Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/0uDZt4JzU2yT9JPIPi-ih_EXwho.roa
File: 0uDZt4JzU2yT9JPIPi-ih_EXwho.roa (raw, json)
Hash identifier: AeXcXZE6Vwo8pzqxUDKIc+DtbYMB+vbXLk5SSXsOJXU=
Subject key identifier: D2:E0:D9:B7:82:73:53:6C:93:F4:93:C8:3E:2F:A2:87:F1:17:C2:1A
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 0188D7BA8535770CDF2B6BAEB4C63603046E
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/0uDZt4JzU2yT9JPIPi-ih_EXwho.roa
Signing time: Tue 20 Jun 2023 07:35:05 +0000
ROA not before: Tue 20 Jun 2023 07:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.218.19.0/24 maxlen: 24
88.218.18.0/24 maxlen: 24
193.228.168.0/24 maxlen: 24
193.228.169.0/24 maxlen: 24
193.228.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:ba:85:35:77:0c:df:2b:6b:ae:b4:c6:36:03:04:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jun 20 07:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2e0d9b78273536c93f493c83e2fa287f117c21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:66:a9:74:80:6c:91:dc:8a:82:e8:72:b1:
77:73:7d:63:4d:ea:14:d4:e6:aa:b9:50:27:be:3b:
bb:62:65:c8:27:ab:a3:8c:9c:ec:6c:c6:41:7f:ae:
22:54:8f:86:12:0c:44:69:2e:7e:aa:b9:30:f0:58:
55:7b:5b:0f:39:b8:91:ab:f7:f2:7e:59:5b:60:84:
6b:ab:77:87:d3:1e:fb:da:30:31:20:71:0d:de:06:
d4:48:19:29:9f:e5:2b:27:7c:8f:16:d4:71:f7:0f:
5a:f1:ca:9c:3f:02:94:b2:45:db:26:3f:d9:09:13:
36:d5:57:1f:73:4c:eb:1f:53:8b:09:9a:72:a3:4f:
c5:fd:14:da:79:19:16:77:5f:c9:f5:bb:23:1f:e4:
04:5a:b3:12:73:75:61:d4:85:13:75:4c:a0:c7:8e:
2b:b7:21:ed:48:a7:d5:33:bf:38:82:9e:05:8d:49:
26:5b:e0:a0:63:18:f7:f0:c5:0d:78:07:a1:7f:98:
4d:fb:b9:67:eb:2b:64:c2:7a:3e:cd:58:1c:1d:f8:
2d:49:3c:d3:d8:97:e2:a3:8d:6e:b1:70:2e:59:61:
62:cc:70:7c:5b:7e:9f:1d:ef:73:a6:7d:21:30:22:
af:1a:26:1e:f2:b9:16:7e:af:2c:13:fb:a5:2d:5a:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E0:D9:B7:82:73:53:6C:93:F4:93:C8:3E:2F:A2:87:F1:17:C2:1A
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/0uDZt4JzU2yT9JPIPi-ih_EXwho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.18.0/23
193.228.90.0/24
193.228.168.0/23
Signature Algorithm: sha256WithRSAEncryption
44:8f:ba:e9:f0:67:15:19:4a:ac:3b:2b:da:65:7c:bb:ec:b5:
72:24:22:86:46:53:f6:0c:f1:45:e3:15:4c:23:0f:e6:01:c8:
1b:3a:dc:03:7c:d6:b2:8a:ed:f3:d6:e5:79:98:af:3d:b1:0c:
9c:ba:17:c1:36:d9:f9:23:77:54:04:b0:67:3d:d4:91:ca:c1:
eb:3f:80:c5:e2:94:eb:55:b6:78:2a:fd:0f:9d:78:48:35:7c:
d8:49:66:1e:10:bc:a8:1f:e6:43:29:9e:8d:d4:ec:95:ca:90:
94:8b:1d:91:e5:c0:bc:dc:d1:96:bb:54:3b:5b:e5:30:3e:32:
e4:c1:57:85:12:af:56:60:ed:cf:2a:28:c3:e8:d6:4a:b9:cf:
7b:b7:a4:f3:e7:4d:57:66:7f:44:b1:ac:ae:45:5f:f1:63:9b:
21:42:b1:c7:28:ff:d4:cc:5c:c5:7b:b6:f0:8e:0f:99:28:6c:
26:cd:1a:31:48:cf:c7:a2:a6:32:df:88:ac:ea:0c:fe:4a:de:
11:c9:0a:c2:50:2f:dd:e5:06:33:28:62:7c:fd:7e:85:b9:f3:
97:d6:e2:82:19:ae:9f:e4:cd:b4:35:ec:9b:b4:7d:90:ad:34:
f1:ab:64:17:52:ed:2f:82:9b:c4:ac:ca:5d:83:96:de:0e:5c:
f5:f3:11:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:47:57 2025 by rpki-client