Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/h7jotg4RS-yoMxmLNwMHtqMIvTo.roa
File: h7jotg4RS-yoMxmLNwMHtqMIvTo.roa (raw, json)
Hash identifier: 0RvIPvSKfKKYiob3W8lnsFljStCAR/IAjli0EYtRtIQ=
Subject key identifier: 87:B8:E8:B6:0E:11:4B:EC:A8:33:19:8B:37:03:07:B6:A3:08:BD:3A
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 01942143F899C75B5F8131BBD8BE9B911D04
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/h7jotg4RS-yoMxmLNwMHtqMIvTo.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34416
IP address blocks: 188.214.26.0/24 maxlen: 24
188.215.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f8:99:c7:5b:5f:81:31:bb:d8:be:9b:91:1d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87b8e8b60e114beca833198b370307b6a308bd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:96:91:d6:c7:c7:ae:1f:a4:e3:7a:dc:b4:
50:0b:0a:72:bd:70:ab:06:2f:0c:c6:6e:dc:f6:3b:
85:a7:69:bd:53:2f:f2:02:e9:7a:0a:a8:f7:a1:0f:
14:f5:8e:a5:f0:23:d5:73:a2:b7:b1:be:e0:9d:3b:
d5:5a:70:2d:39:dd:c9:98:4a:48:c7:49:0b:48:19:
12:b1:48:1b:e3:57:12:ef:b9:a6:0b:f9:c6:b5:7c:
91:f0:c7:dc:59:42:75:8c:e5:3e:b6:5b:0b:52:65:
50:10:93:76:90:32:64:60:91:f1:3e:28:35:bd:5a:
6c:c0:de:60:c3:6d:13:95:15:fe:89:55:b7:58:ed:
7a:00:2a:bd:c3:db:cc:d3:c1:f0:e8:70:05:e3:9b:
b5:f6:60:3e:4e:32:fe:24:a4:92:49:6c:78:2d:d5:
88:51:93:ff:53:35:db:75:4a:d5:71:e3:04:5f:95:
98:ae:ef:f4:76:1e:98:20:ad:cb:63:01:a1:91:74:
87:15:02:98:06:9e:ef:63:27:06:a9:7d:9f:4a:eb:
5e:3c:3c:ec:17:03:57:f8:6d:19:52:b7:ef:fb:57:
b7:0f:3f:4b:08:c6:74:b8:9c:21:d1:59:f0:83:0a:
4c:40:c6:ea:12:ac:fe:2f:90:21:da:bb:b5:30:9d:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B8:E8:B6:0E:11:4B:EC:A8:33:19:8B:37:03:07:B6:A3:08:BD:3A
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/h7jotg4RS-yoMxmLNwMHtqMIvTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.26.0/24
188.215.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7c:66:98:7b:c8:0a:2b:ca:dd:9f:70:65:be:3c:ca:bb:09:
2e:a8:6c:f3:a9:d3:cf:ad:9d:db:0d:3f:cc:d4:91:20:06:0c:
f5:48:c2:1e:e6:d3:14:d5:b3:07:61:97:99:85:6b:82:49:37:
bc:23:5d:5f:4d:5c:54:99:37:b6:e8:a5:54:07:79:59:0e:0f:
e7:c6:1e:17:d6:43:f6:fb:38:ad:38:4d:7a:76:7a:08:63:3c:
e9:c5:59:f2:d7:7a:24:c4:4a:47:2d:81:95:12:86:ee:95:bd:
42:cf:29:af:3a:0c:80:c3:f1:ae:08:74:9b:be:dc:3a:1c:b8:
f0:11:8d:ce:54:cd:2a:3c:a7:5f:a0:eb:46:2e:a1:f0:60:70:
7f:d0:3f:11:88:12:c5:5e:5b:78:c6:e4:ae:32:0d:e6:81:03:
6a:c5:22:0e:4e:88:0a:0a:d9:99:f2:ef:2d:77:59:f0:cb:a5:
e3:2c:9f:82:70:73:30:a7:fd:5a:ae:cc:5b:10:63:f0:a5:ba:
0e:e3:bd:0f:96:1d:28:5f:e3:1b:1b:7b:6e:3b:56:c0:e8:f4:
02:3f:0c:c0:42:e4:da:11:48:02:56:02:06:bb:51:ea:9f:70:
24:d3:38:4b:b7:35:ef:83:af:5c:e3:58:a8:9e:a0:45:f7:77:
b4:be:2d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net