Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/037mC5G3SOOdwjwSDpe7nQjJxIo.roa
File: 037mC5G3SOOdwjwSDpe7nQjJxIo.roa (raw, json)
Hash identifier: h5N1CC/Z2TrjTdPNvC7HoIaOclTl7MfZnME/p0x5mu8=
Subject key identifier: D3:7E:E6:0B:91:B7:48:E3:9D:C2:3C:12:0E:97:BB:9D:08:C9:C4:8A
Certificate issuer: /CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
Certificate serial: 04CCB702
Authority key identifier: 19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/037mC5G3SOOdwjwSDpe7nQjJxIo.roa
Signing time: Sat 01 Jan 2022 16:02:27 +0000
ROA not before: Sat 01 Jan 2022 16:02:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43350
IP address blocks: 88.214.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80525058 (0x4ccb702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
Validity
Not Before: Jan 1 16:02:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d37ee60b91b748e39dc23c120e97bb9d08c9c48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:10:b8:12:9f:50:1f:53:6a:6c:cd:05:91:6c:
b5:ce:ff:10:1b:8a:3d:b5:41:17:b4:0f:23:84:2e:
a0:39:26:30:8e:9b:c4:e1:0c:95:ba:c7:d2:bb:7c:
2f:6a:f8:e4:0d:06:00:f0:b0:27:3f:fa:1d:6c:4a:
cb:9c:36:01:a9:84:4f:29:32:8c:8b:39:cf:83:ca:
88:2c:17:e5:71:e1:cc:c5:bb:a1:81:85:31:20:8f:
6a:83:e2:48:e0:d6:ba:8a:b8:06:f9:8a:6d:3e:93:
c8:d8:70:b6:03:49:6f:cb:7a:62:84:53:ba:9f:d4:
03:a7:90:c2:7a:2e:1f:7f:71:ba:36:39:ea:b3:cb:
97:f1:1f:7c:10:d5:50:d6:18:d1:19:f3:f8:17:3f:
56:d8:5c:9b:be:ac:70:98:e1:06:e8:e5:60:e9:18:
80:dd:03:00:9c:b2:8c:e5:c7:18:09:80:91:e9:97:
2d:41:88:56:39:f2:35:c6:ac:da:0a:a7:d1:17:8c:
36:87:07:76:70:21:0d:74:82:7b:c8:66:48:39:ad:
fe:36:95:d3:d7:eb:15:f1:bf:02:d5:6e:05:28:fa:
cb:8f:43:d8:63:f6:e5:94:9e:cf:ae:c4:4f:df:fd:
51:20:14:12:43:89:d9:c6:bf:9b:c5:ae:b4:45:5d:
8d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7E:E6:0B:91:B7:48:E3:9D:C2:3C:12:0E:97:BB:9D:08:C9:C4:8A
X509v3 Authority Key Identifier:
keyid:19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/037mC5G3SOOdwjwSDpe7nQjJxIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/GRk7bk0L6JA155k5tQAvxcFsm8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.24.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:3a:55:c6:da:8b:a1:bf:eb:30:38:65:71:f6:f7:49:76:c0:
94:31:9d:4c:21:a7:ab:20:77:be:d8:e0:0a:a0:9b:35:d5:52:
4c:0c:33:57:49:79:ec:d9:d6:09:1f:6e:c1:fc:d0:3b:56:6c:
d7:40:98:ef:f2:b5:56:75:a7:11:01:91:b7:ab:b8:7b:40:02:
86:0c:05:83:58:b2:7c:3b:c3:07:0f:76:9c:9e:2d:66:65:ad:
5d:00:6d:13:54:ec:f7:c6:c0:80:24:fc:1c:b1:a8:c7:a4:13:
53:be:be:d8:96:c8:ad:01:35:af:f5:c0:a4:41:e1:47:f7:b4:
1e:aa:e0:74:a2:e3:fc:5e:e2:44:a8:f6:db:65:f7:a0:d1:a9:
b4:7e:e4:71:88:a1:b8:6a:c2:28:37:9b:d6:b2:60:4a:c7:71:
7d:fb:ca:38:ff:8d:eb:a6:ed:fd:6f:eb:a9:ff:af:cf:a0:09:
b9:99:c2:a6:24:94:1d:ef:c5:2f:de:60:4e:eb:75:1f:ac:99:
75:c1:df:9f:a8:7e:de:18:df:a8:10:e5:92:d6:f4:ea:db:10:
69:85:29:12:bb:6e:99:18:74:d6:4a:04:f2:2a:c7:df:2a:a7:
e6:22:22:e3:e6:0d:d9:48:05:17:ac:8d:ac:19:fa:a6:12:77:
e9:e7:90:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:40 2025 by rpki-client