:8d:3e:6c:c4:6c:e4:8a:e8:84:b8:7d:74:
00:6b:e5:3b:7d:00:6a:6e:92:32:d1:04:65:c2:b1:5d:08:b8:
5a:97:49:07:f5:89:31:e6:52:e5:41:73:07:c4:d3:47:a6:59:
95:38:d3:82:22:77:4f:a2:81:b6:3e:df:f8:57:2f:6a:85:3a:
d0:5b:00:25:cc:79:96:24:5e:73:35:39:d0:30:a4:5d:94:38:
72:85:56:3d:ca:99:37:23:3b:62:bf:e6:95:7b:cc:d6:26:4e:
74:f1:52:6a:fe:e4:db:8c:fe:14:6b:26:b4:01:f0:d4:d5:c8:
1a:10:61:9b:fe:9e:dc:96:fe:de:a7:f5:00:dc:49:3d:23:4e:
a3:70:7b:e9:0d:1f:c8:c5:56:6e:1a:62:e9:54:ba:44:2b:7b:
8b:58:f8:3a:75:6d:d7:03:28:e4:98:df:b6:b7:d7:a7:d0:66:
ba:30:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:43 2025 by rpki-client