Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/9oIFfFKS5ZXWfwIUfzEtOwZpWd0.roa
File: 9oIFfFKS5ZXWfwIUfzEtOwZpWd0.roa (raw, json)
Hash identifier: lDWoovZ8+sTs8zDUfRT6nL1amXlIAL6UzMPoEbIiZ5Q=
Subject key identifier: F6:82:05:7C:52:92:E5:95:D6:7F:02:14:7F:31:2D:3B:06:69:59:DD
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 018663A278C0B8FE5541BAF1BE4A4BB33DDF
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/9oIFfFKS5ZXWfwIUfzEtOwZpWd0.roa
Signing time: Sat 18 Feb 2023 08:27:17 +0000
ROA not before: Sat 18 Feb 2023 08:27:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60255
IP address blocks: 185.208.88.0/22 maxlen: 24
2a0b:32c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:63:a2:78:c0:b8:fe:55:41:ba:f1:be:4a:4b:b3:3d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Feb 18 08:27:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f682057c5292e595d67f02147f312d3b066959dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:ac:96:de:75:63:e3:a0:7a:2c:08:70:66:
e7:47:62:df:43:41:83:67:23:dc:a7:4f:40:5d:d7:
24:cc:e4:0b:85:88:43:31:17:76:56:26:19:18:10:
43:00:9f:3a:30:64:1e:65:58:8c:1f:45:48:3d:c9:
64:79:12:36:6b:68:6e:c6:59:f6:2f:b7:b9:46:1f:
19:a0:2f:9b:af:fc:e1:9d:03:30:1f:2f:e6:31:c8:
a7:a6:ef:7c:d9:8c:9f:f1:dd:f8:5f:97:a7:10:57:
4f:da:44:7a:23:d3:a6:d1:4c:39:10:c7:6f:e2:74:
f6:34:79:ae:e1:fc:76:ba:2c:ce:5f:5f:c1:11:b4:
a8:fd:1d:34:f6:c0:88:98:91:63:64:b9:b7:31:b9:
50:42:b2:19:97:93:b3:94:53:e5:6e:87:c0:a3:fd:
55:59:59:9e:7a:04:80:49:04:bd:b7:c5:10:0a:89:
e9:9d:0f:51:48:16:a0:6e:71:f5:bb:07:44:9b:24:
ee:eb:45:d3:91:d1:3e:ab:fd:db:16:21:76:e6:0e:
ec:4a:d9:33:58:e5:e1:79:76:cb:3f:fc:f7:b7:66:
9c:d0:43:ef:95:e8:72:9b:30:e5:1f:ff:94:86:c4:
7a:68:7f:3e:67:6d:f0:e7:d4:6a:52:b3:04:89:bc:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:82:05:7C:52:92:E5:95:D6:7F:02:14:7F:31:2D:3B:06:69:59:DD
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/9oIFfFKS5ZXWfwIUfzEtOwZpWd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.88.0/22
IPv6:
2a0b:32c0::/29
Signature Algorithm: sha256WithRSAEncryption
75:02:41:7a:39:2a:47:00:68:68:c1:e4:13:37:32:82:45:e3:
ed:39:3a:e0:18:d3:aa:51:75:a5:2c:74:c4:e8:94:40:5c:9e:
1c:09:f2:24:63:3c:d1:fd:97:23:28:fc:56:45:b5:5b:7a:4c:
0f:24:5d:90:e2:aa:e6:90:2d:b5:77:fb:89:83:33:b7:7b:16:
ed:fa:cb:30:58:1d:f1:52:32:d3:b0:9c:33:6a:f6:f7:ff:15:
1b:8d:6a:de:13:ca:b7:06:d0:54:a2:68:81:46:7b:16:72:cc:
8d:26:3f:34:e1:2a:44:59:d1:c0:50:ed:e1:e1:bb:16:5f:27:
51:45:7e:f9:5f:c6:15:48:73:ad:fe:7e:2b:05:f0:3b:72:d1:
bc:9d:b3:1c:30:e3:8f:12:53:07:87:0f:28:7b:1b:14:3e:fa:
f5:35:f2:dd:bd:ad:5b:87:3b:25:8c:29:2d:8e:26:6d:31:ab:
4b:26:01:55:ec:56:f1:3d:29:78:ce:f5:b0:64:7e:5d:e3:99:
27:aa:7d:c1:aa:4c:0f:3d:b2:cc:23:eb:37:42:df:b4:50:73:
d8:42:87:fc:f3:21:f7:af:ef:3e:50:c6:16:ca:f2:66:d6:3d:
7d:29:1c:7c:0c:1e:67:a1:c1:af:a5:0a:3b:42:f6:c6:07:07:
71:b6:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:59 2025 by rpki-client