Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/EkCojZ5Z9q8AwP_sD_M0MKQtaRc.roa
File: EkCojZ5Z9q8AwP_sD_M0MKQtaRc.roa (raw, json)
Hash identifier: Rxu1NQBikewZYm/94OaGVuDxUWM1s1xBdY8hPnlfCUA=
Subject key identifier: 12:40:A8:8D:9E:59:F6:AF:00:C0:FF:EC:0F:F3:34:30:A4:2D:69:17
Certificate issuer: /CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
Certificate serial: 04CCC02D
Authority key identifier: 19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/EkCojZ5Z9q8AwP_sD_M0MKQtaRc.roa
Signing time: Sat 01 Jan 2022 16:02:28 +0000
ROA not before: Sat 01 Jan 2022 16:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201912
IP address blocks: 88.214.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80527405 (0x4ccc02d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
Validity
Not Before: Jan 1 16:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1240a88d9e59f6af00c0ffec0ff33430a42d6917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:80:68:22:47:8d:e1:db:4e:54:58:2f:e4:
38:f6:70:f7:1c:c4:b6:27:8b:d8:05:6a:cf:ba:7d:
26:c0:a6:71:bc:84:9f:cc:d3:64:2d:08:73:63:6c:
c8:da:ec:43:8d:79:fb:e7:20:e5:5b:4e:aa:5c:5f:
80:e6:ba:4b:dd:7d:8b:de:0c:10:39:9b:9b:0a:da:
77:80:a1:98:e9:7f:78:b5:b0:f5:83:c5:9e:a3:0c:
ca:7d:aa:45:0b:b2:5d:ba:77:5e:b1:ae:79:3b:09:
68:92:72:ba:4e:bb:f4:1b:09:61:8d:98:b2:f5:9b:
d2:84:b3:d8:c2:a0:04:5b:c6:a6:2d:5d:28:2e:ed:
af:5f:be:fe:c7:94:ac:8c:d4:42:0c:35:f4:db:c4:
69:6b:b1:3e:e5:88:6b:10:0f:4d:cf:3f:15:40:24:
5b:0f:30:b0:56:da:2c:33:dc:9f:28:85:4d:72:21:
56:ce:24:4f:21:7f:83:2e:95:cd:bc:4d:6e:23:55:
b0:26:e3:8c:cc:23:a7:72:67:a6:2f:b8:bb:40:c0:
90:8b:19:64:1b:e9:6c:14:c9:e2:a1:cf:2d:e2:e6:
e8:2d:76:d8:7e:af:64:da:b3:29:4e:a5:72:d7:33:
d1:a3:75:10:57:c9:b8:ac:c2:5a:eb:41:a2:af:a3:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:40:A8:8D:9E:59:F6:AF:00:C0:FF:EC:0F:F3:34:30:A4:2D:69:17
X509v3 Authority Key Identifier:
keyid:19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/EkCojZ5Z9q8AwP_sD_M0MKQtaRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/GRk7bk0L6JA155k5tQAvxcFsm8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:19:5c:a4:97:1e:18:84:35:c5:9a:79:58:01:00:e1:e0:70:
2c:43:2b:82:be:8d:e0:0c:be:38:1d:3c:16:77:dd:00:e9:13:
3a:43:14:37:9b:0c:60:6b:37:72:f1:b7:37:3b:a4:97:22:76:
62:c8:ac:60:b8:51:b5:1d:85:37:fe:67:ab:55:6c:e7:0a:0c:
94:66:46:5d:2f:5d:9f:9b:5b:44:53:77:cf:eb:73:ae:09:4d:
91:4e:1b:a7:fe:02:11:07:de:9e:09:41:03:18:b6:73:b1:e3:
99:d6:31:2a:ef:2f:c0:79:24:9a:bf:1f:6a:70:2d:3b:ff:86:
bc:10:47:eb:e9:35:a1:51:be:0e:7f:92:8e:14:77:53:46:09:
7d:3e:f6:ec:cc:e7:98:6f:79:3a:2b:4b:b7:66:ea:9a:13:ea:
94:13:ac:3e:74:33:cb:e3:15:3f:df:36:1d:a7:28:81:17:c6:
8c:65:27:3a:10:37:92:63:ea:08:d4:48:5e:fa:6e:0d:b1:4e:
80:f3:7d:27:6c:8e:b9:de:91:d9:3c:89:9d:b5:f5:ee:6d:a9:
4f:18:4c:ba:57:ca:8c:eb:ef:27:c6:39:d9:a3:87:84:7d:a2:
cc:b9:2a:d9:ac:82:20:c7:97:94:70:fa:bb:63:5f:d0:38:7a:
12:b7:78:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:45:04 2025 by rpki-client