Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/0X4JMLCcpXQrZCPErPo3rJn9JxQ.roa
File: 0X4JMLCcpXQrZCPErPo3rJn9JxQ.roa (raw, json)
Hash identifier: XhKMwPcm5MZpfWOGmsx7gGNrJG4Wkbhho30/F4i4Nag=
Subject key identifier: D1:7E:09:30:B0:9C:A5:74:2B:64:23:C4:AC:FA:37:AC:99:FD:27:14
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 0E72B3E4
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/0X4JMLCcpXQrZCPErPo3rJn9JxQ.roa
Signing time: Sat 01 Jan 2022 13:06:19 +0000
ROA not before: Sat 01 Jan 2022 13:06:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203649
IP address blocks: 185.208.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242398180 (0xe72b3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Jan 1 13:06:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d17e0930b09ca5742b6423c4acfa37ac99fd2714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:8d:b0:8b:03:94:c9:0d:66:c8:84:4a:3a:
40:4f:53:d7:f9:1a:65:28:90:e7:59:93:dc:8e:3f:
53:75:41:a4:42:6d:8a:54:21:c4:b6:bb:f5:01:28:
7a:f3:9b:cc:d3:45:4f:48:3c:82:fb:b3:98:69:9a:
8e:fe:84:15:6d:b0:a2:51:a8:c4:20:7b:ac:51:7e:
d6:b1:a8:ef:c1:fc:96:7e:81:da:6c:26:7e:7f:a5:
29:b9:8d:3a:f2:32:10:97:72:65:49:a6:48:a5:24:
b3:e8:6c:c3:f7:8e:22:b9:db:26:eb:81:1e:fa:8a:
be:d0:1f:f6:f6:ca:04:82:07:f5:22:24:ad:3d:d6:
66:a8:2f:02:5c:3a:00:13:6c:56:62:fa:c0:5e:f1:
20:4c:34:77:5c:89:f2:23:35:4a:45:0d:51:85:a1:
bd:50:65:ed:7e:9b:a2:cc:6a:23:a8:61:ec:47:55:
9d:ec:71:01:5b:36:48:ca:fd:4d:2d:df:93:be:40:
fe:59:a9:b2:96:c6:a5:0b:0e:51:c9:86:d0:cf:13:
94:71:41:4a:f5:05:27:a3:74:d8:19:d0:53:c1:8f:
d9:f8:0f:3d:04:11:ad:55:49:ae:01:95:9a:08:19:
fb:6a:cd:7f:01:1a:3a:f5:53:b0:1f:fd:1a:7a:b2:
e8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7E:09:30:B0:9C:A5:74:2B:64:23:C4:AC:FA:37:AC:99:FD:27:14
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/0X4JMLCcpXQrZCPErPo3rJn9JxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.88.0/22
Signature Algorithm: sha256WithRSAEncryption
43:03:b6:10:e5:9c:35:8b:f4:90:8d:fb:de:39:ca:69:2d:67:
f1:5d:ad:28:1b:72:59:56:2a:c6:40:76:c9:45:a3:e3:a6:f3:
59:4f:84:a5:f5:b0:51:34:6c:d4:68:a6:52:17:5d:f4:34:f1:
65:66:d9:fc:28:df:06:04:c5:17:c8:f5:be:d1:1b:3f:b9:ae:
ee:46:91:78:ec:f9:73:28:93:61:ec:ab:87:4e:8c:a8:26:0e:
97:cb:f2:de:0a:70:ed:cf:9b:08:68:a9:fb:e8:5e:25:41:1c:
20:aa:85:40:7c:14:9c:4a:bd:0a:d8:3d:a6:25:cd:a7:10:0b:
1b:39:89:5f:5e:ae:2b:13:17:42:4e:e2:2e:60:de:e4:33:6f:
fc:ab:f9:4a:86:87:e8:1b:91:53:3d:2d:4d:5d:3a:df:dc:a2:
5a:d0:cf:28:3e:81:61:5f:d6:cf:3b:1f:c5:d2:9f:8b:a8:c8:
11:df:24:a5:98:3f:8e:25:d2:fa:6c:a3:55:ad:76:56:2b:5c:
6e:fd:22:41:0b:e0:91:7e:e1:0b:7a:ee:cc:70:73:96:ae:b2:
44:66:90:04:5c:ce:75:e9:91:72:be:e4:8e:14:e5:68:72:2c:
1b:0d:cc:f8:7e:a4:95:39:fe:e3:c7:89:8f:18:6f:5e:0f:a3:
0d:02:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:28 2025 by rpki-client