Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/abKcOp3qmm4ybUnw1tBA-G8yOrc.roa
File: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (raw, json)
Hash identifier: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=
Subject key identifier: 69:B2:9C:3A:9D:EA:9A:6E:32:6D:49:F0:D6:D0:40:F8:6F:32:3A:B7
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 019423D6FADC793F7FB74C919F2D5E242FDB
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/abKcOp3qmm4ybUnw1tBA-G8yOrc.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35393
IP address blocks: 185.88.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fa:dc:79:3f:7f:b7:4c:91:9f:2d:5e:24:2f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69b29c3a9dea9a6e326d49f0d6d040f86f323ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:c9:31:ea:0d:fb:81:ce:3f:e3:f8:03:f6:
d3:bc:b1:01:e9:a1:0a:42:5b:c2:24:4f:fb:b2:f6:
95:cc:e6:14:6c:85:7f:d0:61:30:53:c1:5a:13:00:
f8:a8:f4:9d:4f:a4:3b:13:77:6e:5e:80:56:d7:ca:
f3:a6:4c:dc:96:bc:10:ad:4d:bc:98:e1:d1:2a:40:
b9:59:93:e7:60:d6:c3:d1:67:c7:a9:c9:2f:d6:87:
e0:7b:5b:d3:59:6c:2b:0b:fc:16:fc:f1:fd:26:9e:
73:b3:4f:41:48:e9:34:40:71:71:47:78:a7:3c:a0:
a1:af:7e:fc:1b:f7:7c:66:d7:c7:55:0c:54:7f:39:
77:c5:d3:2f:5a:c6:00:b3:4e:33:1e:1d:23:18:1d:
4e:70:ab:b2:fc:cf:02:c9:6b:bc:2a:6c:cb:2d:1d:
31:1f:19:aa:73:fb:eb:c1:01:87:b1:0d:5b:56:38:
94:44:4c:1d:1d:4f:d3:d6:b2:f0:52:62:1c:88:15:
fd:3b:3b:4b:82:08:e8:88:94:aa:10:9f:d5:cd:2e:
ee:be:a7:5a:c3:a1:11:01:e5:41:bc:af:ca:eb:05:
a5:46:11:6e:fc:53:12:45:b6:a2:c7:bd:92:64:2e:
ed:2d:53:1d:cd:56:be:1b:e9:99:97:7a:96:78:d2:
fb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B2:9C:3A:9D:EA:9A:6E:32:6D:49:F0:D6:D0:40:F8:6F:32:3A:B7
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/abKcOp3qmm4ybUnw1tBA-G8yOrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.68.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:bb:b2:a1:27:2e:15:f9:98:27:a1:67:12:0d:fa:c2:24:34:
5c:13:26:3a:e4:6c:41:06:4d:2e:c2:fb:10:53:a9:d2:6b:c2:
69:d4:9c:d3:6d:af:83:77:a4:f9:77:15:77:f6:68:c8:05:1e:
4f:cb:4e:ad:38:7f:04:2a:20:54:b0:cf:ad:2b:61:ad:98:99:
57:72:60:61:06:dc:f2:4e:ff:56:a5:c4:a9:af:31:5a:e0:b5:
ab:17:a1:9c:fc:c1:c8:ad:7f:95:42:8a:0f:1f:1c:d0:2b:5e:
7b:4a:27:71:28:9b:82:26:9a:d6:34:dd:d2:6f:b3:1c:0e:4e:
9c:97:a6:f8:a7:db:34:e3:db:88:2f:59:97:21:11:66:2a:07:
a6:98:be:a3:fd:2f:a8:7e:2c:13:b3:a1:27:8d:74:77:d0:d7:
fa:82:53:7a:c0:c1:76:eb:48:59:c6:73:81:09:af:47:1c:7c:
e1:be:12:08:98:17:aa:c9:e2:8f:1e:4f:1b:34:fa:c2:cc:ee:
8a:6f:42:07:e0:db:6c:77:46:93:84:1b:e5:af:ec:e0:e8:24:
e9:57:3f:1a:ef:56:5f:f4:15:fb:56:04:39:20:24:04:bd:51:
3a:ac:0e:c3:1b:c0:1a:04:1d:1f:90:ac:3e:0d:24:42:3b:33:
e0:93:a3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net