Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa
File: u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa (raw, json)
Hash identifier: KYGcbVwlMJi9uEEQnPMzkMYGof5+7MNCgFq2TVdNdS8=
Subject key identifier: BB:C5:7D:40:A0:55:1B:46:3C:EB:EB:E3:CE:3C:93:8A:CC:34:0F:F6
Certificate issuer: /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Certificate serial: 0194266C0055ABDB343E9DD68CA5C186F6A5
Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa
Signing time: Thu 02 Jan 2025 09:49:59 +0000
ROA not before: Thu 02 Jan 2025 09:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198004
IP address blocks: 88.135.180.0/22 maxlen: 24
91.233.156.0/22 maxlen: 22
91.233.160.0/23 maxlen: 23
176.103.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:00:55:ab:db:34:3e:9d:d6:8c:a5:c1:86:f6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Validity
Not Before: Jan 2 09:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbc57d40a0551b463cebebe3ce3c938acc340ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:99:62:e4:a3:b4:e7:a3:6c:e7:ed:0c:0a:
0f:58:dd:27:92:76:85:1c:23:61:ab:9b:b3:13:6c:
18:51:13:a1:8b:10:3f:b8:cb:e8:7d:25:ce:e8:ef:
fa:89:4b:b3:bf:10:82:00:56:cc:16:b7:5d:09:ee:
9a:5b:d4:1d:af:1f:c2:ea:9f:a5:19:25:40:28:c3:
77:cf:f2:b0:ba:6f:44:8b:6a:2f:c2:b4:63:03:68:
ab:61:40:22:f6:0e:ef:ee:bf:2f:fb:d8:bb:a7:8a:
1e:e2:e8:96:98:20:c2:9c:f6:24:3c:3a:43:7e:a9:
6e:c7:76:8e:fc:8d:d0:da:bb:13:75:d3:8d:6a:ad:
ec:7e:96:47:cc:0a:99:3b:a0:97:61:f2:cf:7c:9a:
60:46:68:ef:ab:11:4c:07:25:60:e7:60:de:40:7e:
3d:76:3c:7c:b0:ae:a0:a9:41:01:4d:bf:72:b4:30:
8a:07:f8:a6:0c:68:55:d9:15:97:02:ae:49:ab:26:
7d:de:39:4b:62:48:c1:e0:ce:94:2b:b7:ab:0c:11:
89:af:1c:b4:c9:32:36:42:8d:81:a5:7f:f2:d4:7d:
46:dd:e3:25:51:86:6b:05:2d:54:fb:ce:ee:bf:69:
2d:a1:20:e1:99:de:56:c8:71:77:e7:18:83:f0:1c:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C5:7D:40:A0:55:1B:46:3C:EB:EB:E3:CE:3C:93:8A:CC:34:0F:F6
X509v3 Authority Key Identifier:
keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.180.0/22
91.233.156.0-91.233.161.255
176.103.72.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:37:a5:80:c1:24:92:49:58:8b:48:0e:20:f8:35:63:32:86:
38:8b:b2:53:9c:78:6a:b8:f7:4d:a0:d4:61:52:5b:f0:9c:4d:
28:63:aa:87:31:17:e3:60:c4:09:93:7a:7f:5f:61:78:59:97:
e3:fe:58:2d:84:2c:9a:9f:aa:d0:04:57:38:4e:d3:83:01:fc:
6a:e5:c5:0b:82:7b:60:c2:cc:ec:03:3d:4a:77:6b:70:4a:db:
27:82:4e:45:a2:83:b5:aa:41:ba:1f:91:2d:94:8a:c0:8b:56:
f7:ac:19:c6:52:3a:a2:d8:8e:ac:1f:38:2d:bc:57:3b:b5:be:
6b:eb:be:a5:dd:2a:18:6a:db:4e:e4:a8:16:1e:a9:44:50:1b:
e7:74:d3:f3:53:e2:e8:49:fb:ba:7f:bc:7b:f6:5c:ea:12:ef:
66:0f:15:72:30:be:dd:97:0e:6f:22:27:31:5a:cd:d7:ab:bb:
cf:39:94:7f:10:b4:2a:e5:5e:e1:4c:b1:90:33:66:1b:39:14:
dc:67:8e:2f:c6:06:ed:46:ba:31:8b:40:e9:a6:c3:f6:bd:53:
55:6e:59:34:bc:e6:7a:6f:54:5e:20:21:ca:e5:f9:e6:af:26:
18:48:8b:d0:8a:56:ed:13:58:7d:c1:e2:05:b3:4a:86:a9:37:
4c:dc:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:45:57 2025 by rpki-client