Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/sM82qzCPVj5hb7695nLLRIx2w2w.roa
File: sM82qzCPVj5hb7695nLLRIx2w2w.roa (raw, json)
Hash identifier: LLqSV4eV0sz5JUs8xwoJVDhlbmohXpXS473xmtthHiY=
Subject key identifier: B0:CF:36:AB:30:8F:56:3E:61:6F:BE:BD:E6:72:CB:44:8C:76:C3:6C
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 05EBA680
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/sM82qzCPVj5hb7695nLLRIx2w2w.roa
Signing time: Sat 01 Jan 2022 11:05:17 +0000
ROA not before: Sat 01 Jan 2022 11:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50673
IP address blocks: 88.218.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99329664 (0x5eba680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jan 1 11:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0cf36ab308f563e616fbebde672cb448c76c36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:b7:b3:fd:6c:7a:4e:a7:24:6b:71:61:95:
e4:2e:53:ec:e4:61:a7:d4:39:e7:dc:97:ee:38:71:
23:a5:f6:9e:fe:06:f9:e7:67:47:52:26:7f:0f:e2:
ef:fd:06:0d:eb:27:cc:7d:48:e2:5b:a2:ca:e7:38:
d8:01:4c:4a:cc:36:6c:1b:c4:6c:28:fb:15:d4:5d:
bf:3c:b2:6d:a3:4f:56:69:fb:6a:11:32:4a:22:18:
a5:f0:14:7a:a6:52:e5:58:9d:d3:6c:e4:26:c3:55:
74:f4:e2:2f:56:e2:cf:22:87:6b:00:71:ee:ef:65:
f7:bb:e0:23:cf:dd:b0:21:90:68:2a:f7:2b:d1:1d:
82:d6:9c:e3:bc:48:09:ba:37:4b:9e:8a:4a:33:b6:
1f:22:18:cb:ff:a6:a1:4b:dc:ff:a9:da:84:a9:f8:
32:8a:35:60:f4:e3:76:3b:f4:35:59:92:65:2d:07:
80:7c:02:43:40:c2:cb:39:96:47:00:68:cd:bd:70:
59:d7:01:90:5e:b5:56:94:44:c8:fb:18:8c:9f:ec:
0c:55:d5:99:c6:53:12:ab:17:ef:ca:42:d7:2c:40:
11:ea:d0:87:f1:30:4b:4d:e2:18:d5:01:99:28:88:
57:5c:c7:83:55:5c:08:79:a2:d7:ea:48:80:f0:2a:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CF:36:AB:30:8F:56:3E:61:6F:BE:BD:E6:72:CB:44:8C:76:C3:6C
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/sM82qzCPVj5hb7695nLLRIx2w2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.17.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3c:e9:1f:56:af:32:91:13:fc:10:c7:5a:f2:2e:ee:1e:d1:
9f:e8:cf:ea:3e:98:49:31:77:77:bc:dc:29:e6:c9:d1:f1:66:
f6:5f:ab:a0:bc:65:70:47:36:9e:7e:28:68:a9:d7:42:4d:68:
7d:90:79:32:a7:38:ba:f2:80:2c:28:3d:f0:d3:f7:6c:7b:55:
01:2a:f2:fb:3a:45:07:a6:ea:27:28:32:fc:65:1e:be:15:7f:
0e:a5:69:da:04:38:0a:c8:b7:57:85:7a:c7:a9:23:c6:4b:c8:
57:46:3f:81:60:fe:43:e7:e2:2d:d0:c4:f4:b5:2d:a3:93:5c:
0b:b0:ea:7e:9f:18:65:39:74:3c:21:2c:cb:c9:b3:ff:ba:1a:
dd:81:b0:d9:90:a3:7a:28:82:21:78:53:03:b1:ba:bf:e4:19:
17:e5:19:39:e5:66:23:8a:92:26:e1:e2:09:b5:54:6e:bc:c8:
52:1c:d2:9d:f4:c6:a6:43:b2:71:aa:c5:32:9d:48:f7:21:fa:
69:0c:3e:62:2c:4c:eb:f4:aa:d9:7f:d2:b5:e2:e2:c0:d8:d3:
5a:be:70:b9:73:7e:57:65:b3:12:69:56:ed:cc:ef:c2:0b:a4:
5f:f8:dc:be:fc:96:54:1a:20:81:f9:9e:93:e6:10:8f:ba:7f:
76:92:07:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:40 2025 by rpki-client