Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/dGedy0wsnBQ1oUWW869hemnPDw0.roa
File: dGedy0wsnBQ1oUWW869hemnPDw0.roa (raw, json)
Hash identifier: ku488GV502rwqvE42mRLyRCKhFwizbm4y59vrzUOLXA=
Subject key identifier: 74:67:9D:CB:4C:2C:9C:14:35:A1:45:96:F3:AF:61:7A:69:CF:0F:0D
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C280E4829C0BEE6AFC138D97D4FDE
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/dGedy0wsnBQ1oUWW869hemnPDw0.roa
Signing time: Thu 02 Jan 2025 09:50:09 +0000
ROA not before: Thu 02 Jan 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 188.244.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:28:0e:48:29:c0:be:e6:af:c1:38:d9:7d:4f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74679dcb4c2c9c1435a14596f3af617a69cf0f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:fd:bc:19:98:f7:ab:90:04:5f:6d:2e:69:
20:4b:92:61:f7:68:1e:19:63:22:af:4b:9e:18:14:
b5:c5:dd:1c:13:37:0e:9a:d1:a4:f7:2d:a7:9f:51:
d0:b1:e3:67:cc:36:a1:c5:19:6f:e3:4e:a0:fb:87:
95:d1:54:e8:bc:40:3d:b4:87:50:0c:41:b9:f9:5f:
32:b6:b4:67:ee:35:08:6e:e4:ea:ab:de:28:d7:76:
25:70:f0:81:3d:bd:91:66:9a:8e:a1:02:cf:a4:80:
70:a9:e9:26:a0:32:d8:70:29:2c:29:a8:4b:08:99:
5f:92:19:97:94:62:ef:4d:20:07:87:cf:73:f5:ea:
f1:f5:6b:8f:ef:73:7e:5f:73:91:51:ba:1c:f1:8d:
f0:61:96:b1:ba:24:46:aa:b7:4b:8f:d4:f5:d6:dd:
ee:51:74:5b:82:47:34:64:50:77:03:05:63:d7:da:
a7:dc:88:fb:3d:95:b7:cb:32:74:f4:d4:1f:04:1a:
10:97:80:a9:00:f4:c7:64:ad:26:12:ea:90:ba:22:
e3:27:34:16:41:89:d7:a5:5a:f8:ee:12:65:8c:e0:
2d:5b:1c:94:fd:09:d4:70:3d:f6:6f:3f:bf:dc:91:
ee:c0:49:2c:44:f9:94:6b:fe:39:11:56:c9:0a:e5:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:67:9D:CB:4C:2C:9C:14:35:A1:45:96:F3:AF:61:7A:69:CF:0F:0D
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/dGedy0wsnBQ1oUWW869hemnPDw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.113.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e8:70:61:9d:1b:10:f4:35:ee:72:76:81:bf:f3:09:d6:80:
63:13:01:ba:66:9a:e9:a1:29:b5:ca:de:5c:78:ac:cf:27:ee:
6a:a0:2c:7f:78:64:51:f6:f8:7c:8b:a0:68:a7:86:17:81:95:
a6:d5:cc:de:44:30:d4:89:8d:27:d1:43:f1:23:d2:02:bd:34:
c1:4a:f7:ef:61:56:5e:e6:65:e6:bc:5b:dd:8d:99:7d:3c:31:
de:73:63:67:38:fc:dd:fd:66:83:eb:39:c6:ef:89:8a:d3:27:
03:6d:64:6d:a7:9c:7e:14:83:58:e1:51:02:0c:3e:df:22:ab:
22:72:6f:7a:a2:9c:69:ec:8f:0c:7d:8f:55:91:8e:4f:64:6c:
fc:af:83:bc:c9:e3:bd:b1:07:83:7f:39:7d:c5:19:56:22:1a:
43:9c:30:b7:ed:12:0e:10:ed:a8:5d:bc:26:6d:09:cc:53:12:
39:05:0a:30:1c:33:2c:53:da:d0:ef:56:6f:5e:51:13:4d:91:
ff:23:e4:a7:8b:7e:c3:a7:8e:29:32:76:9e:a7:ea:96:d3:95:
9c:73:18:38:79:67:a9:a0:05:e7:6c:4c:db:b4:f5:97:c5:7e:
e0:a8:50:8d:1f:73:73:a7:30:fe:03:cd:dd:db:b0:34:91:da:
a9:1b:00:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:32:17 2025 by rpki-client